Privacy Policy — CRYPTO LADY

CRYPTO LADY ("we", "us", "our") respects your privacy. This Privacy Policy explains what information we collect when you visit cryptolady.pro or interact with us via email or messaging platforms, how we use that information, and the rights you have over it.

1. Who we are

CRYPTO LADY is a premium crypto media platform operating across three markets — English, Spanish, and Russian-CIS. The website is published and operated by Mariia Klimenok , an independent media author and publisher. For the purposes of EU GDPR and UK GDPR, we are the data controller for personal data collected through this website and through direct business correspondence.

Contact for privacy matters: [email protected]

2. Information we collect

2.1 Information you provide

Business contact data. When you email us at [email protected] or message us on Telegram ( @cryptomilady ), we receive the contact details you choose to share — typically name, work email, company, and the contents of your message.
Commercial information. If you become an advertising partner, we keep records related to the engagement (scope, deliverables, payment confirmations, public-on-chain wallet addresses you sent funds from, invoices). This is necessary to perform the contract and to meet our accounting and tax obligations.

2.2 Information collected automatically

Server-level access logs. Like nearly every website, our hosting provider records technical data when your browser requests a page: IP address, user agent, referring URL, requested URL, timestamp. These logs are retained for security and abuse-prevention purposes.
Locally-stored preferences. The site stores your language and theme choice in your browser's localStorage . This data never leaves your device and is not personal to you in any meaningful sense — but you can clear it from your browser settings at any time.

2.3 Information from third-party services we embed

When you load the site, your browser also requests resources from a small number of third parties. They may set their own cookies or receive technical data (IP, user-agent) under their own privacy policies, which we do not control:

Google Fonts — webfont delivery ( policies.google.com/privacy ).
YouTube — when video thumbnails or links are clicked, you are taken to YouTube; embedded players (where used) operate under YouTube's terms ( policies.google.com/privacy ).
Telegram & X (Twitter) — links to our public channels lead to those platforms; clicking them is governed by their privacy policies.
Google Analytics 4 (GA4) — loaded only after you press "Accept" in the cookie banner. Purpose: measuring audience size and traffic sources, and understanding which parts of the site people reach (pricing, packages, contact). Categories of data: pseudonymous identifier stored in _ga* cookies, page URL and title, referrer, UTM campaign parameters, approximate location derived from IP (city level; the full IP is not stored by Google in GA4), device, browser, language, and the interaction events listed in our public event documentation — for example viewing the pricing block, clicking a package, clicking through to Telegram, and form start/success/error. We do not send your name, email, phone number or the text of your brief to GA4. Recipient: Google Ireland Limited / Google LLC, acting as our processor, with transfers outside the EEA under the EU–US Data Privacy Framework and standard contractual clauses. Retention: 14 months, after which event-level data is deleted automatically. Google's policy: policies.google.com/privacy · Google's data-use terms: policies.google.com/technologies/partner-sites
Microsoft Clarity — loaded only after you press "Accept" in the cookie banner. Anonymous behavioural analytics: aggregated heatmaps (where visitors click and scroll), session recordings of mouse/touch movements and page navigation, and basic device/browser data, stored in _clck / _clsk cookies. Recordings do not capture form inputs, passwords, or other sensitive content (masked by default). Used only to improve site usability. Data retained 13 months. Recipient: Microsoft Corporation. See Microsoft's policy ( privacy.microsoft.com/privacystatement ).

3. How we use information

To respond to your inquiry and discuss potential collaboration (legal basis: your request / pre-contractual steps ).
To negotiate, perform, and deliver advertising engagements, including invoicing and reporting (legal basis: performance of a contract ).
To meet our legal, accounting and tax obligations (legal basis: legal obligation ).
To protect the site against fraud, abuse, and security threats (legal basis: legitimate interest ).
To understand site usage in aggregate so we can improve content (legal basis: legitimate interest ).

We do not sell or rent personal data. We do not use your data for behavioral advertising. We do not profile you for automated decisions that produce legal effects.

4. Cookies and similar technologies

This website uses two categories of storage: strictly necessary storage that is always active, and analytics storage that runs only with your consent.

Strictly necessary — always on. localStorage entries holding your language and theme choices and your cookie decision (cl_consent). These are not cookies in the strict sense and never leave your browser.
Analytics — only after you press "Accept". Google Analytics 4 (_ga, _ga_*, up to 2 years) and Microsoft Clarity (_clck, _clsk, up to 13 months). Until you accept, neither script is loaded and neither cookie is created. If you press "Decline", they are never loaded and any existing analytics cookies are deleted.
Third-party. Resources loaded from Google Fonts, YouTube, Telegram or X may set cookies on the browser when those services are invoked. Refer to those providers' policies linked above.

Changing your mind. Use the "Cookie settings" link in the site footer to clear your decision and see the banner again. Withdrawing consent stops future collection; it does not retroactively erase data already collected, which you can request separately using the contacts in section 12. You can also clear, block, or limit cookies and local storage in your browser settings at any time. Doing so will not impair access to the site's content.

