Privacy policy

Last updated: 21 October 2026

This page is a translation of the Spanish original, which prevails in case of any discrepancy.

Data controller

Company: TRADEAUDIT, SLU
NRT: L-721380-S
Registered address: Urbanització del Balcó de Casamanya 111, casa adossada núm. 22, Escàs, AD400 La Massana
Country: Principality of Andorra
Contact: ayuda@cryptobruj.com

We process your data in accordance with Qualified Law 29/2021 of the Principality of Andorra on the protection of personal data.

What data we process and why

When you visit the website. Our hosting provider, Cloudflare, receives your IP address in order to serve you the pages. From it we work out which country you are visiting from, only to choose which exchanges to show you, and we limit how many requests are made in a row from the same connection. We do not store your IP, and we store your country only if you request access to the Trading Hub.

When you check whether you are a referral. We use the exchange and the UID you enter to ask that exchange at that moment. We store neither the UID nor the result. If you give them to the assistant (Robin) in the help bubble or by private message, it checks them the same way and only tells you whether your account is under the code. In what we keep of that conversation, the UID is masked; on Instagram, at most a day after you write it, because until then Robin needs it to match it with the exchange if you name the exchange in another message.

When you request access to the Trading Hub. If the exchange confirms that your account is a CryptoBruj referral, we store the exchange, your UID, your email, your Telegram username, the country you made the request from and the date on which you accepted this policy. We use them to give you access to the private Trading Hub group on Telegram, to check from time to time that your account is still a referral and to write to you about your access. While you are in the group, once a day we also ask your exchange for your trading volume over the last 30 days and store it with the date it was measured, to know how much each Trading Hub member trades; we do not use it to give you access or to take it away. If you are not a referral or the exchange does not answer, we store nothing.

If you write to us. We use your email and what you tell us to answer you. If you do so through the help form on the website, we store your email, the topic, your message, the page you wrote from, the country you sent it from and the date on which you accepted this policy, and we notify the person who handles support by email so they can answer you.

If you use the assistant in the help bubble. It is an artificial intelligence that answers your questions about the website. What you write to it, together with the language, the page you write from and the country you connect from, is sent to Anthropic, which generates the answer. We keep the conversation (what you ask, what the assistant answers and, if you give it, your opinion at the end) with the language, the page and the country, but without your IP or anything that identifies you, to see which questions people have and improve the frequently asked questions and the answers; once a week we also pass it to Anthropic to help us find the questions that come up most. Before keeping it and before sending it we remove anything that looks like a key or a seed phrase, but don’t write personal or account details there. The legal basis is dealing with what you ask us and our legitimate interest in improving the help on the website.

If you send us a private message on Instagram or TikTok. Private messages received by CryptoBruj’s Instagram and TikTok accounts are read by Robin, this website’s artificial intelligence assistant, which may answer them (it answers on behalf of CryptoBruj and, if you ask whether it is a bot, it tells you it is an automated reply). To do so, the latest messages of the conversation are sent to Anthropic, which generates the answer. We store what you asked and what was answered, without your username, to count the answers and improve our help. On Instagram, Robin receives and answers them through Instagram’s official API (Meta); to be able to answer you, we store the internal identifier Instagram gives us for your conversation, which is not your username. If someone on the team needs to see your message, we let them know by email with your Instagram or TikTok username, so they can answer you. Before sending and storing it, we remove anything that looks like a key or a seed phrase, but don’t write your account details in a private message. The legal basis is handling your request and our legitimate interest in answering every message.

If you sign up for the newsletter. We store your email, the language of the page, the page and country you signed up from and the date you accepted this policy. We send you an email so you can confirm the address is yours; if you do not confirm it within 7 days, we delete your email. Once confirmed, we use it only to send you the CryptoBruj newsletter, which may include affiliate links to exchanges. The legal basis is your consent, which you give by ticking the box and can withdraw at any time with the unsubscribe link in every newsletter or by writing to us at ayuda@cryptobruj.com: we then delete your email from the list. We keep it until you unsubscribe.

