Privacy Policy

1. Data we collect

• Account data: display name, email address and a scrypt-hashed password. We never store passwords in plain text.
• Chat content: the messages you post in the community chat, together with a timestamp and your account identifier.
• Session data: a signed, httpOnly authentication cookie that keeps you signed in for up to 30 days.
• Basic technical records the hosting platform generates, such as request logs, for security and abuse prevention.

2. What we do not collect

We do not ask for your real identity, phone number, address or any payment details, because there is nothing to pay for. We do not use advertising networks, behavioural trackers, fingerprinting or social media pixels. We do not sell personal data, and there is no profiling or automated decision-making about you.

3. How your data is used

Account data is used to create your account, authenticate you and display your chosen name next to your chat messages. Email is used only inside the account record, for example to prevent duplicate registrations. Chat messages are shown publicly in the room and may be reviewed by moderators when a report or obvious abuse appears. Request logs are used to keep the service safe, for example to rate-limit spam.

4. Cookies and local storage

RefreshCoin sets exactly one cookie: an authentication session cookie. It is httpOnly, signed, marked SameSite=Lax and expires after 30 days. It contains no personal data beyond an opaque token that our server can verify. Details are on our Cookie Policy page. Your coin watchlist is stored in the local storage of your own browser and is never sent to us, so it stays on your device.

5. Third-party services

Market data, charts, the Fear & Greed index and news feeds are fetched server-side, so those providers normally see our server, not your browser. Coin logos are loaded by your browser directly from public logo CDNs, which means those CDNs can see your IP address and browser type as part of any ordinary image request. We choose public CDNs that do not set tracking cookies.

6. Storage and security

Account and chat data are stored in a database on our hosting infrastructure. Passwords are hashed with scrypt and cannot be read by anyone, including us. Session tokens are signed and cannot be forged without the server secret. Access to the administrative area is restricted to the site operator. No internet service can promise perfect security, but we keep the attack surface intentionally small.

7. Retention

Account data is kept for as long as your account exists. Chat messages remain part of the public room history unless a moderator removes them. When you ask us to delete your account, we remove the account record; messages you posted may stay in the history but are no longer linked to an active account.

8. Your rights

You can request a copy of the data connected to your account, ask for corrections, or ask us to delete your account entirely by writing to support@refreshcoin.xyz from the email tied to the account. We answer such requests within a reasonable time. You can also clear the session cookie in your browser at any moment to sign out everywhere the cookie was used.

9. Children

RefreshCoin is not directed at children. You must meet the minimum age in our Terms of Service to create an account, and we do not knowingly collect data from people below that age. If you believe a minor has registered, contact us and we will remove the account.

10. Changes to this policy

If our data practices change, for example because a new feature starts storing something new, we will update this page and the last updated date. Material changes will be announced on the site before they take effect.