Last updated: August 25, 2015
In accordance with our commitment to protect personal privacy, Coinbase adheres to the principles of the U.S.-Swiss Safe Harbor Framework and the U.S.-EU Safe Harbor Framework as developed by the U.S. Department of Commerce in consultation with the European Commission. The seven principles ("Principles") and fifteen Frequently Asked Questions (FAQs) referred to in this policy constitute the Safe Harbor privacy framework. These principles and FAQs may be found at: http://www.export.gov/safeharbor.
When you visit the Coinbase website, use Coinbase Services, or use third-party services which use the Coinbase application programming interface ("API"), we collect information sent to us through your computer, mobile phone, or other access device. This information may include your IP address, device information including, but not limited to, identifier, device name and type, operating system, location, mobile network information, and standard web log information, such as your browser type, traffic to and from our site, and the pages you accessed on our website. You must be at least 18 years old, or of the applicable age of majority, in order to use Coinbase Services. Coinbase does not intentionally collect information from or about any individual who is under 13 years old.
If you create an account or use Coinbase Services, we, or our affiliates vendors acting on our behalf may collect the following types of information:
If you seek permissions to raise bitcoin buy and sell limits associated with your Coinbase Account, we may require you to provide additional information which we may use in collaboration with service providers acting on our behalf to verify your identity or address, and/or to manage risk. This information may include your date of birth, taxpayer or government identification number, a copy of your government-issued identification, or other personal information. We may also obtain information about you from third parties such as credit bureaus and identity verification services. If you do not use the Coinbase Conversion Service, you may opt out of providing this additional information.
When you use Coinbase Services, we collect information about your transactions and/or your other activities on our website and we may continuously collect information about your computer, mobile device, or other access device for fraud prevention purposes, to monitor for possible breach of your Coinbase Account, and to identify any malicious software or other activity that may harm Coinbase or its users.
Finally, we may collect additional information you may disclose to our customer support team.
When you access our website or content or use our application or Coinbase Services, we or companies we work with may place small data files called cookies or pixel tags on your computer or other device. We use these technologies to:
We use both session and persistent cookies when you access our website or content. Session cookies expire and no longer have any effect when you log out of your account or close your browser. Persistent cookies remain on your browser until you erase them or they expire.
We also use Local Shared Objects, commonly referred to as "Flash cookies," to help ensure that your account security is not compromised, to spot irregularities in behavior to help prevent fraud, and to support our sites and services.
We encode our cookies so that only we can interpret the information stored in them. You are free to decline our cookies if your browser or browser add-on permits, but doing so may interfere with your use of our website. The help section of most browsers or browser add-ons provides instructions on blocking, deleting, or disabling cookies.
Throughout this policy, we use the term "personal information" to describe information that can be associated with a specific person and can be used to identify that person. We do not consider personal information to include information that has been anonymized so that it does not identify a specific user. Coinbase takes reasonable precautions, as described herein, to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.
We store and process your personal and transactional information, including certain payment information, such as your encrypted bank account and/or routing numbers, on our computers in the United States and elsewhere in the world where Coinbase facilities or our service providers are located, and we protect it by maintaining physical, electronic, and procedural safeguards in compliance with applicable U.S. federal and state regulations. We use computer safeguards such as firewalls and data encryption, we enforce physical access controls to our buildings and files, and we authorize access to personal information only for those employees who require it to fulfill their job responsibilities. Full credit card data is securely transferred and hosted off-site by a payment vendor in compliance with Payment Card Industry Data Security Standards (PCI DSS). This information is not accessible to Coinbase staff.
We store our customers' personal information securely throughout the life of the customer's Coinbase Account. Coinbase will retain your personal information for a minimum of five years or as necessary to comply with our legal obligations or to resolve disputes.
Our primary purpose in collecting personal information is to provide you with a secure, smooth, efficient, and customized experience. We may use your personal information to:
We will not use your personal information for purposes other than those purposes we have disclosed to you, without your permission. From time to time we may request your permission to allow us to share your personal information with third parties. You may opt out of having your personal information shared with third parties, or from allowing us to use your personal information for any purpose that is incompatible with the purposes for which we originally collected it or subsequently obtained your authorization. If you choose to so limit the use of your personal information, certain features or Coinbase Services may not be available to you.
We will not sell or rent your personal information to third parties. We may combine your information with information we collect from other companies and use it to improve and personalize Coinbase Services, content, and advertising.
To process your payments, we may share some of your personal information with the person or company to which you transfer or from which you receive bitcoin. Your contact information, date of sign-up, the number of payments you have received from verified Coinbase users, and whether you have verified control of a bank account are provided to other Coinbase users with whom you transact through Coinbase. In addition, this and other information you disclose to Coinbase may be shared with third parties who may provide, upon your authorization, ancillary services which access your Coinbase Account. Unless you have agreed to it, these third parties are not allowed to use this information for any purpose other than to facilitate your transactions using Coinbase services.
If you use your Coinbase Account to transfer bitcoin in connection with the purchase or sale of goods or services, we or you may also provide the seller with your shipping address to help complete your transaction with the seller. The seller is not allowed to use this information to market their services to you unless you have agreed to it. If an attempt to transfer bitcoin to your seller fails or is later invalidated, we may also provide your seller with details of the unsuccessful transfer. To facilitate dispute resolutions, we may provide a buyer with the seller's address so that goods can be returned to the seller.
In connection with a bitcoin transfer between you and a third party, including merchants, a third party may share information about you with us, such as your email address or mobile phone number which may be used to inform you that a transfer has been sent to or received from the third party. We may use this information in connection with such transfers to confirm that you are a Coinbase customer, that bitcoin transfers are enabled, and/or to notify you that you have received bitcoin. If you request that we validate your status as a Coinbase customer with a third party, we will do so. You may also choose to send bitcoin to, or request bitcoin from an email address. In such cases, your user name will be displayed in an email message notifying the user of the designated email address of your action. Please note that merchants you interact with may have their own privacy policies, and Coinbase is not responsible for their operations, including, but not limited to, their information practices.
We may share your personal information with:
Coinbase will not sell or rent any of your personal information to third parties and only shares your personal information with third parties as described in this policy. Before Coinbase shares your information with any third party that is not acting as an agent to perform tasks on behalf of and under the instructions of Coinbase, Coinbase will ensure that the third party either subscribes to the Principles, or is subject to the European Union's Directive on Data Protection, or enters into a written agreement with Coinbase requiring that the third party will provide at least the same level of privacy protection as required by the Principles.
If you establish a Coinbase account indirectly on a third party website or via a third party application, any information that you enter on that website or application (and not directly on a Coinbase website) will be shared with the owner of the third party website or application and your information may be subject to their privacy policies.
In general, we will notify you of material changes to this policy by updating the last updated date at the top of this page, and we will provide you with explicit notice of material changes as required by law. We recommend that you visit this page frequently to check for changes.
If you have questions or concerns regarding this policy, you should contact us on our support page or by writing to us at Coinbase, Inc., 548 Market Street #23008 San Francisco, CA 94104, USA. If you believe your privacy has been compromised as a result of your use of Coinbase Services, you may submit a complaint through our independent data privacy consultant, Privacy Trust, via this form.