← Back to registration

Privacy Policy

This Privacy Policy describes how Blind Monkeys ("we", "us", "our") collects, uses, and protects information when you use blind-monkeys.com (the "Service"). By using the Service, you agree to this policy.

1. Information We Collect

We collect only what is needed to run the Service:

• Account information: first name, last name, email address, hashed password (we never store plaintext passwords).
• Optional information: a Telegram username or chat ID if you opt in to receive crypto alerts via Telegram.
• Usage data: page views. IP addresses are hashed for rate-limiting and abuse prevention; we do not store raw IPs.
• Cookies: a single session cookie used to keep you logged in. We do not use advertising or third-party tracking cookies.

2. Information We Do Not Collect

• We do not collect or store exchange API keys, financial account numbers, government IDs, or payment information.
• We do not sell, rent, or share your personal information with advertisers.

3. How We Use Information

• To authenticate you and keep your session secure.
• To send transactional emails (registration approval, password reset).
• To send crypto alerts via Telegram, if you opt in.
• To improve the Service through aggregate usage analytics.
• To prevent abuse, spam, and unauthorized access.

4. Third-Party Services

We use the following third parties to operate the Service. Each receives only the minimum data necessary to perform its function:

• Google Cloud Platform — application hosting and data storage.
• Cloudflare — DNS, CDN, and DDoS protection.
• Google Workspace (Gmail) — outbound transactional emails.
• Telegram — delivery of crypto alerts, only if you opt in.
• FRED (St. Louis Fed) and alternative.me — market data sources. No personal data is sent to them.

We may also use privacy-respecting analytics to understand aggregate usage patterns.

5. Data Retention

We retain your account information while your account is active. If you request deletion of your account, we will delete your personal data promptly, except where we are legally required to retain it.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us via our contact form. We will respond within a reasonable timeframe.

7. Age Requirement

The Service is intended for users aged 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

8. Security

We take reasonable measures to protect your information, including encrypted connections (HTTPS), hashed password storage, and access controls on internal systems. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Users

The Service is operated from the United States. If you access it from outside the U.S., you understand that your information will be processed in the U.S.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Use our contact form.