Privacy Policy

Who we are

This site (banksforcrypto.com) is operated by Stephan Kulik, an individual based in Cyprus and the data controller for the purposes of the GDPR. Postal address: 111 Chlorakas Avenue, Shop 9, Suite 546, 8220 Chloraka, Paphos, Cyprus. Contact: [email protected].

What data we collect

Analytics data (Google Analytics 4): page views, referrer, device type, browser, approximate geo-location (country/region), and interaction events (e.g. affiliate clicks). Collected via Google Analytics with IP anonymization. Loaded only if you allow the Analytics purpose — see cookie consent management below.
Affiliate referral tracking (Impact.com): when you arrive on this site we run a "track impression" call to Impact.com that records the referring partner (if any) and a session identifier so that any subsequent affiliate signup can be attributed to the correct partner. No personal data is collected by this call; only referral attribution. Loaded only if you allow the separate Affiliate attribution purpose — see cookie consent management below.
Country detection (freeipapi.com): we make a client-side request to freeipapi.com to determine the visitor's country code. This is used to hide affiliate call-to-actions for platforms that are legally restricted in the visitor's region. No personally identifiable data is sent; only IP address → country code.
Email correspondence: when you contact us at [email protected], we retain the email for as long as necessary to respond and resolve the matter.
We do not operate user accounts, run newsletters, or collect names, phone numbers, or payment data.

Legal basis (GDPR)

Analytics: consent under Art. 6(1)(a) GDPR (managed via cookie consent).
Affiliate referral tracking: consent under Art. 6(1)(a) GDPR, given separately from analytics (its own purpose in the cookie consent banner).
Country detection: legitimate interest under Art. 6(1)(f) GDPR — hiding CTAs for platforms that are legally restricted protects users and the site operator; the data point (country code) is non-identifying.
Email correspondence: legitimate interest under Art. 6(1)(f) GDPR.

When you first visit any page on banksforcrypto.com, a consent banner asks for your consent to two separate purposes: Analytics (Google Analytics 4) and Affiliate attribution (the Impact.com Universal Tracking Tag). Accept all and Reject all are one click each; Settings lets you switch each purpose on or off (both start off) and save. Your choice is stored in your browser's local storage under marketing_consent (one yes/no value per purpose) and applies only to the device + browser you made the choice on.

If you allow Analytics: Google Analytics 4 (gtag.js) loads on the current page and on later pageviews, and drops its own cookies in your browser.
If you allow Affiliate attribution: the Impact.com Universal Tracking Tag loads on the current page and on later pageviews, and drops its own cookies.
If you allow neither (Reject all): neither GA4 nor Impact.com loads. No analytics or attribution cookies are dropped on any page. Each tag loads only with its own purpose — allowing one never loads the other.

To change your choice or withdraw consent at any time: click "Cookie settings" in the footer of any page. The consent banner reopens with both purposes shown as you set them, and you can change or withdraw each one separately. Withdrawing Analytics stops GA4 and deletes the _ga cookies; withdrawing Affiliate attribution deletes the IR_* cookies and reloads the page without the Impact tag. If GA4 has already loaded on the page you are on, withdrawing Analytics also reloads that page, so nothing queued before you withdrew can be sent afterwards. Your previous choice stays in force until you save a new one.

Fallback if the footer link is ever unavailable: open your browser's developer tools (right-click anywhere on the page → Inspect, or press F12) → Application tab → Local Storage → banksforcrypto.com → delete the marketing_consent entry. Reload the page; the banner will reappear.

Specific cookies, by purpose (full list with retention periods in our Cookie Policy):

Analytics — GA4: _ga, _ga_LK4JE0D2RJ (24 months default, see Google's policy).
Affiliate attribution — Impact.com: visitor session identifiers used for partner attribution. See impact.com/privacy-policy/ for details.
Strictly necessary — local storage: the marketing_consent record itself (set by our consent banner, no third party).

Affiliate links

We use affiliate links with UTM parameters and referral identifiers. When you click an affiliate link and open an account at the linked platform, that platform may pay us a commission. See editorial guidelines for independence.

Third parties

Google (Google Analytics 4) — policies.google.com/privacy · loaded only with consent
Impact.com (affiliate attribution) — impact.com/privacy-policy/ · loaded only with consent
freeipapi.com — country-code lookup — freeipapi.com
Affiliate networks of each platform we link (Nexo, Revolut, Crypto.com, Wirex, Ledn, Coinbase, Binance, Ledger, etc.) — each sets its own cookies on click.

Your rights (GDPR)

You have the right to: access, rectify, erase, restrict, port, and object to the processing of your personal data; to withdraw consent at any time; and to lodge a complaint with a supervisory authority (in Cyprus: the Office of the Commissioner for Personal Data Protection, dataprotection.gov.cy).

Exercise these rights by emailing [email protected].

Data retention

Google Analytics: 14 months (default).
Impact.com: see Impact's retention policy at impact.com/privacy-policy/ (typically tied to attribution-window length per affiliate program).
Email correspondence: up to 3 years after the matter is resolved.
freeipapi.com lookups: the result is cached in your browser sessionStorage and cleared when the session ends.
Local-storage marketing_consent flag: persists until you clear browser storage.

International transfers

Google Analytics is processed by Google LLC (US) under Standard Contractual Clauses. Impact.com is operated by Impact Tech Inc. (US) under Standard Contractual Clauses. freeipapi.com is processed outside the EU.

Changes

This policy may be updated as practices or regulations change. The effective date at the top reflects the last material change.