Privacy

We don't sell your information.

My Coin Stack is built by Cedar Forge Labs, and we build software that respects the people using it. That means we collect as little data as we can get away with, we don't share what we do collect with advertisers or data brokers, and we don't use it to build an advertising profile of you.

This policy covers the My Coin Stack apps for iPhone, Android, the web, Apple Watch, Wear OS and TV, and this website. It sits alongside our Terms of Service.

Who we are

Cedar Forge Labs is responsible for your data (in GDPR terms, the "controller"). You can reach us at [email protected] or by mail:

Cedar Forge Labs
1702 Macy Drive
Roswell, GA 30076
United States

What we collect

• Your account: email address, display name, username, password (stored only as a one-way hash), and your two-factor and passkey settings.
• Your profile: anything you choose to add, such as a profile photo, bio, country, location and favorite series.
• Your collection: the coins, bullion, sets and notes you record, including what you paid, grades, storage locations, wishlists and goals, and the photos you attach.
• What you share with other members: Community posts, comments, polls and reactions; direct messages and their photo attachments; marketplace listings, offers and reviews; and transfers between collections. Message text is encrypted in our database.
• Purchases: whether you have My Coin Stack Pro, the plan, and the reference numbers from Apple, Google or Stripe that let us confirm it. The store or Stripe handles the payment itself; we never see your full card number.
• Device and security information: your device's push-notification token, app version and platform, an identifier our app-update server uses, and the IP address and time of sign-ins and sensitive account changes. We use these to deliver notifications and updates, to keep your account secure and to stop spam and abuse.
• Crash reports and diagnostic logs from the apps, so we can find and fix bugs. We strip passwords, tokens and personal details from them before they're stored.
• Usage analytics, described below. In Europe we only collect them if you agree.
• Things you send us: support requests, feedback, and reports about content or other members.
• How you found us: the answer to "how did you hear about us", an invite link you followed, or the campaign of a QR code you scanned (see "Measuring our marketing").

We don't collect your contacts, your precise location or your advertising ID, and we don't read the rest of your phone.

Why we use it, and our legal basis

The GDPR asks us to name a legal basis for each use. Ours are:

• To provide the service you signed up for (performance of our contract with you): your account, your collection and its sync across devices, valuations, reports, sharing with friends, the Community, messages, the marketplace, transfers, notifications you've turned on, and Pro.
• Our legitimate interests, balanced against yours: keeping accounts and the service secure, preventing spam, fraud and abuse, moderating content that's reported to us, fixing crashes, answering support requests, and measuring which marketing campaigns work (without identifying anyone).
• Your consent: usage analytics in the EU, EEA, UK and Switzerland, marketing emails, and any photo or notification permission your device asks you for. You can withdraw consent at any time, and doing so doesn't affect anything done before.
• Legal obligations: keeping purchase and tax records, and responding to valid legal requests.

Who else handles your data

We run the service ourselves, but a few companies provide the infrastructure underneath it. Each only gets what it needs to do that job, and is bound by a contract to protect it:

• OVHcloud (United States) rents us the servers our database and app servers run on. We administer them ourselves.
• Cloudflare stores the photos you upload and sits in front of our servers to protect them from attacks, which means it sees your IP address when you connect.
• Google provides Firebase Analytics in the apps, Google Analytics on this website, Firebase Cloud Messaging for Android and web notifications, and Google Play billing.
• Apple delivers notifications to Apple devices and handles App Store billing.
• Stripe processes Pro subscriptions bought on the web.
• Resend sends our emails, such as sign-in links, password resets and notifications you've opted into.

Other members see only what you choose to share: your public profile, posts, comments, listings and reviews, and whatever your privacy settings let your friends see. We may also disclose information when the law requires it, to protect someone's safety, or as part of a sale or merger of My Coin Stack, in which case this policy continues to apply to your data.

Where it lives

Your data lives on servers we administer, in data centers in the United States, with uploaded photos stored by Cloudflare. Cedar Forge Labs runs the machines, the database, and the software on top of them.

Running our own infrastructure means securing it is our job, and we treat that as part of the product rather than an afterthought. Every connection between the apps and our servers is encrypted with TLS, so nothing travels over the network in the clear. The disks holding the database are encrypted at rest, which keeps the data unreadable without our keys even if the hardware itself were taken. Backups are encrypted as well and kept apart from the live server. Production access is limited to the people at Cedar Forge Labs who need it.

