Privacy policy
Effective November 3, 2026
The short version
KryptoKap is built to work without knowing who you are. There are no accounts, no sign-up, no email collection, no advertising trackers and no cookies set by KryptoKap. What you save (watchlist, portfolio, screens and settings) stays in your own browser unless you choose to create a Vault key, and even then it's encrypted on your device before it leaves, so we can't read it.
- No accounts, names or passwords, and no email required. The contact form only keeps a reply address if you choose to give one.
- No cookies set by KryptoKap, and no ad or cross-site tracking.
- We don't sell, rent or share personal information. We don't have any to sell.
- Your saved data is yours: you can export it, move it or delete it yourself at any time.
Who we are
This policy covers kryptokap.com ("KryptoKap", "we", "us"), operated by KryptoKap.com. Questions or requests: use the contact form or email mint@kryptokap.com.
What's stored in your browser
KryptoKap uses your browser's local storage (not cookies) to remember things you choose to save or settings you change. This data stays on your device and is not sent to us, except as described under Vault keys.
| What | Why |
|---|
| Portfolio transactions (coin, amount, price, fee, date, type) | To show your holdings, cost basis and profit or loss |
| Watchlist | Coins you starred |
| Followed categories | To show their changes since your last visit |
| Price alerts (coin, condition and level) | To tell you on the page, or with a browser notification if you allowed it, when a level is reached |
| Saved screens | Screener filters you named and saved |
| Lessons read | To mark Learn lessons you've finished |
| Theme, table density and privacy blur | Your display preferences |
| Recently viewed pages and recent searches | Quick links back to what you looked at |
| A small market snapshot from your last visit, and the last figures you saw for each coin you opened | The "since your last visit" summary and the "since you looked" strip on coin pages |
| Your Vault key, if you created or opened one | So this device stays synced |
Some short-lived items are kept only until you close the tab (for example, the coins in the compare tray and whether you dismissed a notice). You can clear all of this at any time through your browser's settings for this site. Clearing it erases your saved data on that device, so the Saved panel offers a backup file first.
Vault keys (optional sync)
If you create a Vault key in the Saved panel, KryptoKap can keep your saved data in sync across devices without an account:
- Your browser encrypts your saved data with your Vault key (AES-256-GCM, with the encryption key derived from your Vault key using PBKDF2) before anything is uploaded.
- Our server stores only the encrypted text, the time it was saved, and an identifier made by one-way hashing your key. The identifier can't be turned back into your key, and we never receive the key itself.
- Because we can't read your Vault or see your key, we can't recover a lost key, reset it, or tell you what's inside.
- Anyone who has your key can open and change your Vault, so treat it like a password.
- You can delete your Vault yourself at any time with "Delete my Vault" in the Saved panel. Deletion removes it from our server immediately (copies may remain in routine server backups for a limited time, still encrypted).
To prevent abuse, Vault saves are limited per visitor. For this we store a short scrambled code made from your network (IP) address and the current hour, never the address itself, and these records are deleted within two hours.
Moving data by link, QR code or file
The "Move without a key" option packs your saved data into a link or QR code. That data travels inside the link itself and is not stored by KryptoKap. Anyone who has the link can see what it contains, so only send it to yourself. Backup files are created and read entirely in your browser.
Cookies
KryptoKap does not set any cookies, first-party or for advertising. Because we don't use non-essential cookies, there's no cookie banner.
One third-party note: live prices stream directly from Coinbase's public price feed, and Coinbase's security provider may set a short-lived anti-bot cookie on that connection. KryptoKap can't read it, it isn't used for advertising, and many browsers block such third-party cookies by default.
Analytics
To understand how many people visit and which pages are useful, we may use GoatCounter, a cookie-free, privacy-focused analytics service. It counts page views, referring sites, broad device type and country, without cookies, without building profiles and without following you across other sites. We do not use Google Analytics or advertising pixels.
Services your browser connects to
Some features load data directly in your browser, which means those providers receive your IP address and normal browser information (as with any website you visit), under their own privacy policies:
- Coinbase (exchange.coinbase.com): live prices and the big-trades tape.
- Our hosting and network providers, which deliver and protect the site.
If you allow notifications for price alerts, your browser shows them itself; KryptoKap doesn't use a push service, so nothing about your alerts leaves your device.
Fonts, icons, the QR code generator and the rest of the site are served by KryptoKap itself. When you follow a link to a news story, a project's website, an explorer or an exchange, you leave KryptoKap and that site's own policy applies.
Data we collect on our server
KryptoKap's server collects market data, not visitor data. It regularly downloads prices and market information from CoinMarketCap, Coinbase, DefiLlama and mempool.space, and headlines from news outlets' public RSS feeds. None of this involves information about you.
Like every website, our hosting provider automatically keeps standard web server access logs (IP address, date and time, page requested, browser type and referring page) for security and troubleshooting. KryptoKap doesn't use these logs to identify or profile visitors, and they're kept according to the host's normal retention schedule.
Contact form
If you send a message through the contact form, we store what you type (topic and message), the reply address if you choose to give one, the page you sent it from and the time. We use it only to read and answer your message, and delete it after 12 months. To limit spam, the form uses the same short-lived scrambled code described under Vault keys, deleted within two hours. Please don't include passwords, Vault keys or wallet seed phrases. To have a message deleted sooner, send another message asking us to, including the reply address you used.
Embedded price cards
If another website embeds a KryptoKap price card, your browser loads that card from KryptoKap when you view that site. The card sets no cookies and collects nothing beyond the standard server logs described above.
Affiliate links
Some coin pages may show a button to buy a coin through a partner exchange. These are clearly labeled links. If you click one, you go to the partner's site, and KryptoKap may earn a commission if you sign up or trade. We don't share any information about you with the partner; the link only tells them you came from KryptoKap.
How long we keep data
- Browser storage: until you clear it or delete it in the Saved panel.
- Vault data: until you delete it. A Vault that hasn't been opened or saved for 24 months may be removed.
- Contact form messages: 12 months.
- Rate-limit records: under two hours.
- Hosting access logs: according to the host's standard schedule.
Your choices and rights
Because KryptoKap doesn't hold information that identifies you, most rights requests are something you can do yourself instantly: view, export, move or delete your saved data in the Saved panel or your browser settings, and delete your Vault with one button. Depending on where you live (for example under the GDPR in Europe and the UK, or the CCPA/CPRA in California), you have rights to access, correct, delete and port personal information, and to object to certain processing. You can contact us at mint@kryptokap.com; we'll help where we can, though we may be unable to link a request to any data because we don't know who our visitors are. We do not sell or share personal information as those terms are defined under California law.
Security
The site is served over HTTPS. Vault data is encrypted in your browser before upload, and our server stores only the encrypted form. No system is perfectly secure, so keep your Vault key private and keep a backup file of anything important.
Children
KryptoKap is meant for adults. It isn't directed at children under 13 (or under 16 where local law requires), and we don't knowingly collect information from them.
International visitors
KryptoKap is operated from the United States. If you use a Vault key, the encrypted data is stored on our servers, which may be outside your country.
Changes to this policy
If we change how KryptoKap handles information, we'll update this page and the date at the top. Significant changes will be noted on the site.