Privacy Policy
Last updated: August 17, 2026
1. What we collect
When you create an account directly
- Login ID, password (stored as a bcrypt hash), email address, nickname
If you use Google Sign-In
- Your Google account's unique ID and email address
Optional
- Profile image (avatar), bio
Collected automatically while you use the Service
- IP address, access times, browser and device information
- Service usage records
Guests (chat without an account)
- IP address (used to prevent spam and abuse)
2. How we use it
- Account management: managing accounts and preventing abuse
- Providing the Service: chat, direct messages, notifications
- Improving the Service: usage statistics and analytics
- Support: responding to inquiries and sending service notices
3. How long we keep it
| Data | Retention |
|---|---|
| Account information | Until you delete your account, subject to the deletion rules described below |
| Chat messages | Automatically deleted after a period set by our operating policy |
| Direct messages | 1 year after they are sent, or 30 days after they are deleted by both participants ("Delete for me") or after account deletion, whichever comes first |
| Access logs | 30 days |
4. When you delete your account
Deleted from our active systems immediately
- Login credentials, email address, profile information (nickname, avatar, bio), chat messages, block list, notification and push subscription data, favorite coins
Deleted 30 days after account deletion
- Direct messages (the other person's copies remain with them unless they delete them)
Residual copies may remain in routine backups for a limited period before being purged. We may retain certain data for longer where required by applicable law.
5. Sharing
We do not sell your personal information. We may disclose personal information to service providers that process information on our behalf—such as hosting, analytics, or advertising providers—as described in this Privacy Policy. We may also disclose information with your consent or when required or permitted by applicable law.
Some third-party services, including Google Analytics and Google AdSense, collect information directly from your device through cookies and similar technologies, as described below.
6. Advertising and cookies (Google AdSense)
We show ads served by Google AdSense.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
- You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at DAA WebChoices.
- For more on how Google uses data when you use our site, see How Google uses information from sites or apps that use its services.
If you are in the European Economic Area, the UK, or Switzerland, we use a consent message to obtain the consents required by applicable law and Google's EU User Consent Policy before using advertising cookies or processing personal data for personalized advertising where consent is required.
For users in certain U.S. states, applicable privacy laws may provide additional rights, including the right to opt out of certain targeted advertising. You can use the opt-out tools linked above to manage personalized advertising.
7. Analytics
We use Google Analytics to understand how the Service is used, such as which pages are visited, approximate location, and device information. Google may process this information on our behalf. You can also opt out of Google Analytics using Google's Analytics Opt-out Browser Add-on.
8. Essential cookies
We use cookies that are necessary for the Service to work—for example, to keep you signed in. You can block cookies in your browser settings, but parts of the Service may not work properly without them. Analytics and advertising cookies are described in sections 6 and 7 above.
9. Security
- Passwords are hashed using bcrypt and are not stored in plaintext.
- Data is encrypted in transit over HTTPS.
- Access to systems that process personal information is restricted.
10. Your rights
You can access and correct your profile information in your account settings, and you can delete your personal information by deleting your account. Depending on where you live, you may have additional rights under local law—such as the right to access, correct, delete or restrict the processing of your personal data, or to object to processing. To exercise these rights, contact us at the address below.
11. International users
The Service is operated from the Republic of Korea. Your information may be processed in the Republic of Korea and in other countries where our service providers operate, including countries where Google or other technology providers process information.
12. Children
The Service is not intended for children under 14, and we do not knowingly collect personal information from children under 14. If you believe a child under 14 has provided us with personal information, please contact us so that we can take appropriate action.
13. Changes
If this policy changes, we will announce the changes on the Service. Changes will take effect 7 days after we post the updated policy on the Service.
14. Contact
Privacy questions: privacy@coinyong.com