If you're outside the United States

My Coin Stack is run from the United States, so your data is stored and processed there. If you're in the EU, EEA, UK or Switzerland, the providers above that receive personal data in the US do so under the European Commission's Standard Contractual Clauses (with the UK addendum for UK data), or under the EU-U.S. Data Privacy Framework where the provider is certified. Ask us and we'll tell you which applies to a given provider.

How long we keep it

• Your account, profile, collection and what you've shared: for as long as your account exists, or until you delete it.
• After you ask to delete your account: it's deactivated straight away and hidden from everyone. If you don't sign back in to restore it, it is permanently deleted after 30 days, once we've reviewed the request (for example, to finish an open marketplace deal or a pending transfer).
• Photos attached to direct messages: 90 days.
• Sign-in sessions: until you sign out or they expire. Records used to enforce posting limits are kept for 7 days.
• Crash reports and diagnostic logs: up to 90 days.
• Usage analytics: up to 14 months, then deleted by Google.
• Backups: backups roll over on a fixed schedule, so deleted data is gone from them within 90 days.
• Purchase records: as long as tax and accounting law requires, which is usually up to 7 years.
• Reports, moderation decisions and security logs: as long as needed to deal with abuse and protect the service, and no longer than 2 years after the account they concern is closed.

Your choices and rights

Wherever you live, you can:

• See and export your data: export your collection to CSV or Excel from Settings, or ask us for a copy of everything we hold about you.
• Correct it: edit it in the app, or ask us.
• Delete it: delete items any time, or delete your whole account in Settings → Delete account, or at web.mycoinstack.app/delete-account.
• Turn analytics or marketing email on or off in Settings in the app, and change your analytics choice for this website with "Analytics settings" at the bottom of any page.
• Control notifications and photo access in the app and in your device settings.

If you're in the EU, EEA, UK or Switzerland, the GDPR also gives you the right to access your data, to have it corrected or erased, to restrict or object to how we use it (including anything we do on the basis of legitimate interests), to receive it in a portable format, and to withdraw consent at any time.

To use any of these rights, email [email protected] from the address on your account. We may ask you to confirm it's you, and we'll respond within one month. You also have the right to complain to a data protection authority, such as the one in the country where you live (list of EU authorities) or, in the UK, the Information Commissioner's Office. We'd appreciate the chance to sort it out with you first.

What we don't do

We don't sell, rent, or share your data with advertisers or data brokers. We don't run advertising pixels, retargeting tags, or the kind of tracking networks built to follow you from site to site. We don't build a profile of you to monetize. And we don't use what's in your collection for anything other than running the service for you. Not what you own, not what you paid, not what it's worth.

Analytics we do use

We do use analytics, and we'd rather tell you than let you find out. This website uses Google Analytics, and the iOS, Android, and web apps use Firebase Analytics. They tell us which screens get opened, which features get used, and where people give up. Those are the things we need to know to decide what to fix next.

What they don't get is your collection. Analytics events never carry the coins you own, what you paid, your photos, or your notes; that stays on our own servers and is never sent to Google. Analytics is tied to an anonymous app or browser identifier rather than to your name or email, and we don't use it for advertising or hand it to data brokers.

If you're in the EU, EEA, UK or Switzerland, analytics stay off until you agree: the apps ask you once after you sign in, and this website asks before loading Google Analytics. Everywhere else, analytics are on by default; you can turn them off in the app's Settings, or for this website with "Analytics settings" at the bottom of any page.

Measuring our marketing

Some of our printed material and advertising carries a QR code or a short link. When one of those is used, we record that the link was followed: the time, the country, and whether the device was a phone or a computer. That tells us which campaigns are worth repeating.

To count repeat visits without identifying anyone, we convert the IP address and browser into a one-way fingerprint using a key that changes daily, and store only that. We do not store the IP address itself, and the fingerprint cannot be reversed or used to recognize you tomorrow, on another campaign, or anywhere else on the internet. No cookie is set for this.

Children

My Coin Stack is for people 18 and older, and we don't knowingly collect data from anyone younger. If you believe a child has created an account, tell us and we'll delete it.

Changes to this policy

If we change how we handle your data, we'll update this page and the date at the top. If the change is significant, we'll also tell you in the app or by email before it takes effect.

Questions

If anything here is unclear, or you'd like to know exactly what's stored about you, get in touch and we'll explain plainly.