Privacy Policy

If you never create an account: nothing that identifies you. We do not run advertising trackers or sell data.

If you create an account, we store the details you give us: your email address, display name, username, and — only if you choose to add them — your age, bio and profile picture. Your password is never visible to us; it is hashed and held by our authentication provider.

If you sign in with Google, we receive your email address, name and profile picture from Google. We never receive your Google password.

If you contact us, we keep the message and the email address you provide so we can reply.

To create and secure your account, to show your profile, to keep you signed in, and to reply when you contact us. That is the whole list. We do not use your data to build advertising profiles, and we do not sell it to anyone.

We keep the number of third parties deliberately small. Each one processes data only to provide its service to us:

• Supabase — authentication, database and image storage for accounts and profiles.
• Vercel — hosting and delivery of the website.
• Google— only if you choose “Continue with Google” to sign in.

Market data comes from third-party providers (including CoinGecko, DefiLlama and GoPlus). Those requests are made by our servers and carry no personal information about you.

We use cookies strictly to keep you signed in and to remember your light/dark theme preference. We do not use advertising or cross-site tracking cookies. Clearing your cookies will simply sign you out.

Your profile is kept for as long as your account exists. If you delete your account, the associated profile and any uploaded picture are deleted along with it.

You can access and correct most of your information yourself from your profile page. You can also request a copy of your data, ask us to correct or delete it, or object to our processing it. If you are in the UK or EU, these rights come from the GDPR; similar rights apply in many other places.

To exercise any of them, email our privacy contact. We aim to respond within 30 days. You also have the right to complain to your local data protection authority.

KoinLens is not intended for anyone under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Data is transmitted over HTTPS, passwords are hashed by our authentication provider, and profile records are protected by row-level security so one account cannot read another’s. No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your data, we will tell you.

If we change this policy we will update the date at the top. Material changes will be announced on the site.