If you ask us to let you know about the app. On the TradeAudit page you can leave your email so we let you know when the new CryptoBruj app comes out. We store your email, the language of the page, the page and country you asked from and the date you accepted this policy. We send you an email so you can confirm the address is yours; if you do not confirm it within 7 days, we delete your email. Once confirmed, we use it only to let you know about the app: we do not sign you up for the newsletter. If you had already signed up for the newsletter, you stay on it and we will let you know there. The legal basis is your consent, which you give by ticking the box and can withdraw whenever you want with the unsubscribe link in every email or by writing to us at ayuda@cryptobruj.com: we then delete your email from the list. We keep it until you unsubscribe.

If you enter the stream giveaway. We use the exchange and the UID of each account you enter to ask that exchange whether it is a CryptoBruj referral. If it is, we store the exchange, the UID, the language of the page and the date you entered, so that account takes part in the campaign’s giveaways, and your email and, if you added it, your Telegram username, to let you know if it comes up; if it is not, we store nothing. We also use your email to count a single entry per person, even if you enter several accounts. When we spin the wheel on the stream, the first and last digits of some UIDs are shown; the winning account’s UID is shown in full, so its owner can recognize it. For each draw we store the exchange and the UID of the account that came out, to give it the prize. The legal basis is your consent, which you give by ticking the box and can withdraw at any time by writing to us at ayuda@cryptobruj.com: we then delete your account from the list.

If you had signed up for an earlier list. If you had signed up for Boletín Cripto (boletincripto.com), your email reached us from that newsletter's subscriber list, together with the date you signed up. Boletín Cripto is back, now from this website, and we use your email to write to you at most twice: one email to tell you about it and, if you do not open it, a reminder a week later. If you open neither, we delete your email and do not write to you again. If you tap the button in the email (“Sí, quiero seguir”), you are treated like anyone who signs up for the newsletter; if you only open one of them, you keep receiving it too, but if 8 newsletters in a row go by without you opening any, we delete your email. The legal basis is our legitimate interest in continuing to send you the newsletter you signed up for, and you can object whenever you want with the unsubscribe link in every email or by writing to us at ayuda@cryptobruj.com. If you had asked us to let you know about events, tournaments and promos, your email was moved to the newsletter list, which is how we let people know about them, and you can ask us to delete it in the same way.

If you open the newsletter. Every newsletter email carries a tiny image, and its links go through this website before taking you to their destination: that way we know whether you opened each email and whether you tapped any of its links, and we keep that with your email. We use it to see what interests readers most and, for people who came from the earlier list, to stop writing to those who do not open it. If your email app does not load images, we do not know whether you opened it. If an email bounces because your address no longer exists, or you mark it as spam, our sending provider (Resend) lets us know and we delete your email from the list. If it bounces for a temporary reason, such as a full mailbox, we count how many times in a row it happens: on the third time we delete it too, and if an email reaches you or you open one before then, the count starts over. We keep this until you leave the list. The legal basis is our legitimate interest in not sending emails to people who do not read them; you can object by writing to us at ayuda@cryptobruj.com.

Which link you came from. If you came to the website through one of our links (for example, the one in a video description or the one on Telegram) and then request access to the Trading Hub, write to us through the help form or sign up for the newsletter, we store that link’s code together with your sign-up, your query or your email, so we know which video or which network brought you. We only store the link’s code, nothing else about your visit. The legal basis is our legitimate interest in knowing which content works; you can object by writing to us at ayuda@cryptobruj.com.

Internal management. We use the data you give us on this website, together with what each exchange tells us about referred accounts, to manage our referrals internally. Only the CryptoBruj team has access, and we don’t pass it on to anyone. The legal basis is our legitimate interest; you can object by writing to us at ayuda@cryptobruj.com.

To measure visits. We use PostHog to know how many people visit each page, in which language, from which country and on what kind of device, which website or which of our links they come from (for example, the one in a video description or on Telegram) and what gets clicked (for example, an exchange's button or the Trading Hub one), and whether a form is sent, never what is written in it. If you accept analytics cookies, we store a random identifier in your browser, to know whether you come back another day and how you move through the website. If you reject them or do not choose, we store nothing on your device, and PostHog only uses your IP and your browser to calculate an anonymous code that changes every day, without storing the IP. The legal basis is your consent, which you can withdraw at any time from the Cookies section, and, without it, our legitimate interest in knowing how the website is used, with anonymous data.

