· PRIVACY ·
Privacy policy
What the site actually collects, why, for how long, and how to take back control. Crypto Hebdo can be read in full without an account: apart from audience measurement, every processing operation described here follows from something you choose to do.
· DATA CONTROLLER ·
The controller is Joshua Hepner, a private individual resident in Belgium, publisher of Crypto Hebdo. Full identification is given in the legal notice.
For any question about your data or to exercise your rights: joshuahepner25@gmail.com, or the site’s contact form.
No data protection officer has been appointed. The site carries out no regular and systematic monitoring on a large scale and processes no special-category data: none of the cases listed in Article 37 GDPR applies.
· WHAT THIS SITE NEVER DOES ·
No personal data is sold, rented or traded.
No advertising cookie, no social network pixel, no third-party measurement tool, no profiling for targeting.
No automated decision producing legal effects concerning you, no scoring, no ranking of readers.
No data is required to read the site: articles, cryptos, narratives and La Base are open without an account.
· ACCOUNT AND PROFILE ·
Creating an account is optional and free. It lets you comment, bookmark articles, follow cryptocurrencies or narratives and read the Market overview — never to unlock paid content, because there is none.
Data processed: your email address and password, handled by the authentication service and stored as an irreversible hash; the display name and short biography you enter yourself; the dates your account was created and last used.
Legal basis: performance of the service you request by creating an account (Article 6(1)(b) GDPR).
Retention: as long as the account exists. You can delete it yourself from your account area, at any time and without giving a reason.
· NEWSLETTER ·
Subscribing records your email address, where the subscription came from and its date. It can also be switched on or off from your account area.
Legal basis: your consent (Article 6(1)(a) GDPR). You may withdraw it at any time, through the unsubscribe link in every issue, from your account area, or by writing to us. Withdrawal does not affect the lawfulness of issues already sent.
Your address is used solely to send the newsletter: it is never shared, and never used for another message.
Retention: until you withdraw your consent or delete your account.
· COMMENTS ·
Posting a comment requires an account. We record the text, its moderation status, the publication and edit dates, and the link to your account. Comments are public and displayed as plain text, with no interpreted markup.
Reporting a comment records the reporting account and an optional reason, for moderation only. Rate limiting prevents automated posting.
Legal bases: performance of the service for publication (Article 6(1)(b)); the publisher’s legitimate interest in moderating and protecting the site for reports and rate limiting (Article 6(1)(f)).
Retention: until the comment or the account is deleted.
· BOOKMARKS AND FOLLOWS ·
Bookmarked articles and followed cryptocurrencies or narratives are stored against your account so they can be shown in your account area. These lists are not public and are never used for advertising profiling.
Legal basis: performance of the service (Article 6(1)(b)). Retention: until removed, or until the account is deleted.
· CONTACT MESSAGES ·
The form records first name, last name, email address, message and page language, for the sole purpose of replying to you. These messages can be read only by the site administration; no public access exists. A limit of three messages per hour per address prevents abuse.
Legal bases: your explicit request and the publisher’s legitimate interest in answering it (Articles 6(1)(a) and 6(1)(f)).
Retention: at most twelve months after the exchange is closed, then deletion.
· AUDIENCE MEASUREMENT ·
Audience measurement is done in-house and works without cookies and without any storage on your browser. No advertising tool and no third-party tracker is involved.
For each page viewed we record: the page address, the referring domain where there is one, the event type (view or actual read) and a visitor identifier computed on the server. That identifier is a cryptographic hash of your IP address and your browser combined with a secret salt renewed every day: it cannot be traced back to a person, and two visits either side of a date change can no longer be linked.
Your IP address is never stored: it exists only in memory, for as long as the hash takes to compute. Your browser’s “Do Not Track” signal is honoured: when it is on, no view is recorded at all.
Legal basis: the publisher’s legitimate interest in measuring the audience of the site (Article 6(1)(f)), through a mechanism designed to make identification impossible.
Retention: detailed views are deleted automatically after 90 days; only daily aggregate statistics remain, and they relate to no identifiable person.
· COOKIES AND LOCAL STORAGE ·
The site sets no analytics, advertising or social-network cookie. That is why you are shown no consent banner: there is nothing to consent to.
The only items placed on your device appear when you sign in to an account: they carry your authentication session and keep it alive from page to page. They are strictly necessary to the service you asked for, and they disappear when you sign out.
Your language choice is not stored: it is carried by the page address, French at the root and English under /en.
· PROCESSORS AND TRANSFERS OUTSIDE THE EUROPEAN UNION ·
The site relies on a small number of technical providers, acting only on the publisher’s instructions:
Lovable Labs Sweden AB (Sweden) — development and hosting of the web application.
Supabase, Inc. (United States) — database, authentication and server functions. The site’s instance is deployed on Amazon Web Services infrastructure in the United States: account, comment and subscription data is hosted there.
CoinGecko, CoinMarketCap and Alternative.me — market data providers. They receive no personal data: prices and indicators are fetched by the site’s server, never by your browser.
The English machine translation of some articles is produced by an artificial intelligence service that receives only the article text, and no personal data.
Some of this data is therefore processed in the United States. Those transfers are governed by the standard contractual clauses adopted by the European Commission, set out in the relevant providers’ processing agreements. You can obtain a copy by writing to us.
· YOUR RIGHTS ·
You have the right to access your data, to have it corrected or erased, to restrict processing, to object, and to receive the data you provided in a portable form. You may withdraw your consent to the newsletter at any time.
You can delete your account directly from your account area. Deleting it erases your profile, your comments, your bookmarks, your follows and your newsletter subscription. Any articles published under your name stay online but are no longer attributed to you.
For anything else, write to joshuahepner25@gmail.com or use the contact form. You will receive an answer within one month. Proof of identity will be requested only where there is serious doubt about who is asking, and is never kept.
· COMPLAINTS ·
If you believe your data is not being handled lawfully, you may lodge a complaint with the Belgian Data Protection Authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit — Rue de la Presse 35, 1000 Brussels, Belgium. Telephone: +32 (0)2 274 48 00. Email: contact@apd-gba.be. Website: www.autoriteprotectiondonnees.be
You may also contact the supervisory authority of your own country of residence in the European Union.
· UPDATES ·
This policy may change as the site does. Any substantial change will be flagged on this page and, where it concerns processing based on your consent, brought to your attention before it takes effect.
Last updated: 21 August 2026.