Privacy Policy

1. Who we are

TokenMarketCap (tokenmarketcap.org, "we", "us") is a cryptocurrency market data website. We are the data controller for the personal data described in this policy. You can reach us at info@tokenmarketcap.org.

2. Data we collect

• Visit statistics, measured on our own servers: the page you open, the referring source and campaign tags (utm_*), approximate country and city derived from your IP address by our network provider, device type, browser, operating system and language. We do NOT store your IP address. We compute a pseudonymous visitor code from your IP address and browser signature with a key that changes every day and is then deleted, so visits cannot be linked across days or traced back to you.
• Analytics cookies (Google Analytics 4) — only if you allow them in the cookie banner. Without consent Google Analytics runs in a cookieless mode and does not store identifiers on your device.
• Community posts and sentiment votes: the display name and text you submit, and a one-way hash of your IP address and browser signature, used to enforce one vote per day, prevent spam and apply moderation.
• Listing applications: the project details and contact details you provide (for example e-mail, website, X, Telegram, Discord) so that we can review the application and contact you.
• E-mails you send us and our replies.
• Security data: requests are screened by Cloudflare (including Turnstile bot checks on forms), and security events such as blocked or rate-limited requests are logged.
• Member account (only if you sign in with a wallet): your wallet address, a display name (by default a shortened address), an optional e-mail address you enter, language preference, sign-in and session metadata (country, a device label such as “Firefox · Linux”, a one-way hash of your IP address, timestamps) and the watchlist and portfolio entries you choose to sync. We never receive your private keys or seed phrase; signing a sign-in message proves ownership of the address and is not a blockchain transaction.
• Data stored only in your browser: theme, currency, language, saved news, recent searches and your cookie choice — and, if you are not signed in, your watchlist and portfolio. This data stays on your device and is not sent to us.

We do not ask for, and you should never send us, private keys, seed phrases or exchange passwords.

3. Why we use it (legal bases)

• To operate the website and show the content you request — our legitimate interest in providing the service.
• To provide your member account (sign-in, synced watchlist and portfolio, session management) — performance of the service you ask for.
• To keep the site secure and prevent abuse, spam and fraud — legitimate interest.
• To produce pseudonymous visit statistics and improve the site — legitimate interest, limited by pseudonymisation.
• Analytics and advertising cookies — your consent, which you can withdraw at any time.
• To review listing applications and communicate with applicants — steps taken at your request before entering into an agreement.
• To comply with legal obligations and respond to lawful requests.

4. Who processes data for us

• Cloudflare, Inc. — hosting, content delivery, security, bot protection and e-mail routing.
• Google LLC — Google Analytics, only with your consent.
• TradingView, Inc. — the chart widget on coin pages is loaded from TradingView, which may process technical data under its own policy.
• WalletConnect / Reown — only if you click “Connect wallet”.

Market data providers are queried by our servers; your personal data is not sent to them. We do not sell personal data. Some providers process data outside your country, including in the United States, under safeguards such as Standard Contractual Clauses.

5. How long we keep data

• Pseudonymous visit records: only as long as needed for the statistics described above; aggregated reports that contain no identifiers may be kept longer.
• Community posts: until you ask us to delete them or they are removed by moderation.
• Member accounts: until you delete your account (Account → Data & privacy), which permanently removes your profile, linked wallets, sessions, watchlist and portfolio from our servers; sessions expire automatically after inactivity. Anonymous security records of account events are kept for up to 12 months.
• Listing applications: for as long as the listing is active and up to 2 years after it ends, unless the law requires longer.
• E-mails: as long as needed to handle your request.
• Security logs: for a short period needed to investigate and prevent abuse.

6. Your rights

Depending on where you live (including under the EU/UK GDPR and Turkish Law No. 6698 on the Protection of Personal Data, Article 11), you may request access to your data, correction, deletion, restriction, objection, data portability, and information about the recipients of your data; and you may withdraw consent at any time. Send your request to info@tokenmarketcap.org. We reply within 30 days. You also have the right to lodge a complaint with your data protection authority (in Türkiye: the Personal Data Protection Authority, KVKK).

7. Children

The website is not directed to anyone under 18 and we do not knowingly collect their data.

8. Changes

We may update this policy. The date at the top shows the latest version; material changes will be announced on the website.