Privacy Policy (GDPR / DSGVO)

1. Data Controller

The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is the operator of this website. For data protection inquiries, please contact us at: privacy@wenmoon.app

2. Legal Basis for Data Processing

We process personal data based on the following legal grounds according to Article 6(1) GDPR:

Technically Necessary (Art. 6(1)(f) GDPR): Local Storage for essential website functions such as display preferences (theme, currency) is based on our legitimate interest in providing a functional website.
Consent (Art. 6(1)(a) GDPR): Google Analytics is only activated after you have given your explicit consent via the cookie banner.
Legitimate Interest (Art. 6(1)(f) GDPR): For the secure and reliable operation of this website, including server log files.

3. Data Collection

3.1 Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes:

Browser type and version
Operating system
Referrer URL
Host name of the accessing device
Time of the server request
IP address

This data is not combined with other data sources. The basis for processing is Art. 6(1)(f) GDPR — our legitimate interest in the stable and secure operation of this website. Log data is automatically deleted after 30 days.

3.2 Local Storage (Browser Storage)

This website uses Local Storage in your browser to store technically necessary preferences:

Theme preference: Your selected display mode (light/dark)
Currency preference: Your selected currency (USD/EUR)
Cookie consent status: Whether you have accepted or declined consent

This data is stored exclusively in your browser and is never transmitted to our servers. You can delete this data at any time through your browser settings. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing a functional website). These are technically necessary for basic website functionality and do not require consent.

3.3 Third-Party API Requests

This website retrieves real-time Bitcoin price data from external APIs. When our server fetches this data, the following third-party services may process the request:

Binance API (binance.com) — for Bitcoin price data
CoinGecko API (coingecko.com) — as fallback for Bitcoin price data
Kraken API (kraken.com) — as secondary fallback for Bitcoin price data

These API calls are made server-side, meaning your IP address is not directly shared with these services. However, our server's IP address is transmitted. Please refer to the privacy policies of these providers for further information.

4. Cookies & Tracking

4.1 Cookie Categories & Granular Consent

We use a granular consent banner with two clearly labelled categories: Essential (always on, no tracking — only stores your theme, currency, and last calculator inputs in your browser) and Analytics (off by default, requires explicit opt-in). You can accept all, reject all, or pick categories individually. Your choice is stored locally and can be changed any time via the "Cookie Settings" link in the footer. We use Google Consent Mode v2, so all storage types start in the denied state and only flip to granted once you opt in.

4.2 Google Analytics 4 (analytics category, opt-in)

If you accept the analytics category, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The lawful basis is your explicit consent under Art. 6(1)(a) GDPR. Without your consent, no GA scripts, cookies, or identifiers are loaded.

Google Analytics uses cookies and similar technologies to analyze your use of the website. The information generated is typically transferred to a Google server in the USA and stored there. We use IP anonymization, which means your IP address is shortened by Google within the EU before being transmitted. Analytics cookies expire after a maximum of 14 months. We never enable advertising or remarketing features — ad_storage, ad_user_data, and ad_personalization remain set to denied permanently.

Google Analytics collects the following data:

Pages visited and time spent on each page
Referral source (how you found the website)
Approximate geographic location (country/city level)
Browser type, device type, and operating system
Interaction events (clicks, scrolls)

You can withdraw your consent at any time by clearing your browser cookies or using the cookie banner settings. For more information, see Google's Privacy Policy and Google Analytics Opt-out Browser Add-on.

4.3 No Other Tracking

Apart from Google Analytics (with consent), this website does not use any other tracking, marketing, or advertising cookies. We do not use Facebook Pixel, retargeting, or any other third-party tracking tools.

The only other browser-side storage used is Local Storage for technically necessary purposes as described in Section 3.2. A cookie consent banner is displayed on your first visit to obtain your consent before analytics are activated.

5. Data Transfer to Third Countries

Our website is hosted on cloud infrastructure, which may process data in the United States. If you consent to Google Analytics, data may be transferred to Google servers in the USA. Google participates in the EU-US Data Privacy Framework. The server-side API requests to Binance, CoinGecko, and Kraken may also involve data processing outside the European Economic Area (EEA). We ensure that appropriate safeguards are in place per Art. 46 GDPR.

6. Data Retention

Server log data is retained for a maximum of 30 days and then automatically deleted. Local Storage data in your browser persists until you clear it manually or delete it through your browser settings.

7. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

Right of Access (Art. 15 GDPR): You may request information about your stored personal data.
Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate data.
Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data.
Right to Restriction (Art. 18 GDPR): You may request restriction of data processing.
Right to Data Portability (Art. 20 GDPR): You may request your data in a machine-readable format.
Right to Object (Art. 21 GDPR): You may object to the processing of your data based on legitimate interest.
Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time. You can clear your browser's Local Storage at any time through your browser settings.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) if you believe that the processing of your personal data violates the GDPR. You may contact the data protection authority in your country of residence.

9. Data Security

This website uses SSL/TLS encryption (HTTPS) for secure data transmission. We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, or destruction in accordance with Art. 32 GDPR.

10. Changes to This Privacy Policy

We reserve the right to update this privacy policy to comply with legal requirements or to reflect changes in our service. The current version always applies and is available on this page.

Last updated: February 2026