We use Google Consent Mode v2: advertising signals (ad_storage, ad_user_data, ad_personalization) are set to denied permanently, because we run no advertising and build no advertising audiences.

5. How we share information

We share personal data only in these limited cases:

Service providers. Hosting, email, payments, accounting, and analytics vendors that process data on our instructions under written agreements.
Form processing. When you submit the brief/contact form, the data you enter is delivered to us by Web3Forms (email delivery) and Make.com / Integromat (a notification to our private Telegram), acting solely on our instructions to pass your message to us.
Legal requirements. When required by law, regulation, court order, or to enforce our rights or protect users.
Business transfers. If we reorganize, merge, or sell the business, your data may be transferred subject to this Privacy Policy.
With your consent. Where you direct us to share specific information (e.g. publishing a quote you provide as a testimonial).

6. International data transfers

Because we operate across multiple regions, your data may be processed in countries outside your own. Where data leaves the European Economic Area or United Kingdom, we rely on appropriate safeguards (typically the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum) and on adequacy decisions where they exist.

7. Data retention

Inquiry messages: up to 24 months after the last contact.
Active partnership records (contracts, invoices, payment proof): for the duration of the engagement plus the period required by tax and accounting law (typically 5–7 years).
Server access logs: short-term, typically up to 12 months unless required for security investigations.
Analytics data: Google Analytics 4 — 14 months from collection, deleted automatically by Google thereafter; Microsoft Clarity — 13 months. Both are collected only with consent.
You can request deletion at any time, subject to legal retention obligations.

8. Your rights

8.1 EU / UK / EEA residents (GDPR / UK GDPR)

You have the right to:

Access the personal data we hold about you;
Have inaccurate data corrected;
Request deletion ("right to be forgotten") in defined cases;
Restrict or object to certain processing;
Receive your data in a portable, machine-readable format;
Withdraw consent at any time, where processing is based on consent (without affecting prior lawful processing);
Lodge a complaint with your national data-protection authority.

8.2 California residents (CCPA / CPRA)

You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

8.3 Everyone else

Even if your jurisdiction does not grant the rights above, we will consider any reasonable request you make to access, correct, or delete personal data we hold about you.

8.4 How to exercise your rights

Email [email protected] from the address you used to contact us, briefly describing the request. We will respond within thirty (30) days; complex requests may be extended by up to sixty (60) additional days with notice.

To withdraw a consent you have given — including the consent you tick when submitting the website form — email [email protected] and we will stop the consent-based processing and, on request, delete the data, subject to any legal retention obligations. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

9. Children

The site is not directed to children under 16 (or under 13 in the United States). We do not knowingly collect personal data from minors. If you believe a minor has provided us personal data, please contact us and we will delete it.

10. Security

We use commercially reasonable technical and organizational safeguards — encrypted transport (HTTPS), access controls, limited retention, and vendor due diligence. No method of internet transmission or electronic storage is perfectly secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy as our practices, services, or applicable law evolve. The "Last updated" date at the top reflects the most recent change. Material changes will be highlighted on this page or via the contact channels you have shared with us.

12. Contact

Questions, requests, or complaints regarding this policy: Email: [email protected] Telegram (business): @cryptomilady Postal address: available on request via [email protected]

13. CRYPTO LADY Automation app on Threads

Separately from this website, we operate an application registered with Meta under the name CRYPTO LADY Automation. It connects to our own Threads account @cryptoladyhq through the official Threads API.

What the app does. It publishes our own posts, manages replies to our own posts, reads statistics on our own content, and searches recent public Threads posts by topic keyword so that our editor can take part in relevant public conversations.

What it stores. For public posts returned by a keyword search we store only four things: the post permalink, its timestamp, the author's public Threads username, and the post text. We do not collect email addresses, phone numbers, private messages, follower lists, or anything that is not publicly visible on Threads.

Why. One purpose only: so that we do not reply to the same conversation twice. These records are kept for up to 30 days and are then deleted.

What we never do. We do not build profiles of Threads users, do not combine this data with data from other sources, do not sell or share it, do not use it for advertising targeting, and do not send private messages. Drafts of replies may be prepared with AI assistance, but every reply is reviewed and approved by a person and published manually.

13.1 How to have your Threads data deleted

If your public Threads post appeared in our internal log and you want it removed, you do not need an account with us and you do not need to give a reason:

Email [email protected] with the subject line Threads data deletion.
Include your Threads username (for example @yourname) or a link to the post.
We delete the matching records and reply to confirm — within 30 days, usually within a few business days.

In the same email you may ask us to exclude your username from future searches; we will add it to a permanent exclusion list.

If we have replied to you publicly on Threads, that reply lives on Threads rather than on our servers — you can hide or report it using Threads' own controls at any time.