Your Privacy Matters

Privacy Policy

We believe in transparency. Here's exactly how we handle your data.

Last updated: September 24, 2026

Consent First

Ads load only after your choice

Cookie Control

Reject or customize optional ad storage

HTTPS Only

All data encrypted in transit

No Data Sales

We never sell your information

1. Information We Collect

We collect only the minimum data necessary to operate the service. Here's a breakdown:

Registered Users

If you create an account, we store your name, email, and hashed password to manage your account and API key.

Anonymous Visitors

For non-registered users, we do not collect any personal data. No names, emails, or payment details are required.

Server Logs

Standard web server logs may record IP addresses, request timestamps, and pages visited for security and performance monitoring.

API Usage

If you use the API, we track request counts per API key to enforce rate limits. No request content is logged.

2. Cookies

We use only the essential cookies required for the website to function. We do not run advertising, do not use advertising or tracking cookies, and do not profile you for marketing purposes.

Session cookie Maintains your login state and CSRF protection. Expires when you close the browser or after 2 hours of inactivity.

Remember-me cookie Only set if you choose "Remember Me" at login. Keeps you signed in across browser sessions.

3. Third-Party Services

We integrate with a limited number of external services to deliver exchange rate data and site assets. We do not work with advertising networks and we do not sell your personal information.

Exchange rate data providers — we send only the base currency code; no user data is transmitted

Google Fonts — used for typography; subject to Google's privacy policy

Bootstrap CDN — used for UI framework delivery; no personal data is shared

4. Data Security

We take security seriously and implement industry-standard measures to protect our service and your data:

HTTPS encryption on all connections

Passwords hashed using bcrypt (never stored in plain text)

CSRF protection on all form submissions

API keys are unique per user and can be regenerated anytime

Database credentials and API keys stored as environment variables

Regular security updates applied to all dependencies

5. Your Rights

You have the following rights regarding your data:

Access You can view all personal information associated with your account from your dashboard.

Correction You can update your profile information at any time via your account settings.

Deletion You can delete your account and all associated data by contacting us or through your profile settings.

API key control You can regenerate or revoke your API key at any time from your dashboard.

6. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the service after changes are posted constitutes acceptance of the revised policy.

7. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out via our contact page or email us at [email protected].

Questions about your privacy?

We're committed to transparency. Reach out anytime.