To fix errors. If something fails on a page or on our server, we send PostHog what failed (the type of error, its message and where in the code), on which page and in which language, and with which browser and system, so we can fix it. We don’t send your IP or what you type into a form, and before sending it we remove any email, long number or key from the message. If you accepted the analytics cookies, it goes with your random identifier; if not, with nothing that identifies your browser. The legal basis is our legitimate interest in the website working.

The legal basis is our legitimate interest in the website working and being secure and, when you write to us or make a request, dealing with what you ask of us. For the Trading Hub, your consent, which you give by ticking the box on the form and can withdraw at any time by writing to us.

Cookies

This website does not use advertising cookies. It only uses analytics, and only if you accept it: instead of a cookie, it stores in your browser's storage a random identifier (cb_id) and the current visit (cb_sesion), which stay until you delete them or reject cookies. It also stores your choice (cb_cookies), so that it does not ask you on every page. You can change it here:

If you use the assistant in the help bubble, the current conversation (cb_chat) is kept in that tab’s storage, so you don’t lose it when you change page, and it is deleted when you close the tab or start a new conversation. If you open the bubble or close its “Can I help you?” notice, that tab also keeps a mark (cb_globo) so the notice isn’t shown to you again, and it is deleted when you close the tab. That tab also keeps a random code for the conversation (cb_chat_id), to group its questions in what we keep, and whether you already gave your opinion (cb_chat_op), so we don’t ask you again; both are deleted when you close the tab or start a new conversation.

If you arrive through one of our links, the tab also keeps its code (cb_enlace), so we can store it with your sign-up if you request access to the Trading Hub, write to us or sign up for the newsletter; it is deleted when you close the tab.

So that nobody can ask the assistant endless questions, each day we count how many each person asks. For that we keep a code derived from your IP, different every day and from which your IP cannot be recovered, together with the number of questions; it is deleted the next day.

Who it is shared with

Cloudflare, which hosts and protects the website. It may process data outside Andorra, with the safeguards required by law.
The exchange you choose when you check whether you are a referral. It only receives the UID of the account you already have with it.
Telegram, where the Trading Hub group is: the bot that gives you access uses your Telegram username.
Resend, which sends our team the notification of each message from the help form, without your email or what you wrote, and the notification of Instagram and TikTok private messages that a person needs to see, with your Instagram or TikTok username and the start of your message. It also sends you the newsletter emails and the app notice, if you sign up. It may process data outside Andorra, with the safeguards required by law.
PostHog, which measures visits to the website and records its errors, with servers in the European Union. It only receives what the “To measure visits” and “To fix errors” sections explain.
Supabase, which hosts our internal tools. It may process data outside Andorra, with the safeguards required by law.
Anthropic, which generates the answers of the assistant in the help bubble from what you write to it, and the answers to Instagram and TikTok private messages from the latest messages of the conversation. It doesn’t use that data to train its models. It may process data outside Andorra, with the safeguards required by law.
Meta, which owns Instagram: through its official API, Robin receives the private messages of CryptoBruj’s Instagram account and sends its answers. It may process data outside Andorra, with the safeguards required by law.

We do not sell your data or disclose it to anyone else, except where required by law.

How long we keep it

Browsing data and the data from checking whether you are a referral are not stored (except for the stream giveaway), except analytics data, which PostHog keeps for up to seven years and which does not include your name, your email or your IP. Trading Hub data, on the website, for as long as you have access and up to one year after you leave the group, so that we can resolve any question about your access. Our internal tools keep part of it for longer: the exchange, your UID, the status and dates of your access, your trading volume over the last 30 days and the link you came through, up to five years after you leave the group (or after you asked for access, if you never joined). Your email, your Telegram username and your country are not kept there. If you ask us to delete it sooner, we delete it, except for what the law requires us to keep. The emails you send us, for as long as needed to deal with your request and, after that, for as long as the law requires. Messages from the help form, up to one year after your request has been dealt with. Conversations with the assistant, including Instagram and TikTok private messages, 180 days; then they are deleted. Your newsletter or app notice email, until you unsubscribe; if you do not confirm it is yours, 7 days. Accounts entered in the stream giveaway, with the email and Telegram username you left, until 30 days after the campaign ends; who came out in each draw, one year.

Your rights

You can ask us to access your data, correct it, delete it, object to its use, restrict it or take it with you. Write to us at ayuda@cryptobruj.com. If you believe we have not handled it properly, you can lodge a complaint with the Andorran Data Protection Agency (apda.ad).