PRIVACY POLICY
HodlingBTC is operated as a non-commercial public-interest project. The site uses Google Analytics to measure visitor traffic, and this runs only after you accept analytics cookies in the consent banner. If you decline, no analytics cookies are set and no analytics data is collected. The site shows no advertising and does no profiling. Cloudflare Web Analytics, which is cookieless, is also used to count page views and requires no consent.
The personal data processed comprises the IP address observed by Cloudflare at the edge for routing and abuse protection, and, only with your consent, the usage data collected by Google Analytics. No personal data is shared with third parties beyond the platform relationships with Cloudflare and, where consented, Google.
Cookies and consent
We set analytics cookies only after you accept them in the consent banner. They are used solely to measure visitor traffic through Google Analytics (Google Ireland Limited). The legal basis is your consent, Article 6(1)(a) GDPR. You can withdraw consent at any time: reopen cookie settings. Withdrawing stops further analytics collection. Cloudflare Web Analytics is cookieless and runs under legitimate interest, Article 6(1)(f) GDPR, with no consent required.
Controller
HodlingBTC is operated as a personal, non-commercial project. The controller for personal data processed via this site can be reached at [email protected].
What we process and why
This site sets no cookies, runs no advertising trackers, has no contact form, and uses no consent-based analytics. Static HTML pages are complemented by a small set of read-only JSON endpoints implemented as Cloudflare Pages Functions. The categories of personal data processed are limited to what is technically required to deliver the site:
- IP address at request time. When your browser connects to hodlingbtc.com, your IP address is observed by Cloudflare's edge so the request can be routed, the response can be returned, and basic abuse protection can be applied. Purpose: delivering the site and protecting it against abuse.
- Aggregate, cookieless traffic statistics. Cloudflare produces aggregate request metrics (page views, country, browser family, request count) for the project. These statistics do not use cookies, do not fingerprint individuals, and do not track visitors across other sites. Purpose: understanding aggregate traffic patterns.
- Server-side request logs. Cloudflare temporarily processes standard request log fields (IP, user-agent, timestamp, URL) as part of delivering and securing the service. Purpose: service operation, security, and debugging.
Legal basis
Processing is based on the controller's legitimate interest under Article 6(1)(f) GDPR in (i) operating a working website, (ii) protecting it against abuse and attack, and (iii) understanding aggregate traffic patterns. We do not place cookies that require consent, we do not run advertising or analytics that profile individual visitors, and we do not process special categories of personal data.
Recipients and processors
The site is hosted on Cloudflare Pages. Cloudflare, Inc. acts as a processor for hosting, edge delivery, security filtering, and aggregate analytics. To render the live Bitcoin price, your browser fetches data directly from Coinbase's public API; Coinbase therefore receives your IP address, user-agent, and the price-endpoint URL as part of that request. If you choose to email the address listed above, your message is delivered to a Google mailbox; Google then acts as the email recipient's provider. No other recipients receive personal data from this site.
Retention
HodlingBTC operates no servers of its own and stores no personal data outside of email correspondence. Retention of edge logs and aggregate analytics is controlled by Cloudflare and described in Cloudflare's own documentation. Email correspondence sent to the contact address is kept only for as long as needed to handle the inquiry and is deleted on request.
International transfers
Cloudflare, Inc. is headquartered in the United States and operates a global network. Request data may therefore be processed outside the European Economic Area. Cloudflare's Data Processing Addendum relies, where required, on the European Commission's Standard Contractual Clauses as the safeguard for international transfers. The current status of any additional mechanism, including the EU-US Data Privacy Framework, is set out in Cloudflare's public trust documentation: cloudflare.com/trust-hub/gdpr and cloudflare.com/privacypolicy.
Your rights
If you are in the EU, UK, or another jurisdiction with equivalent rules, you have the right to: access the personal data we hold about you, request rectification of inaccurate data, request erasure, request restriction of processing, object to processing based on legitimate interest, and request portability of data you have provided to us. Because HodlingBTC stores no personal data outside of email correspondence, in practice these rights apply to any email you have sent us. Send any such request to [email protected].
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. In Sweden the supervisory authority is Integritetsskyddsmyndigheten (IMY), imy.se. You may also contact the supervisory authority in your country of residence or place of work.
Third-party data sources
The live Bitcoin price is fetched by your browser directly from Coinbase's public API, as
noted under Recipients and processors. All other third-party data, including stock prices and
public market metadata, regulatory filings from SEC EDGAR, and press releases from
company investor-relations sites, is fetched server-side by Cloudflare Pages Functions on
your behalf. Those providers see the server's IP address and our User-Agent string
(HodlingBTC [email protected]), not yours.
Automated decision-making
We do not use personal data for automated decision-making or profiling.
Changes to this notice
Material changes to this notice will be reflected by an updated "Last updated" date at the top of this page.