Your Data, Our Responsibility.
We collect the minimum needed to provide our service, never sell your data, and give you full control over what we keep. Here's exactly what we do — and don't do.
Overview
GEM Hunter Ltd. ("we", "us", "our") provides a cryptocurrency token discovery and analysis platform. This Privacy Policy explains how we collect, use, store, and disclose information when you use our service at gemhunter.top and related applications.
We are committed to GDPR (EU), CCPA (California), and similar privacy standards. Our defaults err on the side of collecting less, not more.
Information We Collect
You give us directly
- Account info: email, username, password hash (bcrypt cost 12, never plaintext)
- Payment info: handled by Stripe — we store only the last 4 digits and brand
- Public wallet addresses you connect for portfolio tracking (read-only)
- Communication: support tickets, feedback, contact form submissions
Collected automatically
- Usage data: pages visited, features used, session duration (Mixpanel-style events)
- Technical: IP address, browser type, OS, device fingerprint (for fraud prevention only)
- Cookies: authentication, preferences (see Cookie Policy below)
We never collect
- Private keys, seed phrases, or anything that could spend from your wallet
- Exchange API keys with trade/withdraw permissions (READ-only allowed)
- Government IDs (we are not a KYC provider)
How We Use Your Information
- Service delivery: running the scanner, generating alerts, computing your portfolio P&L
- Account management: authentication, password reset, subscription billing
- Customer support: responding to your questions and tickets
- Product improvement: aggregated, anonymized analytics to improve features
- Security: detecting fraud, abuse, and unauthorized access
- Legal compliance: tax reporting where required, court orders
We do not sell your data. We do not share it with advertisers. We do not profile you for ad networks.
Your Rights
You have the right to:
- Access: request a copy of all data we hold about you
- Correct: update inaccurate or incomplete information
- Delete: request full deletion (processed within 30 days)
- Port: export your data in machine-readable format (JSON)
- Opt out: of marketing emails (transactional emails are mandatory)
- Object: to specific processing activities
To exercise any of these rights, email [email protected] from your registered email address. We respond within 30 days.
Data Retention
- Account data: until you delete your account, then 30 days for backups
- Payment records: 7 years (tax/audit requirements)
- Support tickets: 2 years from resolution
- Analytics: aggregated and anonymized after 90 days
- Backups: 30-day rolling encrypted backups
Security Measures
See our /security page for the complete breakdown. In short: AES-256 at rest, TLS 1.3 in transit, JWT with refresh-token rotation, optional TOTP 2FA, third-party pentests annually.
If a breach occurs that affects you, we will notify you within 72 hours of confirmation, per GDPR Article 33.
Children's Privacy
GEM Hunter is not intended for users under 18 years old. We do not knowingly collect data from minors. If we discover that we have collected information from a child under 18, we will delete it immediately. Contact [email protected] if you believe we have any such data.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
- Update the "Last Updated" date at the top of this page
- Notify registered users via email at least 30 days before changes take effect
- Post a notice on the homepage for material changes
Contact Us
For any questions about this Privacy Policy or your data:
- Email: [email protected]
- Privacy / GDPR: [email protected]