CryptoRadar Privacy Policy

Last updated: 26 October 2026

CryptoRadar is provided by Mohammed Rizwan Syed, operating as rizwan.app.studio ("we", "us", or "our"). This policy explains how information is handled when you use CryptoRadar or contact us.

Privacy contact: rizwan.app.studio@gmail.com

Information on your device

CryptoRadar does not require an app account. Your device stores display currency, favorite currencies, theme, watchlist asset identifiers, filters and cached market responses. A watchlist does not require wallet addresses, private keys, exchange credentials, holdings or account balances. Selected asset identifiers may be sent to our backend for prices, charts and comparisons. Local storage does not mean all app activity stays on your device.

Risk Notice acknowledgement is held in session memory and resets when the app process starts again. It is not consent to unrelated data processing.

Information processed through our service

CryptoRadar connects to api.mycryptoradar.com. Our server and hosting infrastructure receive your IP address and technical request information. Queries can contain asset identifiers, display currency, time period and filters.

We use IP addresses for request limiting. Application diagnostics record information such as request identifiers, HTTP methods, endpoint paths, response status, processing time and errors. Endpoint paths can identify an asset you viewed. Web-server logs may also record IP addresses, timestamps, request URLs, user-agent information and response details.

We use this information to provide requested data, operate and secure the service, prevent abuse and diagnose failures. Global rankings do not require you to provide your physical location.

Providers and external connections

• Hostinger hosts our backend, logs and scheduled backups. Privacy policy.
• CoinMarketCap supplies market data and logo metadata. Our backend retrieves market data using server-side credentials. The current Android subscription release displays asset-symbol badges instead of downloading coin logos directly to your device. Earlier releases may still request logo images from the image provider. Privacy policy.
• ExchangeRate-API supplies currency rates through backend requests. Terms and privacy policy.
• Google Play and Apple, where applicable, process downloads, purchases and store activity under their own policies. Google privacy policy and Apple privacy policy.
• Our privacy contact uses Gmail. If you email us, we receive your address and message, and Google processes the correspondence as our email provider.

Server-originated requests expose the server's network information to data providers. Earlier releases that display remote logos may send image requests directly from your device. Opening attribution or other external links exposes your connection information to the destination, whose privacy practices apply.

We may disclose information where necessary to meet applicable legal obligations or protect users' and the service's security and rights.

Subscriptions and purchase verification

Android subscriptions are purchased through Google Play. Google processes payment details; CryptoRadar does not receive your payment-card number or banking credentials.

The app sends its Google Play purchase token to our backend over HTTPS. Our backend submits that token to the Google Play Developer API to verify the subscription product, monthly base plan, subscription state and expiry. We use this information to grant access, restore purchases and prevent access using invalid or expired subscriptions.

The app holds the purchase token and a short-lived access token in memory while running. Access tokens expire within five minutes and no later than the verified subscription expiry. The current backend does not intentionally store purchase tokens in its database or include them in application logs. Google retains purchase records under its own policies.

You can manage or cancel your subscription through Google Play. Clearing app data or uninstalling CryptoRadar does not cancel the subscription. Privacy or deletion requests sent to us do not automatically cancel store billing.

Retention and deletion

Device data: Preferences and cached responses remain until replaced or removed. The app's local-data reset resets preferences but does not necessarily clear the separate market cache. Android's Clear storage removes app-local data. Uninstalling removes the installed app's local data, although operating-system backups may preserve or restore information depending on device settings.

Rate limiting: One-minute request-counting windows are held in server memory. Expired entries are removed in later cleanup sweeps or on server-process restart. This does not delete infrastructure logs.

Web-server logs: Nginx is configured for daily rotation and retention of 14 rotated log files. Actual retention depends on successful rotation, log activity and backup copies; this is not an exact 14-day deletion guarantee.

Application and system logs: The journal has a seven-day retention setting and a 1 GB size limit. Rotation and cleanup determine when archived files are removed; individual records may remain until their file is removed.

Backups: Weekly automatic VPS backups are scheduled. Backups can contain server data already removed from the running service. Hostinger's published policy describes retention of the two most recent weekly backups, replaced as new backups are created. This retention is separate from live logs. Individual records cannot necessarily be deleted independently from a whole-server backup. Backup information.

Support correspondence: We retain messages while needed to respond, resolve requests and maintain necessary support records. Retention may be longer for legal obligations or the establishment, exercise or defense of legal claims. Providers may retain their own operational records under their policies.

Your choices and requests

You can change preferences, remove watchlist entries and clear app-local storage. Email rizwan.app.studio@gmail.com to ask about access, correction or deletion of personal information we hold. Rights and exceptions depend on applicable law. We may request information reasonably necessary to verify your request; technical records may not reliably identify a particular person.

There is no CryptoRadar app account to delete. We cannot remotely remove information stored only on your device. Google and Apple manage their store purchase records. Do not email passwords, private keys, payment-card details or unnecessary sensitive information.

Security and international processing

The production API uses HTTPS to protect data in transit. No transmission or storage method is completely secure. Hosting, data, image, email and store providers may process information outside your country. Their policies describe their practices; contact us about applicable privacy rights.

Children

If you believe a child has provided personal information to us, contact us so we can investigate and take appropriate action under applicable law.

Changes and contact

We will update this policy when practices change and revise the date above. Where applicable law requires additional notice or consent, we will provide it.

Email rizwan.app.studio@gmail.com, with "CryptoRadar Privacy" in the subject.