Privacy Notice
How crypto100.info handles personal data. Last updated November 2026.
Who is responsible
C100 Index, a project operated by its founder (no legal entity yet). Contact: c100index@protonmail.com.
What we collect and why
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Your email address, signup date and source page, confirmation date and the consent text you agreed to | To send the monthly index report and factsheets you asked for, and to prove your consent | Your consent | Until you unsubscribe. After that, only the address and dates are kept, so we don't email you again and can show you unsubscribed. Ask us and we delete them. |
| For API keys: your email, name or organization, intended use, and daily request counts per key | To issue and manage keys, prevent abuse and understand how the data is used | Contract (providing the key you asked for) | While the key is active, then up to 12 months |
| For licensing inquiries: your name, work email, company and message | To answer your inquiry | Steps you asked for before a possible contract | Up to 24 months after the last contact |
| A one-way hash of your IP address, never the address itself | To rate-limit the public API and the forms | Legitimate interest: protecting the service from abuse | About one hour |
| Server request logs (IP address, browser, page) kept by our hosting provider | Security and operating the site | Legitimate interest | Under Vercel's retention policy |
The public website uses no tracking cookies and no advertising. The only cookie is a login cookie on the administrator pages.
Service providers
- Vercel: website hosting. Requests are processed in the EU (Dublin).
- Supabase: database, hosted in the EU (Ireland).
- Resend: sends our emails.
- CoinMarketCap: asset logos load from CoinMarketCap's servers, which therefore see your IP address when a page shows logos.
Vercel and Resend are US companies. Transfers outside the EU rely on the providers' Standard Contractual Clauses or the EU-US Data Privacy Framework.
Your rights
You can ask to access, correct or delete your data, object to processing, or withdraw consent at any time. Every email has an unsubscribe link, or write to the contact address above. You can also complain to your data protection authority.