COINFOLIO – PRIVACY POLICY
Last Updated: Monday May 4th, 2025
This Privacy Policy describes how CoinFolio collects, uses, discloses, and protects information relating to visitors and users of our Services. This Policy is intended to comply with the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), and to align with similar requirements in certain other U.S. state privacy laws.
1. Applicability
Certain U.S. states grant residents specific privacy rights regarding their personal information. This Policy explains those rights and CoinFolio’s practices for residents of California and other states with similar privacy laws (together, “U.S. State Privacy Laws”).
2. Information We Collect
Includes: account information (such as name, email address, login credentials, and contact details), portfolio data (including assets and valuations you input), notes, images, device and usage data (such as IP address, browser type, and device identifiers), cookies and similar technologies, valuation metadata, and limited information from Price Guide or other valuation tools.
3. Use of Information
We use information to operate and provide the Services and portfolio tools, personalize recommendations and content, provide valuation displays and related analytics, maintain and improve the Services, debug and troubleshoot, prevent fraud and ensure security and integrity, communicate with you (including about updates, changes, and support), comply with legal obligations, and enforce our terms and policies.
4. Sharing Information
Certain context-relevant information is shared with service providers that perform services on our behalf (such as hosting, analytics, payment processors, and pricing providers), Price Guide (for valuation requests and pricing updates), and linkage recipients such as mintstategold.com if you choose to activate your account there. Linking is user-initiated and minimal necessary data is disclosed. We do not sell personal information or share it for cross-context behavioral advertising or targeted advertising.
5. Linkage With MintStateGold.com
You may choose to link your CoinFolio portfolio or account with mintstategold.com, also owned by Stuppler & Company, Inc. Linking:
- transfers only the minimum necessary data to enable linkage or account creation;
- is governed by Mint State Gold’s own Privacy Policy and Terms;
- does not enable trading or buying via CoinFolio.
6. Data Retention
We retain personal information for as long as necessary to provide the Services, comply with our legal and regulatory obligations, resolve disputes, protect our rights, and maintain business records. The specific retention period can vary depending on the nature of the information and the purposes for which we process it. When personal information is no longer reasonably necessary for these purposes, we will delete, de-identify, or aggregate it in accordance with applicable law.
7. Your Rights
Depending on where you live, you may have certain rights under U.S. State Privacy Laws with respect to your personal information, including:
- Right to know/access: The right to request confirmation of whether we process your personal information and to access that personal information, including the categories of personal information we collect, the categories of sources, the purposes for which we use it, and the categories of third parties to whom we disclose it.
- Right to delete: The right to request that we delete personal information we have collected from you, subject to certain exceptions (for example, where we need the information to provide the Services you requested, detect or prevent security incidents, or comply with legal obligations).
- Right to correct: The right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the information and the purposes of the processing.
- Right to data portability: The right to request a copy of certain personal information in a portable and, to the extent technically feasible, readily usable format that enables you to transmit the information to another entity.
- Rights to opt out of certain processing: U.S. State Privacy Laws may give you the right to opt out of (i) the “sale” of your personal information, (ii) “sharing” of personal information for cross-context behavioral or targeted advertising, and (iii) certain forms of profiling in furtherance of decisions that produce legal or similarly significant effects. CoinFolio does not sell personal information, does not share personal information for cross-context behavioral or targeted advertising, and does not engage in profiling that produces legal or similarly significant effects about you.
- Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights, such as by denying you Services, charging different prices or rates, or providing a different level or quality of Services, except to the extent permitted by law (for example, where a difference is reasonably related to the value of the data).
- Right to appeal: In some states, you may have the right to appeal our decision regarding your privacy rights request. If we decline to take action on your request, we will tell you how you can appeal the decision in our response, consistent with applicable law.
We do not intentionally collect or use “sensitive” personal information as defined under U.S. State Privacy Laws (such as precise geolocation, biometric identifiers, or information about your racial or ethnic origin, religious beliefs, or health conditions) in connection with the Services. If you choose to provide any such information in free-form fields (for example, notes), you do so voluntarily, and we will treat it as personal information in accordance with this Policy.
If you are a resident of a state that provides these rights, you (or your authorized agent, where applicable) may submit a request to exercise your rights by contacting us at:
- Email: [email protected] Mail: at the postal address listed in the “Contact” section of this Policy.
