Privacy policy

Who we are

CryptoSafeRoute is the controller for the personal data described here. You can reach the desk at desk@cryptosaferoute.com.

Data we collect

If you create an account we keep your email, your name, and the kind of account you have. Your password is stored in a protected form.

If you file a report we keep the text you submit and the link to your account.

Sign in keeps you signed in for up to eight hours. You can sign out sooner.

We keep brief operational notes when a request fails, so we can run the site. They are not used for advertising.

Why we collect it

Account data and sessions are processed so you can sign in and so we can limit each person to their own reports. The lawful basis is the contract of providing the account.

Reports are processed to run the public safety record. The lawful basis is our legitimate interest in publishing scam warnings, balanced against the reporter's privacy. Your display name may appear on a published report.

Security logs are processed to defend the desk against abuse. The lawful basis is legitimate interest.

Cookies

A necessary cookie keeps you signed in. Another necessary cookie supports form checks. These are not used for advertising and they are not optional if you want an account.

Analytics cookies are off until you choose Allow analytics on the privacy banner. If you reject them, the analytics script is not loaded. If a measurement id is configured and you allow analytics, we load Google Analytics with IP anonymization and with advertising storage denied.

You can change your mind by clearing the consent cookie and choosing again. The banner returns when no choice is stored.

How long we keep it

Sessions expire after eight hours and can be revoked sooner. Account data stays until you ask for erasure, unless we must keep a minimal record to defend a legal claim.

Published reports stay public because deleting the warning would hide the safety record. Pending reports you withdraw are deleted. Rejected reports may be kept so the same claim is not filed in a loop.

Analytics data, if you allow it, is kept under Google's retention settings for the property.

Your rights

If the GDPR applies to you, you can ask for access, correction, erasure, restriction, or a portable copy of the account data we hold. You can object to processing based on legitimate interest.

You can withdraw analytics consent at any time. Withdrawal does not affect processing that happened before you withdrew.

You can complain to your local supervisory authority. We would like the chance to resolve the issue first, at desk@cryptosaferoute.com.

Sharing

We do not sell personal data. A published report is visible to anyone who visits the site. If analytics are allowed, Google receives the measurement events described above. Hosting and database providers process data only so the desk can run.