Privacy Policy

Last updated 9 August 2026

CoinBuggie is a research index for publicly disclosed crypto vulnerability reports. We collect the minimum needed to run accounts, memberships and the site itself. We do not sell personal data.

What we collect

  • Account data: email address, and the name and profile picture Google returns if you sign in with Google.
  • Membership data: plan, status and renewal dates. Card details are handled by Stripe and never reach our servers.
  • On-chain payment data: the wallet address and transaction hash you use to pay, which are public by nature.
  • Usage data: pages viewed, searches and filters applied, plus standard server logs (IP address, user agent, timestamps) used for security and abuse prevention.

Why we use it

  • To authenticate you and keep your session secure.
  • To provide member-only content and process renewals.
  • To operate, debug and improve search, ranking and the report index.
  • To send transactional email such as confirmations and password resets.

Who processes it

We use a small set of processors under their own terms: Supabase (database, authentication), Stripe (card payments), Resend (transactional email), and our hosting and CDN provider. Access is limited to what each needs to perform its function.

Cookies

We use cookies and local storage strictly to keep you signed in and remember interface preferences. We do not run advertising or cross-site tracking cookies.

Retention

Account and membership records are kept while your account is active and for as long as tax and accounting rules require afterwards. Server logs are kept for a short operational window. Deleting your account removes your profile and associated records.

Your rights

You can request access to, correction of, export of, or deletion of your personal data, and you can object to certain processing. Email privacy@coinbuggie.com and we will respond within 30 days.

Report content and third parties

Indexed reports are already public disclosures from third-party platforms. If you are a researcher or protocol and want an entry corrected or removed, contact us and we will review it. Case studies in our writing lessons are anonymized: no researcher, programme or original link is shown.

Changes

We may update this policy; material changes will be reflected in the date above and, where appropriate, notified by email.

See also our Terms of Service.