California Privacy Notice (CCPA/CPRA)
Last updated: September 27, 2026
This notice adds to our Privacy Policyand applies to California residents. It lists the categories of personal information Coinsel collects, how we use and disclose it, and the rights California residents have under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).
1. Categories of personal information we collect
In the last 12 months, we have collected the following categories of personal information, as the CCPA defines them. Privacy Policy Section 1 has the detail behind each row.
| CCPA category | Examples on Coinsel | Source |
|---|---|---|
| Identifiers | Email address, account ID and IP address. For dealer offer reports we keep a one-way hash of the IP address, not the address itself | You, automatically |
| Customer records | Billing address, card brand, last 4 digits and expiration date. The full card number goes directly to Stripe, never to us | You, our payment processor |
| Commercial information | Your plan and plan history, portfolio holdings and what you paid, sales you record, want lists, show prep sheets and the purchases you log on them, and offers dealers made you that you report | You |
| Internet or other electronic network activity | Pages viewed, features used, coins looked up, device and browser data, cookies, whether you opened or clicked an alert email, and which prompt brought you to the pricing page | Automatically |
| Geolocation data | The ZIP code and radius you set, turned into approximate coordinates, or your approximate city from your IP address when you haven't set one. We do not collect precise GPS location | You, automatically |
| Professional or employment-related information | Only if you claim a dealer listing: your business email address and the fact that you act for that business | You |
| Inferences | Aggregated usage patterns, such as which features lead people to upgrade, used to improve the Service. Not used to build a profile of you for advertising | Derived from the above |
We do not collect protected classification characteristics, biometric information, sensory data, or education information. Section 5 below covers sensitive personal information.
2. How we use it
We use personal information for the business purposes in Privacy Policy Section 2. That covers running and securing your account, showing you the coin market in your area, matching auction lots to your want list and emailing you about them, building prep sheets, working out and publishing median dealer offers, verifying dealer listing claims, delivering price and market data, billing, transactional email, support and improving the Service. We do not use it to build advertising profiles about you.
3. Who we disclose it to
We disclose personal information to the service providers listed in Privacy Policy Section 4, such as Supabase, Vercel, Stripe, Resend, Trigger.dev and Google Analytics. Each is bound by contract to use it only to perform services for us. These disclosures are for our business purposes, not in exchange for money or anything else of value.
Some features also show information to other people, as described in Privacy Policy Section 3. If a dealer has claimed their listing, they can see the reports about their shop without the name or contact details of whoever sent them. Visitors see only median offers built from five or more reports. A response you post on a claimed dealer listing is public. None of this is a sale or sharing of personal information under the CCPA.
4. Do we sell or share personal information?
No. Coinsel does not sell personal information, and does not share it for cross-context behavioral advertising, as the CCPA defines those terms. We have not sold or shared personal information in the last 12 months.
Because we don't sell or share, there is nothing to opt out of today. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out preference signal, and we don't load analytics cookies unless you later choose to accept them in the cookie banner.
5. Sensitive personal information
The CCPA gives you the right to limit a business's use of sensitive personal information to what is needed to provide the service. Coinsel doesn't collect government ID numbers, precise geolocation, biometric data, health information or similar categories. The limited card information we hold (card brand, last 4 digits and expiration date) is used only to show your billing status and process renewals. Because we don't use sensitive personal information beyond what the Service needs, there is nothing further to limit. You are welcome to contact us with questions.
6. Your CCPA rights
If you are a California resident, you have the right to:
- Know and access. Ask for the categories and specific pieces of personal information we have collected about you, where it came from, why we collected it, and the categories of third parties we disclosed it to.
- Delete. Ask us to delete personal information we collected from you, subject to certain exceptions, such as billing records we must keep, security, or legal compliance. Dealer offer reports you submitted stay in the published medians with the link to your account removed, so they no longer identify you.
- Correct. Ask us to correct inaccurate personal information we hold about you.
- Opt out of sale or sharing.As described above, we don't sell or share, so there is currently nothing to opt out of.
- Limit use of sensitive personal information. See Section 5.
- Non-discrimination. We will not deny you the Service, charge you a different price, or give you a lower level of service because you used a CCPA right.
7. How to submit a request
To use any of these rights, contact us and tell us which right you are using. You can also authorize someone to make a request for you. We will ask for written proof of that authorization and may still need to verify your identity directly.
We verify requests by confirming you control the email address on your account, and may ask for more information to verify a request for specific pieces of information. We will respond within 45 days of a verifiable request. Where reasonably necessary we may take another 45 days, and we will tell you if we do.
8. Changes to this notice
We may update this notice as our data practices change. We will post the new version here with a new date.
9. Contact us
Questions or requests about this notice: contact us.