Crypto Briefing — Privacy Policy

Last updated: October 10, 2026

This policy describes how Decentral Media, Inc. ("we," "us") handles information in connection with Crypto Briefing (pro.cryptobriefing.com). We built Crypto Briefing to be data-minimal: we collect the least we need to run the Service, and we do not collect your name.

1. What we collect

Account: your email address and a hashed password. That is the only direct identifier we ask for. We do not collect your name, address, phone number, or government identifiers, and we perform no identity verification (Crypto Briefing is not a brokerage).

Portfolio data: if you connect a brokerage, we receive read-only holdings, balances, and account metadata through our connectivity provider (SnapTrade). You connect your brokerage in SnapTrade's own connection portal, not on our pages. We never see or store your brokerage username or password. The only brokerage credential we keep is an encrypted, read-only access token that SnapTrade issues for your connection. If you add wallet addresses, we store the addresses encrypted and read public balances only — never private keys. Manual entries are stored as you provide them.

Usage and security data: standard server logs and, for abuse prevention on public endpoints, a keyed, non-reversible code derived from your IP address (an HMAC) retained only for the rate-limiting window. We do not run advertising trackers.

Early-access application answers: the survey responses you choose to submit.

Analytics & Usage Data

Product analytics. We use PostHog, a product-analytics service, to understand how people use Crypto Briefing — which pages and features are viewed, navigation and funnel paths, and aggregate usage patterns — so we can improve the product. PostHog acts as our data processor and stores this data on US-based infrastructure.

What we do NOT send to analytics. We do not send your financial information to our analytics provider. That means no account balances, holdings, positions, transaction amounts, linked-account details, or credentials are included in analytics events. We also mask input fields and exclude sensitive properties from capture.

What is collected. Pages viewed, the specific product features you use, your browser and device type, and a pseudonymous identifier so we can measure return visits. On our marketing pages we use automatic click/engagement analytics; inside the app we capture only specific actions and never your financial data.

Signed-in use. When you are signed in, we link your analytics events to a pseudonymous account code that our servers generate from your account. The code is not your email address, name, or account number, and we do not send those to our analytics provider. This lets us understand how the product is used across visits and devices. Sending a Global Privacy Control signal stops this too.

We do not sell your personal information. We do not sell or share (as those terms are defined under the California Consumer Privacy Act, as amended by the CPRA, and similar state laws) your personal information for cross-context behavioral advertising.

Your choices (opt-out). We do not sell or share your personal information. Product analytics is processed by PostHog as our service provider, under a written contract. To turn analytics off, enable Global Privacy Control in your browser; we then stop loading analytics automatically. To request access to, correction of, or deletion of your personal information, email support@cryptobriefing.com.

Visitors in the EEA, the UK and Switzerland. If your IP address places you in the European Economic Area, the United Kingdom or Switzerland, we do not load product analytics in your browser, so no analytics events are sent to PostHog from your visit. We decide this on our own servers by looking up the country of your IP address in an IP-to-country database stored on our servers; your address is not sent to anyone else for this lookup, and we do not store the country it returns. If the lookup does not place you in one of these countries (for example, because you use a VPN or your address is not in the database), analytics works as described in this section.

Attribution. IP geolocation by DB-IP, used under the Creative Commons Attribution 4.0 International License.

Do Not Track. We do not track you across other sites, so we do not respond to Do Not Track signals; we honor Global Privacy Control.

Your rights. Depending on your state, you may have the right to access, correct, or delete your personal information, and to opt out of sale/sharing. To exercise these, contact us at support@cryptobriefing.com. We will not discriminate against you for exercising them.

2. How we use information

To operate the Service (build your portfolio picture, generate your personalized intelligence), to secure it, to communicate with you (verification, notifications you enable, product updates), to review early-access applications, and to improve the product from feedback.

3. AI processing

Portions of the Service are generated with the help of AI model providers (such as Anthropic). What we send them is pseudonymous market content — holdings, weights, events, filings context — never your email or account identity. Our providers' API terms do not permit training their models on this data, and we do not train models on your personal information.

