How ChainCosts handles your data

Data controller

The data controller for chaincosts.com and its language editions is ChainCosts, operated by the ChainCosts Data Desk. For any privacy request, use the contact page or email [email protected] with the subject "Privacy request".

What we collect

1. Site analytics — only with your consent

Analytics measurement runs only after you accept it in the consent banner. If you decline, no analytics events are recorded. When enabled, we record page views, outbound link clicks, and form submissions, tagged with the page URL, the language edition, the page type, and a country-level location derived from your network address. The analytics software is self-hosted on our own infrastructure; analytics data is not sent to any third-party analytics vendor.

2. Click routing

When you follow a partner link, the request passes through our first-party click routing service before reaching the provider. The routing record contains the destination, the page you clicked from, the language edition, a country-level location, and a random click identifier. That identifier may be passed to the partner so a later sign-up can be attributed to ChainCosts. It contains no name, no email address, and nothing that identifies you to us.

3. Alert contacts — only if you subscribe

If you sign up for route alerts, we store the email address or Telegram handle you provide, your language edition, and the topics you asked about. Marketing messages are sent only if you tick the marketing consent checkbox on the form. Every message includes a way to unsubscribe.

What we never collect

• No account or login data — the site has no user accounts.
• No exchange, wallet, or on-chain data — we never see balances, addresses, or transactions.
• No payment data — you cannot pay us for anything on this site.
• No advertising identifiers and no third-party ad trackers.

Legal bases

• Consent (GDPR Art. 6(1)(a)) — analytics measurement and marketing alerts. Both are off by default and run only after you opt in.
• Legitimate interest (GDPR Art. 6(1)(f)) — click routing, so referral sign-ups can be counted and paid, and short-lived technical logs used for security and abuse prevention.
• Legal obligation (GDPR Art. 6(1)(c)) — records we must keep for accounting, where commission payouts require them.

Retention

• Analytics events: kept up to 14 months, then deleted or reduced to aggregates.
• Click routing records: kept up to 12 months, the window partner programs use to reconcile referral commissions, then deleted.
• Alert contacts: kept until you unsubscribe or ask for erasure, then removed from active systems.
• Security logs: kept up to 30 days.

Processors and infrastructure

• Cloudflare, Inc. — hosting and content delivery for the static site. Cloudflare operates a global network, so requests may be served from data centers outside the EU under Cloudflare's standard data-protection terms.
• Self-hosted analytics — runs on infrastructure we control; no third-party analytics processor.
• Self-hosted click routing — runs on infrastructure we control; partners receive only the random click identifier described above.

We do not sell personal data, and we do not share it with anyone beyond the parties listed here.

Your rights

You can request access to the data we hold about you, correction, erasure, restriction of processing, a portable copy, or object to processing based on legitimate interest. You can withdraw analytics consent at any time by reopening the cookie banner and declining; withdrawal stops future collection immediately. You can also lodge a complaint with your local supervisory authority.

To exercise any right, reach us through the contact page. We respond within 30 days.