Privacy Policy · CryptoLwa

Core commitment: Crypto Lwa does not store, sell, or share your banking details, credit card numbers, crypto wallet private keys, or any sensitive financial credentials. Payment processing is handled entirely by third-party processors (Stripe). We never see your raw card data.

1. Who We Are

Crypto Lwa ("we," "us," "our") operates the website cryptolwa.io and associated mobile applications. We provide crypto market intelligence, AI-generated analysis, educational content, and prediction market insights.

Data Controller: Crypto Lwa · contact: [email protected]

Crypto Lwa is not a registered investment advisor, broker-dealer, or financial institution. All content is for informational and educational purposes only.

2. What Data We Collect

Account Information

Name and email address (provided at registration)
Hashed password (never stored in plain text)
Membership tier and subscription status
Date of account creation and last login

Technical Data

IP address (for fraud prevention and rate limiting)
Browser type and operating system (from HTTP headers)
Pages visited and time on page (aggregate analytics only)
Referring URL

Communication Data

Emails you send to our support address
Feedback or survey responses (optional)

3. What We Do NOT Store

We explicitly do NOT store or process:

Credit card or debit card numbers, CVVs, or expiry dates
Bank account numbers, routing numbers, or IBAN details
Crypto wallet private keys, seed phrases, or mnemonic phrases
Social Security numbers or national identity document numbers
Biometric data of any kind
Medical or health information
Government-issued ID numbers (unless required by law for KYC — not currently required)

Payment transactions are processed exclusively by Stripe, Inc. or on-chain crypto transfers to our disclosed wallet address. Stripe is PCI-DSS Level 1 certified. We receive only a transaction confirmation token — never your card details.

4. How We Use Your Data

Data Type	Purpose	Legal Basis (GDPR)
Name & Email	Account creation, login, membership management, service emails	Contract performance (Art. 6(1)(b))
IP Address	Fraud prevention, abuse detection, rate limiting	Legitimate interest (Art. 6(1)(f))
Usage Analytics	Improving site performance and content quality	Legitimate interest (Art. 6(1)(f))
Cookies (essential)	Session management, authentication state	Necessary for service delivery
Cookies (analytics)	Aggregate usage statistics	Consent (Art. 6(1)(a))

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Cookies & Tracking

We use the minimum number of cookies necessary to operate the site. You can manage cookie preferences at any time using the banner shown on first visit.

Essential Cookies (always active)

clwa_session — Authentication session token (expires: session)
clwa_consent — Your cookie consent choice (expires: 1 year)

Analytics Cookies (require consent)

Aggregate page-view statistics — no cross-site tracking, no fingerprinting

We do not use advertising cookies, tracking pixels, or cross-site behavioural profiling tools.

6. Third-Party Services

Service	Purpose	Data Shared	Policy
Stripe	Payment processing	Billing name & email only	stripe.com/privacy
Cloudflare	CDN, DDoS protection, edge functions	IP, HTTP headers	cloudflare.com
LiveCoinWatch	Live crypto price widgets	None (JS widget)	livecoinwatch.com
Google Fonts	Typography	IP address (font request)	google.com/privacy
Anthropic Claude API	AI prediction analysis	Market question text only — no PII	anthropic.com/privacy

7. GDPR Rights (EU & EEA Residents)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (EU 2016/679):

Right of Access (Art. 15) — Request a copy of all personal data we hold about you.
Right to Rectification (Art. 16) — Correct inaccurate or incomplete data.
Right to Erasure (Art. 17) — Request deletion of your personal data ("right to be forgotten").
Right to Restriction (Art. 18) — Limit how we process your data in certain circumstances.
Right to Portability (Art. 20) — Receive your data in a structured, machine-readable format.
Right to Object (Art. 21) — Object to processing based on legitimate interest.
Right to Withdraw Consent (Art. 7(3)) — Withdraw analytics consent at any time without penalty.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. MiCA Compliance Statement

The European Union's Markets in Crypto-Assets Regulation (MiCA — Regulation (EU) 2023/1114) sets standards for crypto-asset service providers. The following disclosures are made in the spirit of MiCA transparency requirements:

Crypto Lwa is a crypto intelligence and education platform — we are not a licensed crypto-asset service provider (CASP), exchange, custodian, or investment firm.
We do not offer, sell, or facilitate the purchase or sale of crypto-assets directly.
Our AI-generated analysis and prediction market commentary are not investment advice and do not constitute a recommendation to buy, sell, or hold any crypto-asset.
Past performance discussed on this platform is not indicative of future results.
Investing in crypto-assets involves significant risk of total loss. Never invest more than you can afford to lose.
No content on this platform should be construed as a white paper, prospectus, or offering document under MiCA Article 6.

Members in EU/EEA jurisdictions should be aware of applicable national regulations and consult a licensed financial advisor before making investment decisions.

9. ADA / WCAG Accessibility

Crypto Lwa is committed to making our platform accessible to all users, including those with disabilities. We strive to conform to the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA.

Our accessibility features include:

Semantic HTML with proper heading hierarchy
ARIA labels and roles on interactive elements
Keyboard navigation support throughout the site
Sufficient color contrast ratios
Alt text on all meaningful images
Resizable text without loss of functionality

If you encounter an accessibility barrier, please contact [email protected]. We are committed to resolving issues within 10 business days.

10. Data Retention

Data Type	Retention Period
Account data (active members)	Duration of membership + 90 days after cancellation
Account data (deleted accounts)	30 days (to allow recovery), then permanently deleted
Payment records	7 years (tax and legal compliance)
Server logs (IP, request)	30 days, then automatically purged
Support emails	2 years, then purged unless ongoing dispute
Analytics data	Aggregate only; no individual records retained

11. Children's Privacy

Crypto Lwa is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will delete it immediately. If you believe a minor has registered, contact [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be notified by email to active members at least 14 days before they take effect. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, data subject requests, or accessibility concerns:

Crypto Lwa Privacy Team
Email: [email protected]
Accessibility: [email protected]
Response time: Within 30 days for GDPR requests; 10 business days for accessibility issues.