Privacy Policy
Crypto Attention FZCO
Version: 1.0 | Effective Date: 21 August 2026
This Privacy Policy applies to the website cryptoattention.com and the Crypto Attention platform.
1. Who We Are
Crypto Attention FZCO (“we,” “our,” or “us”) is a United Arab Emirates company registered under Licence Number DMCC-806230, with its registered office at Unit No: UT-12-CO-5, DMCC Business Centre, Level No 12, Uptown Tower, Dubai, United Arab Emirates. We operate the website cryptoattention.com (the “Website”) and the Crypto Attention platform accessible through it, which aggregates crypto-related news, groups related coverage into narratives, and ranks them by real-time public attention, alongside related asset rating and informational content.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. We are the data controller in respect of the personal data described in this Policy.
2. What Personal Data We Collect
2.1 Data You Provide Directly
- Contact and inquiry form data: your name, email address, inquiry type, and your message (up to 1000 characters).
- Account data: if you register an account or subscribe to a paid plan, we collect your name, email address, and password (processed and stored via AWS Cognito), together with your account preferences.
- Payment data: if you purchase a paid subscription, our payment processor, Tap Payments, collects and processes your payment details on our behalf. We do not directly collect or store your full payment card number.
2.2 Data Collected Automatically
- Technical data: IP address, browser type and version, device type and operating system, pages visited, access times, and referring URLs.
- Cookies and similar technologies, as described in our Cookie Policy at cryptoattention.com/cookies.
3. Why We Collect Your Data and Our Legal Basis
We process your personal data for the following purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| To provide the Website and the Crypto Attention platform (news aggregation, attention scoring, ratings, currency/asset pages) | Technical data (IP address, browser/device information, pages visited) | Legitimate interest in operating and securing the Website (Art. 6(1)(f) GDPR) |
| To create and manage your account and provide subscription features | Name, email address, password (via AWS Cognito), account preferences | Performance of a contract with you (Art. 6(1)(b) GDPR) |
| To process payments for paid subscription plans | Payment details (processed by our payment processor, Tap Payments) | Performance of a contract with you (Art. 6(1)(b) GDPR) |
| To respond to inquiries submitted through our contact form | Name, email address, inquiry type, message | Legitimate interest in responding to your request; consent where required (Art. 6(1)(a)/(f) GDPR) |
| To analyse Website traffic and improve our content and services | Technical and usage data (via Google Analytics 4, HubSpot, Apollo) | Consent, obtained through our cookie banner (Art. 6(1)(a) GDPR) |
| To comply with legal and regulatory obligations | Any data as required by applicable law | Legal obligation (Art. 6(1)(c) GDPR) |
4. Who We Share Your Data With
We share personal data with the following categories of service providers, strictly to the extent necessary for the purposes described above:
- Hosting and infrastructure: Amazon Web Services (AWS) — hosts the Website and platform, including compute, database (RDS), and file storage (S3), primarily in the eu-central-1 (Frankfurt, Germany) region.
- Domain / DNS: Cloudflare — manages DNS records for cryptoattention.com. Cloudflare operates in DNS-only mode for our domain and does not proxy or process Website traffic as a content delivery network; TLS certificates are issued by AWS Certificate Manager.
- Website security: Cloudflare Turnstile — a bot-detection and CAPTCHA tool used to protect our contact form from automated abuse.
- Authentication: AWS Cognito — manages account registration, login, and credential storage for account holders.
- Payments: Tap Payments — processes subscription payments on our behalf and handles your payment card data directly under its own PCI-DSS compliant systems; we do not store full card numbers.
- Analytics and marketing: Google (Google Tag Manager, Google Analytics 4), HubSpot, and Apollo — see Section 9 and our Cookie Policy for further detail.
All service providers are contractually bound to process personal data only on our instructions, to maintain confidentiality, and to implement appropriate security measures. We do not sell your personal data to any third party.
Certain vendors that support our editorial and market-data content — Quuannt (market data, ratings, and news aggregation), CoinGecko (market data, received via Quuannt), Pexels (stock imagery), and Cloudflare Workers AI (image generation for articles) — support our content operations but do not receive or process personal data relating to you as a Website visitor.
5. International Data Transfers
Your personal data may be processed in the United Arab Emirates, in the European Economic Area (our primary hosting infrastructure is located in Frankfurt, Germany), and in other countries — including the United States — where certain of our service providers (such as Google, HubSpot, and Apollo) are located or process data. Where we transfer personal data outside your country of residence, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, the EU-U.S. Data Privacy Framework (where applicable), or other legally recognised transfer mechanisms.
6. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
| Data Category | Retention Period |
|---|---|
| Contact/inquiry form data (name, email, inquiry type, message) | 12 months from submission, unless you become a subscriber or request earlier deletion |
| Account data (name, email, password, preferences) | For as long as your account remains active, plus a reasonable period thereafter to comply with our legal, accounting, and tax obligations |
| Payment records | As required by applicable accounting, tax, and legal obligations, and in accordance with the retention practices of our payment processor, Tap Payments |
| Website analytics data (Google Analytics 4) | 14 months from collection |
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the data we hold about you
- Rectification — correct any inaccurate or incomplete data
- Erasure — request deletion of your data (“right to be forgotten”)
- Restriction — ask us to temporarily limit how we process your data
- Objection — object to processing based on legitimate interest
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — at any time, where processing is based on consent
To exercise any of these rights, please contact us at legal@cryptoattention.com. We will respond within one month in accordance with applicable law.
You may also have rights under the data protection framework applicable in your country of residence, such as the EU General Data Protection Regulation for residents of the EU/EEA, the UK GDPR for UK residents, or UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. You also have the right to lodge a complaint with your local data protection authority.
8. How We Protect Your Data
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (HTTPS/TLS) across the entire Website
- Access controls limiting data access to authorised personnel only
- Secure cloud hosting infrastructure with regular updates and patching
- PCI-DSS compliant payment processing through Tap Payments
9. Cookies and Tracking Technologies
Our Website uses cookies and similar technologies, summarised below. Non-essential cookies are only placed with your consent, given through our cookie consent banner. For full details, please see our Cookie Policy at cryptoattention.com/cookies.
| Cookie / Tool | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Cookie consent preference | Crypto Attention | Stores your cookie consent choices | Necessary | 1 year |
| Turnstile challenge cookie | Cloudflare | Bot/CAPTCHA protection on the Contact form | Necessary | Session / up to 30 days |
| _ga, _ga_*, _gid, _gat | Google (GA4) | Distinguishes and counts unique visitors and sessions | Analytics | Up to 2 years |
| hubspotutk, __hstc, __hssc, __hssrc | HubSpot | Tracks visitor identity and sessions for marketing/CRM follow-up | Marketing | Up to 13 months |
| Website visitor identification pixel | Apollo.io | Identifies the organisation associated with a visit, for sales and marketing purposes | Marketing | Varies (per Apollo's own policy) |
10. Children's Privacy
The Website and our services are not directed at, and may not be used by, individuals under the age of 18. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have inadvertently collected personal data from a person under 18, we will delete it as soon as reasonably possible. If you believe a minor has provided us with personal data, please contact us at legal@cryptoattention.com.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time as our business evolves. If we make material changes, we will notify you by posting the updated policy on our Website with a revised effective date. Where required by law, we will seek your renewed consent. We encourage you to review this Privacy Policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Crypto Attention FZCO
Unit No: UT-12-CO-5, DMCC Business Centre, Level No 12, Uptown Tower, Dubai, United Arab Emirates
Email: legal@cryptoattention.com