Privacy Policy
Effective: November 8, 2026
Operator of cryptogalaxy.online: · Contact:
We collect as little as possible. Browsing the galaxy, guides and calculators requires no account and no cookies.
What we process, why, and on what legal basis
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Country derived from your IP address (not stored) | Showing partner links licensed in your region | Legitimate interest and legal compliance (Art. 6(1)(f), (c)) | Your browser session only |
| Which partner link was clicked + country | Click statistics (sent to us by e-mail, no IP or identifier) | Legitimate interest (Art. 6(1)(f)) | 12 months |
| E-mail, role, country, language (RefBridge waitlist) | Telling you when RefBridge launches | Consent (Art. 6(1)(a)) | 12 months or until you withdraw |
| E-mail, nickname, favorite coins, predictions, points (account) | Running your account, the game, Earn and referrals | Contract (Art. 6(1)(b)) | While your account exists; deleted within 30 days after closure |
| Offer completions reported by offerwall partners, payout address | Crediting points, paying rewards, preventing fraud | Contract and legitimate interest (Art. 6(1)(b), (f)) | While your account exists; payout records up to 8 years where accounting law requires |
| Google Ads cookies (only if you click "Accept") | Measuring which ads bring visitors | Consent (Art. 6(1)(a)) | Per Google's cookie lifetimes; withdraw any time via "Cookies" in the footer |
Who processes data for us
- Namecheap (web hosting, server logs)
- Supabase (accounts and database, hosted in Frankfurt, EU)
- Netlify (country lookup only, no storage)
- Google (ad measurement, only with your consent)
- Offerwall partners (when you open an offer in the Earn section, the partner processes data under its own privacy policy; we pass only your internal user ID)
Some of these providers may transfer data outside the EU under the European Commission's standard contractual clauses or adequacy decisions. We do not sell personal data.
Your rights
You can request access to, correction or deletion of your data, restrict or object to processing, ask for a copy in a portable format, and withdraw consent at any time (this does not affect processing before withdrawal). Write to us at and we reply within one month.
You also have the right to complain to a data protection authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu, or the authority in your EU country of residence.
Security
Data is sent over HTTPS, database access is restricted with row-level security, and secret keys never reach the website code. No system is perfectly secure, and we will notify affected users and the authority of a breach as the law requires.
Changes
We update this policy when our processing changes and show the effective date at the top.