We will verify your request using information we reasonably believe is reliable and that we have about you, which may include asking you to provide certain information associated with your account or interactions with us. If we cannot verify your identity, we may be unable to respond to your request as required by law and will inform you of this. We will respond to verifiable requests within the time periods required by applicable law (generally within 45 days, with the possibility of an extension where permitted and notified to you).
Authorized agents: Where permitted by law, you may designate an authorized agent to submit a request on your behalf. We may require the agent to provide proof of their authority and may also require you to verify your identity directly with us or confirm that you provided the agent permission to act on your behalf.
Appeals: If we deny your request (in whole or in part), you may have the right to appeal our decision. Instructions on how to submit an appeal, and the timeline in which we will respond, will be provided in our response to your request where required by applicable law.
GPC: CoinFolio recognizes and honors Global Privacy Control (“GPC”) signals. If your browser or browser extension sends a valid GPC signal, we treat it as a request to opt out of any sale or sharing of personal information for cross-context behavioral or targeted advertising under applicable law. As noted above, CoinFolio does not currently sell personal information or share it for cross-context behavioral or targeted advertising, but we will continue to recognize and honor GPC signals consistent with applicable requirements.
For residents of California and certain other U.S. states, we provide the following additional disclosures about our collection, use, and disclosure of personal information:
Categories of personal information collected: In the 12 months preceding the “Last Updated” date of this Policy, we may have collected the following categories of personal information (as these categories are defined under U.S. State Privacy Laws):
- Identifiers (e.g., name, email address, account identifiers, IP address).
- Customer records information (e.g., contact information, account profile details you provide).
- Commercial or transactional information (e.g., records of your use of the Services and portfolio-related activity within CoinFolio).
- Internet or other electronic network activity information (e.g., device and usage data, log information, cookie and similar technology identifiers).
- Geolocation data (on a general or approximate basis, such as city, region, or country derived from your IP address).
- Inferences drawn from the above (e.g., basic inferences about preferences or interests used to personalize certain aspects of the Services).
Sensitive personal information: We do not intentionally collect or use “sensitive” personal information as a distinct category for inferring characteristics about you or for purposes other than those allowed under U.S. State Privacy Laws. Any sensitive personal information that you choose to submit voluntarily (for example, in notes) will be handled as personal information in accordance with this Policy.
Sources of personal information: We collect personal information directly from you (for example, when you create an account, maintain your portfolio, or contact us), automatically from your devices and use of the Services (for example, through log files and cookies), and from service providers or partners that help us provide valuations or other functionality.
Purposes for which we use personal information: We use personal information for the business and commercial purposes described in the “Use of Information” section above, including to operate and provide the Services, personalize your experience, perform analytics, maintain security and integrity, debug and repair errors, comply with legal obligations, and as otherwise disclosed to you at or before the point of collection.
Disclosure of personal information: We may disclose the categories of personal information listed above to the following categories of recipients for the purposes described in this Policy: service providers that perform services on our behalf; analytics and measurement providers; Price Guide and similar valuation providers when you request valuations; other entities as part of a corporate transaction (if applicable, such as a merger or acquisition); and as required by law or to protect our rights. We do not sell personal information and do not share personal information for cross-context behavioral or targeted advertising.
Sales, sharing, and profiling: We do not sell your personal information, we do not share your personal information for cross-context behavioral or targeted advertising, and we do not use your personal information for profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
Do Not Track and GPC: Our Services are not currently configured to respond to browser “Do Not Track” signals. However, we recognize and honor Global Privacy Control (“GPC”) signals as described above, treating valid GPC signals as requests to opt out of any sale or sharing of personal information for cross-context behavioral or targeted advertising under applicable laws.
8. Cookies
See Cookie Policy.
9. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and destruction in accordance with applicable law.
10. Children
The Services are not directed to, and we do not knowingly collect personal information from, children under 13 years of age. If we learn that we have collected personal information from a child under 13, we will take reasonable steps to delete it. If you believe a child under 13 has provided us with personal information, please contact us using the information in the “Contact” section below.
11. Third-Party Links
Our Services may contain links to websites, products, or services operated by third parties. We do not control and are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites or services you visit or use.
12. Changes
We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this Policy and, where required by law, provide additional notice (such as by posting a notice on our Services). Your continued use of the Services after any update to this Policy constitutes your acceptance of the revised Policy.
13. Contact Us
[email protected]
Stuppler & Company, Inc.
PO BOX 543
Woodland Hills, CA 91367