This Privacy Policy describes how HalalCrypto (halalcrypto.exchange) collects, uses, and protects your personal information. We are committed to protecting your privacy and handling your data with transparency. This policy complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
HalalCrypto is operated as a sole proprietorship providing educational cryptocurrency screening tools. For privacy matters, the data controller is:
For GDPR purposes, we act as a Data Controller for personal data you provide to us directly, and as a Data Processor in limited contexts where we handle data on behalf of our users.
We collect minimal data necessary to operate and improve the Platform. Here is a complete breakdown:
| Data Type | What We Collect | Why | Retention |
|---|---|---|---|
| Email Address | Provided voluntarily when joining newsletter or drip course | To send educational emails, product updates, course content | Indefinitely until you unsubscribe or request deletion |
| Hashed IP Address | One-way hashed IP (SHA-256 salted) from page requests | Anonymous analytics — counting unique visitors, detecting abuse | 90 days, then purged |
| API Usage Logs | Endpoint called, timestamp, response code, API key identifier (not the key itself) | Rate limit enforcement, debugging, fraud prevention | 90 days |
| Watchlist Data | Coins you add to your personal watchlist (for registered users) | To provide personalized watchlist functionality | Until account deletion |
| Payment Data | Handled entirely by Paddle (our Merchant of Record). We receive only: subscription status, plan type, Paddle customer ID | Subscription management | As long as your account is active + 7 years for tax compliance |
| Account Info | Email, hashed password (if registered), subscription tier | Account access and feature gating | Until account deletion + 30 days |
We are intentionally minimal with data collection. We do not collect:
Disclosure: HalalCrypto displays advertisements through Google AdSense. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to this and other websites.
Google AdSense uses the DoubleClick cookie to serve interest-based ads. You can opt out of personalized advertising by visiting Google's Ads Settings or www.aboutads.info. Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visits to our site and other sites on the internet.
Google AdSense may collect:
HalalCrypto has no control over and no access to the data collected by Google AdSense. This data is governed by Google's Privacy Policy. You can manage your Google ad preferences at adssettings.google.com.
For our Cookie Policy including instructions on disabling these cookies, see our Cookie Policy.
We use collected data for the following purposes and legal bases (GDPR Article 6):
We do not sell your personal data to any third party. We do not use your data for automated decision-making that produces legal or similarly significant effects on you.
We share data with third parties only where necessary:
All third-party processors are bound by data processing agreements requiring them to protect your data in accordance with applicable law.
We implement appropriate technical and organizational measures to protect your data:
No system is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law, within 72 hours of becoming aware (GDPR Art. 33).
HalalCrypto serves a global audience. Your data may be processed in countries outside your country of residence, including:
For users in the European Economic Area (EEA), transfers to countries without an adequacy decision are covered by Standard Contractual Clauses (SCCs) with our processors. For users in the UK, we rely on the UK IDTA where applicable.
Depending on your jurisdiction, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request that we delete your personal data ("right to be forgotten").
Request correction of inaccurate or incomplete personal data.
Receive your data in a structured, machine-readable format.
Request that we restrict processing of your data in certain circumstances.
Object to processing based on legitimate interests or for direct marketing.
California residents: we do not sell personal information. No opt-out is needed, but you may exercise all CCPA rights.
Withdraw consent for email communications at any time via the unsubscribe link or by emailing us.
To exercise any of these rights, email us at [email protected] with "Privacy Request" in the subject line. We will respond within 30 days. We may need to verify your identity before fulfilling requests.
If you are in the EEA and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority (DPA).
HalalCrypto is not intended for users under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at [email protected] and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date and post a notice on the Platform. For significant changes, we will notify registered users by email where practicable. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
For questions or concerns about this Privacy Policy, contact: [email protected]