Last updated: April 21, 2014
In accordance with our commitment to protect personal privacy, Coinbase adheres to the principles of the Safe Harbor Framework as developed by the U.S. Department of Commerce in consultation with the European Commission. The seven principles and fifteen Frequently Asked Questions (FAQs) referred to in this policy constitute Safe Harbor privacy framework. These principles and FAQs may be found at:http://www.export.gov/safeharbor
When you visit the Coinbase website, use Coinbase services, or use third-party services which use the Coinbase application programming interface ("API"), we collect information sent to us through your computer, mobile phone, or other access device. This information may include your IP address, device information including, but not limited to, identifier, device name and type, operating system, location, mobile network information and standard web log information, such as your browser type, traffic to and from our site and the pages you accessed on our website. You must be at least 18 years old, or of the applicable age of majority, in order to use Coinbase services. Coinbase does not intentionally collect information from or about any individual who is under 13 years old.
If you create an account or use Coinbase services, we or vendors acting on our behalf may collect the following types of information:
Contact information - your name, address, phone, email, Skype ID and other similar information.
Financial information - the full bank account and routing numbers and/or credit card numbers that you link to your Coinbase account or input when you use paid Coinbase services. If you do not use the Coinbase Exchange Service, you may opt out of providing this information.
If you seek permissions to raise bitcoin buy and sell limits associated with your Coinbase Account, we may require you to provide additional information which we may use in collaboration with service providers acting on our behalf to verify your identity or address, and/or to manage risk. This information may include your date of birth, taxpayer or government identification number, a copy of your government-issued identification, or other personal information. We may also obtain information about you from third parties such as credit bureaus and identity verification services. If you do not use the Coinbase Exchange Service, you may opt out of providing this additional information.
When you use Coinbase services, we collect information about your transactions and/or your other activities on our website and we may continuously collect information about your computer, mobile device, or other access device for fraud prevention purposes, to monitor for possible breach of your Coinbase Account, and to identify any malicious software or other activity that may harm Coinbase or its users.
Finally, we may collect additional information you may disclose to our customer support team.
When you access our website or content or use our application or Coinbase services, we or companies we work with may place small data files called cookies or pixel tags on your computer or other device. We use these technologies to:
We use both session and persistent cookies when you access our website or content. Session cookies expire and no longer have any effect when you log out of your account or close your browser. Persistent cookies remain on your browser until you erase them or they expire.
We also use Local Shared Objects, commonly referred to as "Flash cookies," to help ensure that your account security is not compromised, to spot irregularities in behavior to help prevent fraud and to support our sites and services.
We encode our cookies so that only we can interpret the information stored in them. You are free to decline our cookies if your browser or browser add-on permits, but doing so may interfere with your use of our website. The help section of most browsers or browser add-ons provides instructions on blocking, deleting or disabling cookies.
Throughout this policy, we use the term "personal information" to describe information that can be associated with a specific person and can be used to identify that person. We do not consider personal information to include information that has been anonymized so that it does not identify a specific user.
We store and process your personal and transactional information, including certain payment information, such as your encrypted bank account and/or routing numbers, on our computers in the US and elsewhere in the world where Coinbase facilities or our service providers are located, and we protect it by maintaining physical, electronic and procedural safeguards in compliance with applicable US federal and state regulations. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorize access to personal information only for those employees who require it to fulfill their job responsibilities. Full credit card data is securely transferred and hosted off-site by a payment vendor in compliance with Payment Card Industry Data Security Standards (PCI DSS). This information is not accessible to Coinbase staff.
We store our customers' personal information securely throughout the life of the customer's Coinbase Account. Coinbase typically retains such customer records for a period of five years following cancellation of the associated Coinbase Account.
Our primary purpose in collecting personal information is to provide you with a secure, smooth, efficient, and customized experience. We may use your personal information to:
We will not sell or rent your personal information to third parties for their marketing purposes without your explicit consent. We may combine your information with information we collect from other companies and use it to improve and personalize Coinbase services, content and advertising.
To process your payments, we may share some of your personal information with the person or company to which you transfer or from which you receive bitcoin. Your contact information, date of sign-up, the number of payments you have received from verified Coinbase users, and whether you have verified control of a bank account are provided to other Coinbase users with whom you transact through Coinbase. In addition, this and other information you disclose to Coinbase may be shared with third parties who may provide, upon your authorization, ancillary services which access your Coinbase Account. Unless you have agreed to it, these third parties are not allowed to use this information for any purpose other than to facilitate your transactions using Coinbase services.
If you use your Coinbase Account to transfer bitcoin in connection with the purchase or sale of goods or services, we or you may also provide the seller with your shipping address to help complete your transaction with the seller. The seller is not allowed to use this information to market their services to you unless you have agreed to it. If an attempt to transfer bitcoin to your seller fails or is later invalidated, we may also provide your seller with details of the unsuccessful transfer. To facilitate dispute resolutions, we may provide a buyer with the seller's address so that goods can be returned to the seller.
In connection with a bitcoin transfer between you and a third party, including merchants, a third party may share information about you with us, such as your email address or mobile phone number which may be used to inform you that a transfer has been sent to or received from the third party. We may use this information in connection with such transfers to confirm that you are a Coinbase customer, that bitcoin transfers are enabled, and/or to notify you that you have received bitcoin. If you request that we validate your status as a Coinbase customer with a third party, we will do so. You may also choose to send bitcoin to or request bitcoin from an e-mail address. In such cases, your user name will be displayed in an e-mail message notifying the user of the designated e-mail address of your action. Please note that merchants you interact with may have their own privacy policies, and Coinbase is not responsible for their operations, including, but not limited to, their information practices.
We may share your personal information with:
Coinbase will not sell or rent any of your personal information to third parties for their marketing purposes and only shares your personal information with third parties as described in this policy.
If you establish a Coinbase account indirectly on a third party website or via a third party application, any information that you enter on that website or application (and not directly on a Coinbase website) will be shared with the owner of the third party website or application and your information may be subject to their privacy policies.
We will notify you of material changes to this policy by updating the last updated date at the top of this page. We recommend that you visit this page frequently to check for changes.
If you have questions or concerns regarding this policy, you should contact us on our support page or by writing to us at Coinbase, Inc. 548 Market St #23008 San Francisco, CA 94104, USA. If you believe your privacy has been compromised as a result of your use of Coinbase Services, you may submit a complaint through our independent data privacy consultant, Privacy Trust, via this form.