CryptoCityEnter the city

Privacy notice

Open to explore. Accounted only to compete.

Public CryptoCity browsing does not require an account. Invited challenge competitors use an administrator-issued private activation link, then choose their own username-linked password so virtual portfolios can be submitted, locked, and scored fairly.

Effective 23 July 2026

03.1

Project contact

CryptoCity is an early experimental project operating under the CryptoCity brand. It does not publish an operator identity at this stage. Privacy questions, account-deletion requests, and rights requests may be sent to ekocrypto7@gmail.com.

Service
CryptoCity early experimental beta
Accounts
Invitation-only challenge competitors
Privacy contact
ekocrypto7@gmail.com
Identity policy
Optional public operator identity
03.2

Data handled when you visit

CryptoCity handles five limited categories of data:

  • Technical request data. Vercel may process IP address, user agent, requested URL, timestamps, and security or diagnostic information to host and protect the site.
  • Anonymous usage and performance measurements. Vercel Web Analytics and Speed Insights report aggregated visits, routes, device/browser categories, approximate country, and Core Web Vitals without cookies or cross-page session reconstruction.
  • Functional browser storage. Your browser stores preferences, cached market information, and interface continuity values on your device. These values are not an account and are not synced across devices.
  • Messages you choose to send. Email or X contact can include your address, handle, name, and message content.
  • CryptoCity user profiles. For invited competitors, CryptoCity stores a username, display name, optional X link, optional profile image and biography, account status, challenge membership, virtual allocations, submission timestamps, and results. CryptoCity does not request or store a real email address for account authentication. Supabase Auth stores only a non-routable internal identifier and the password hash.
03.3

Functional storage on your device

UI preferences
View, market type, timeframe, filters, tutorial state, and stable district assignments remain until you clear site data.
Market resilience
The last successful project and exchange snapshots expire after 24 hours.
Short history
A bounded local price history supports compatibility and freshness behavior.
News styling
Up to 300 seen article identifiers may remain until you clear site data.

This storage supports requested product functionality, continuity, and honest stale-data handling. CryptoCity does not use it for advertising or cross-site tracking. You can remove it through your browser's site-data controls; doing so resets preferences and cached data.

03.4

Purposes and legal bases

Deliver the service
Functional storage and technical requests are necessary to provide the requested interactive site.
Keep it reliable
Security, diagnostics, anonymous analytics, and performance measurements rely on the operator's legitimate interest in maintaining and improving the beta.
Answer messages
Contact details and correspondence are processed to respond to your request and pursue the operator's legitimate interest in user support.
Run invited challenges
Profile, authentication, allocation, and result records are necessary to deliver the requested competition and preserve fair historical results.
Meet obligations
Information may be retained or disclosed where required by applicable law.

CryptoCity does not make decisions about you using automated profiling and does not sell personal data.

03.5

Providers, links, and transfers

Vercel hosts the site and provides analytics and performance measurement. Supabase provides username/password authentication, database, and profile-image storage. Google processes messages sent to the published Gmail address. CoinGecko supplies market data; its image hosts may receive normal browser request information when logos load. Upstash hosts shared scheduled jobs and may host the shared public news snapshot; it is not used to build visitor profiles.

These providers may process data outside the European Economic Area under their applicable contractual and legal transfer safeguards. Their own privacy notices describe their processing in more detail.

Links to X, CoinGecko, exchanges, projects, and news publishers leave CryptoCity. Those services receive data only when your browser loads their asset or you choose to visit them, and they act under their own privacy terms.

03.6

Retention

  • Browser storage follows the durations described above or remains until you clear it.
  • Email correspondence is normally retained for up to 12 months after the last substantive contact, unless a longer period is needed for an active matter or legal obligation.
  • CryptoCity profiles remain while the administrator-created account is active. Completed allocations, display names, and public results may be retained as the competition archive. Deleting an account removes its authentication record and associated challenge data.
  • Vercel and other infrastructure logs follow the applicable account configuration and provider retention schedules; CryptoCity does not export them into permanent visitor profiles.
  • Aggregated anonymous analytics remain subject to Vercel's product retention settings and are used only for product operation and improvement.
03.7

Your rights

Where the GDPR applies, you may request access, correction, deletion, restriction, or portability of personal data, and may object to processing based on legitimate interests. You may also lodge a complaint with the AEPD or another competent supervisory authority.

Send a sufficiently detailed request to ekocrypto7@gmail.com. CryptoCity may request limited information needed to verify that a request relates to you and will respond within the period required by applicable law.

03.8

Changes and tracking review

This notice will be updated when data practices materially change. A consent mechanism and revised notice will be assessed before adding advertising, behavioral profiling, session replay, or other non-functional tracking technologies.