Privacy Policy
Last updated: May 26, 2026
This policy explains what data we process when you use Crypto Card Match and how we use it for product analytics, ad attribution, and affiliate redirection.
Who We Are
Crypto Card Match is an informational comparison and quiz site. We do not issue cards, open financial accounts, or process user payments. For data requests, contact: privacy@cryptocardmatch.com.
Data We Process
| Category | Data | Purpose | Legal Basis |
|---|---|---|---|
| Product analytics | $pageview, quiz events, click events, URL context | Measure funnel and improve matching UX | Legitimate interest |
| Ad network attribution | telegram_id, ad_id, widget_id, request_id | Measure ad efficiency and attribute conversions | Legitimate interest |
| Traffic source attribution | utm_*, referrer, landing page, click IDs | Understand acquisition performance | Legitimate interest |
| Email submissions | Email address (only if you submit it) | Send requested updates or lead magnet material | Consent |
We do not collect payment card numbers, KYC documents, or exchange account credentials on this site.
Analytics, Cookies, and Identifiers
We use PostHog analytics in a cookieless session mode (memory persistence) for event tracking. We also use first-party attribution storage for UTM and traffic source context.
If you arrive from our ad network, URL parameters may include telegram_id, ad_id, widget_id, and request_id. We validate and use these values for attribution and anti-fraud analysis. We do not inject these values into HTML.
Third-Party Processors
- PostHog (analytics processor; US region infrastructure). Policy: posthog.com/privacy.
- Cloudflare (hosting and content delivery).
- Advertising network partners that provide click attribution identifiers.
- Affiliate partners (for example card issuers/exchanges) after you click outbound links.
International Transfers
Some analytics data may be processed in the United States. If you access the site from regions with transfer restrictions, this may involve cross-border processing under applicable safeguards.
Retention
We retain event-level analytics and attribution data for up to 14 months unless a shorter period is required by law or a deletion request is accepted.
Your Rights
Depending on your jurisdiction, you may request access, correction, deletion, or objection to processing. To request deletion for ad-attributed data, include your telegram_id (or hashed identifier if enabled) and relevant date range.
Children
This service is intended for users aged 18+ and is not directed to children.
Policy Changes
We may update this policy as product features and legal requirements evolve. Material changes will be reflected by updating the date at the top of this page.
Unless mandatory rules state otherwise, this policy is interpreted under the laws of the operator's jurisdiction.