Privacy policy
Coinmidco is built so that using the wallet does not require telling us who you are. This policy explains the little we process, why, and what you can ask us to do about it.
The short version
- Your recovery phrase and private keys never leave your device. We cannot read them, and no copy exists on our servers.
- An account needs an email address and a password. We verify that address at sign-up, and identity verification is required before you can send or withdraw funds. That is the extent of what we ask for.
- We do not sell or rent personal data, and we do not use it for advertising.
- Account features collect a little more. Cloud backup, price alerts, support history and verification records are tied to your account, and we process the minimum needed to run them — described below.
- You can ask us to delete what we hold, subject to the retention rules in this policy.
What we never collect
- Recovery phrases, seed words, private keys or keystore files.
- Your PIN, wallet password, or biometric data.
- Anything about your wallet beyond the public blockchain data needed to display balances and history.
- Contacts, photos, files or clipboard contents, unless you paste something into a feature that performs the action you asked for.
What we process
Data falls into three buckets, only the last of which reaches our servers.
| Category | Where it lives | Why |
|---|---|---|
| Wallet data phrase, keys, addresses, balances, settings | Your device only, encrypted at rest | So the wallet works. We have no copy and cannot restore it. |
| Account data email address, hashed password, verification state | Our servers | Signing in, restoring your wallet backup, security alerts, keeping a support history |
| Identity data when you verify the document images and details you submit, and the review outcome | Our servers | Meeting the verification requirement that applies before funds can be sent, and any legal obligations that follow from it |
| Technical data IP address, user agent, timestamps, request paths | Server logs, short-lived | Rate limiting, abuse and fraud prevention, diagnosing outages |
| Notification data optional push endpoint, device token | Our servers | Delivering the price and security notifications you asked for |
| Support data messages you send us | Our servers and mailbox | Answering you and keeping a record of what was said |
Storage on your device
The wallet uses your browser’s local storage and IndexedDB to keep your encrypted vault, selected network, display preferences and a cached copy of public market data. This is strictly functional storage: it makes the app work and lets it open offline. We do not set advertising cookies, we do not embed third-party tracking pixels, and we do not build a cross-site profile of you. Clearing site data removes all of it, which will also remove the wallet, so back up your recovery phrase first.
Third-party services
Like every wallet, Coinmidco relies on outside infrastructure. Requests needed to show live data are made from your device, so the provider sees your IP address as any web request would.
| Provider type | What it receives |
|---|---|
| Blockchain RPC and indexer nodes | Public addresses you view, plus your IP address |
| Market-data aggregators | Price requests for the assets shown, no wallet data |
| Email delivery | Recipient address and message content, if you enabled email features |
| Push delivery | Device token and notification content |
| Hosting and CDN | Requests to this website, including IP address and user agent |
Each provider is bound by its own privacy policy and processes data under contract with us where such an agreement is required.
How long we keep data
- Technical logs: short-lived, typically days to a few weeks.
- Account and identity data: while the account is open, and for a limited period afterwards to meet legal, tax and accounting obligations.
- Support messages: kept while useful for continuity of service, then deleted or archived.
- Wallet data: never held by us, so there is nothing to retain or delete.
Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent you previously gave. Write to the address below to exercise any of these. We may need to verify that the request belongs to you, and because we hold so little, the answer is often that there is nothing to act on.
Security
Data in transit is encrypted, account passwords are stored hashed rather than in plain text, and access to production systems is limited to staff who need it. No system is perfectly secure, which is precisely why the design keeps your keys out of our reach.
Children
Coinmidco is not intended for anyone under 18 and we do not knowingly collect data from children. If you believe a child has used the service, contact us and we will act on it.
International transfers
We operate infrastructure in more than one region, so data may be processed outside the country you live in. Where required, transfers are covered by recognised safeguards such as standard contractual clauses.
Changes to this policy
If this policy changes materially we will update the date at the top of the page. For changes that significantly affect account holders we will notify you in the app or by email before the change takes effect.
Contact
- Privacy questions and requests: [email protected]
- General support: [email protected]
- Security disclosures: [email protected]
Data controller: COINMIDCO GLOBAL EXCHANGE LTD, a company registered in England and Wales. Requests about your data go to [email protected].
The terms of service and the risk disclosure also apply to your use of the wallet.
Questions about your data?
Ask us directly. The short answer: your keys stay on your device, and we do not sell anything about you.