Privacy Policy
Last updated: January 1, 2026
YOUR PRIVACY MATTERS
CoinMafia is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are a decentralized application that prioritizes user privacy and minimal data collection. Please read this policy carefully.
1. Information We Collect
We collect information in several ways when you use our platform:
Wallet Information
- Wallet Address: Your Ethereum-compatible wallet address, which serves as your primary identifier on the platform
- Transaction Signatures: We verify your wallet ownership through Sign-In with Ethereum (SIWE) signatures
- Multiple Wallets: If you connect additional wallets, we store those addresses linked to your account
Profile Information (Optional)
- Display Name: A username you choose to display
- Email Address: If provided during registration (optional)
- Profile Picture: Avatar image uploaded to IPFS
- Social Links: Twitter and Telegram handles if you choose to add them
Automatically Collected Information
- Session Data: IP address and user agent stored with authentication sessions for security purposes
- Cookie Consent Records: Your cookie preferences and consent timestamp
- Token Page Views: Aggregate view counts on token pages (not linked to individual users)
Blockchain Data (Public)
The following data is publicly available on the blockchain and indexed by our platform:
- Token creation transactions and contract deployments
- Trading activity on bonding curves (buys/sells)
- Wallet addresses involved in transactions
- Token holder balances and transaction history
Note: This data exists on public blockchains regardless of our platform. We merely index and display it for convenience.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Authentication: To verify your identity and provide secure access to your account
- Platform Operations: To display your profile, tokens you've created, and trading activity
- Notifications: To send you alerts about followers, token launches, and other platform activity (automatically deleted after 30 days)
- Social Features: To enable following other users and building community connections
- Ratings & Reviews: To display creator and token ratings from the community
- Security: To detect and prevent fraud, abuse, and unauthorized access
- Legal Compliance: To comply with applicable laws and respond to legal requests
3. Information We Do NOT Collect
PRIVACY BY DESIGN: We intentionally minimize data collection. The following data is NOT collected or stored:
- Private keys or seed phrases (never shared with us)
- Detailed browsing history or page-by-page tracking
- Personal identification documents (we do not perform KYC)
- Financial account information (bank accounts, credit cards)
- Location data beyond what's derivable from IP address
- Biometric data
- Data from third-party social media accounts (beyond links you provide)
4. Data Storage and Retention
Your data is stored as follows:
| Data Type | Storage | Retention |
|---|---|---|
| Wallet Address | PostgreSQL Database | Until account deletion |
| Profile Data | PostgreSQL Database | Until account deletion |
| Avatar/Logo Images | IPFS (Decentralized) | Indefinite (immutable) |
| Session Data | PostgreSQL Database | Session duration |
| Cookie Consent | Browser + Database | 1 year |
| Notifications | PostgreSQL Database | 30 days (auto-deleted) |
| Blockchain Data | PostgreSQL (indexed) | Indefinite (public data) |
5. Cookies and Tracking
We use cookies to operate our platform. Our cookie usage is governed by your consent preferences:
- Necessary Cookies: Required for authentication and security (always active)
- Functional Cookies: Remember your preferences (optional)
- Analytics Cookies: Help us understand platform usage (optional)
- Marketing Cookies: Enable relevant advertising (optional)
For more details, please see our Cookie Policy.
6. Third-Party Services
We use the following third-party services that may process your data:
IPFS (via Pinata)
Decentralized file storage for token logos and user avatars. Files uploaded to IPFS are publicly accessible and immutable.
WalletConnect (Reown)
Wallet connection service for linking your crypto wallet. See WalletConnect Privacy Policy.
Blockchain RPCs
We connect to blockchain networks to read and submit transactions. Your wallet address and transaction data are transmitted to these networks.
7. Data Sharing and Disclosure
We do NOT sell your personal data. We may share information in the following circumstances:
- Public Profile Data: Your username, avatar, and wallet address are publicly visible to other users
- Blockchain Transactions: All blockchain activity is inherently public
- Legal Requirements: We may disclose data if required by law, court order, or government request
- Safety: To protect against fraud, security threats, or to enforce our Terms of Service
- Service Providers: With third-party services that help operate our platform (listed above)
8. Your Rights and Choices
You have the following rights regarding your data:
Right to Access
You can view your profile data at any time through your account settings.
Right to Correction
You can update your profile information at any time through your account settings.
Right to Deletion
You can request deletion of your account. This will anonymize your profile data (name, email, avatar, social links). Note that your wallet address and on-chain transaction history cannot be deleted as they exist on public blockchains.
Right to Withdraw Consent
You can change your cookie preferences at any time through our cookie settings. You can also disconnect your wallet to stop using the platform.
9. GDPR Compliance (EEA Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on consent (cookies), contract performance (platform services), and legitimate interests (security)
- Data Portability: You may request a copy of your data in a machine-readable format
- Right to Object: You may object to certain processing activities
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
10. CCPA Compliance (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You can request information about what personal data we collect and how it's used
- Right to Delete: You can request deletion of your personal data
- Right to Opt-Out: We do NOT sell personal data, so no opt-out is necessary
- Non-Discrimination: We will not discriminate against you for exercising your privacy rights
11. Security
We implement appropriate technical and organizational measures to protect your data:
- Encrypted connections (HTTPS/TLS) for all data transmission
- Secure session management with cryptographic tokens
- Database access controls and authentication
- Regular security reviews and updates
- No storage of private keys or seed phrases (impossible to compromise)
However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
12. Children's Privacy
Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
13. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place when transferring data internationally, including standard contractual clauses where required.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by updating the "Last Updated" date and, where appropriate, providing additional notice. Your continued use of the platform after changes constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through our official community channels. We will respond to your request within a reasonable timeframe.