Service providers that operate parts of the Service under contract: cloud hosting (AWS), brokerage connectivity (SnapTrade), email delivery, AI model providers as described above, and product analytics (PostHog, US-based infrastructure).
Legal: if required by law, legal process, or to protect rights and safety.
Business transfers: if the Company is party to a merger or acquisition, information may transfer with proper protections.

5. Retention

We keep each category of information only as long as this list says. Backups are overwritten within 7 days, so deleted data can remain in a backup until then.

Account and portfolio data (your email address, hashed password and settings; the holdings, balances and activity read from a brokerage you connect; wallet addresses; manual entries): until you delete it. You can disconnect a brokerage, remove a wallet or a manual entry, or ask us to delete your account.
Product analytics (PostHog): up to 7 years, which is the retention period of our provider's plan. We delete your analytics data when you ask.
Server and application logs: 30 days.
Database backups: 7 days.
Rate-limit codes: the rate-limiting window only.

6. Your choices and rights

You can disconnect a brokerage or remove a wallet at any time, which stops collection from that source; you can ask us to delete the already-collected data from it. You can request full account deletion by emailing support@cryptobriefing.com (a self-serve deletion control is planned). You can request a copy of the personal information we hold about you. California residents: we do not sell or share personal information as defined by the CCPA/CPRA; you may exercise access and deletion rights via the same contact, without discrimination for doing so.

7. Security

Sensitive fields are encrypted at rest; all traffic is encrypted in transit; brokerage access is read-only by construction; secrets are held in managed secret storage, not application code. No system is perfectly secure, and we do not promise absolute security — but the Service is designed to hold as little sensitive data as possible: we never receive your brokerage password, wallet private keys or identity documents, and the only brokerage credential we store is the encrypted, read-only access token described in section 1.

8. Children

The Service is not directed to children under 13, and we do not knowingly collect their information. If you believe a child under 13 has provided us information, contact us and we will delete it.

9. International use

The Service is operated from the United States. If you use it from elsewhere, you consent to processing your information in the United States.

10. Changes

We will post updates here with a new date and notify you by email or in the app for material changes.

Your Privacy Choices

Crypto Briefing does not sell or share your personal information, and has not done so in the past 12 months. We honor Global Privacy Control: if your browser sends it, we do not load analytics. We show no third-party advertising to signed-in users. To make any other request about your information, email support@cryptobriefing.com.

EU and UK Privacy Rights

If you are in the European Economic Area or the United Kingdom, you can ask us for access to the personal information we hold about you, to correct it, to delete it, to restrict our use of it, to receive a copy in a portable format, and to object to our use of it. To make a request, email support@cryptobriefing.com; we will reply within the time the law allows. If you are not satisfied with how we handle a request, you can complain to your data protection regulator: in the United Kingdom, the Information Commissioner's Office (ico.org.uk); in the EEA, the supervisory authority in the country where you live or work.

Financial Privacy Notice

This notice follows the format of the federal privacy notice for financial information. It describes what Decentral Media, Inc. does with the personal information of people who use Crypto Briefing.

What we collect: your email address and a hashed password; and, if you connect a brokerage, the holdings, balances and account activity we read through SnapTrade, together with an encrypted, read-only access token. We never collect your brokerage username or password.
Why we share it: only with service providers that help us run the Service (cloud hosting, brokerage connectivity, email delivery, AI model providers and product analytics), when the law requires it, and in a business transfer such as a merger.
What we do not do: we do not sell your personal information, and we do not share it with other companies for their own marketing. Because we share it only for the reasons above, federal law gives you no right to limit this sharing.
How we protect it: sensitive fields are encrypted at rest and all traffic is encrypted in transit; brokerage access is read-only; secrets are held in managed secret storage.
Questions: email support@cryptobriefing.com.

Contact: Decentral Media, Inc. — support@cryptobriefing.com