The Compendium Co.Battle Crypto

Privacy Policy

The iOS app collects nothing

Everything below describes the website. The iOS app from the App Store does not collect, store or transmit anything about you. It never contacts our servers at all — not to count you, not to check a license, not for anything. It reads two public sources directly: Coinbase's public market data and the public XRP Ledger. Nothing you do in the app reaches us.

Accounts, email capture, price alerts, exchange linking and order sending are website features. They are not in the app, and the sections below apply only if you use them at battle-crypto.com in a browser.

What we collect, and only if you do these things

• Your email address — when you buy a license or create an account. We use it to send your code, to let you sign in on your other devices, and to reply if you contact support. Nothing else.
• Your license record — the code, when it was issued, when it was redeemed, and whether it was refunded. This is what makes "lifetime access" work across your devices.
• Your password — stored only as a bcrypt hash. We cannot read it and neither can anyone who obtains the file.
• Exchange API keys — only if you link Coinbase or Kraken yourself. They are encrypted with AES-256-GCM before they are written down, they are never returned to any page or API, and they are deleted the moment you unlink. We ask you to create keys without withdrawal permission, and we never hold your coins or your funds — those stay at your exchange. If you switch order sending on, we keep a record of the orders you sent through us, so there is an audit trail you can read.
• A push subscription — only if you turn on alerts. That is a token your browser issues, plus the levels you asked to be told about. It is not a name, an address or a device identifier, and turning alerts off deletes it.

Watching the free XRP market requires none of this. No account, no sign-in, no payment.

What we never collect

• No outside analytics companies, on the site or in the app. The website's own analytics is described below, and the app has none at all.
• No advertising identifier, no IDFA, no ad networks, no third-party ad or tracking SDKs.
• No card details. Payments are handled entirely by Stripe on the web and by Apple on the App Store — neither we nor the app ever see your card.
• No location, contacts, photos, microphone, camera or health data.
• Nothing is sold, rented or shared with data brokers. Ever.

What stays on your device

These live in your browser's local storage and never reach us:

• Your license token, so you stay unlocked.
• Drawings and price alerts you create on the chart. Alerts are checked in your browser — they run only while the page is open, and the levels are never sent to us.
• Preferences: which market you last watched, your battle era, your wall layout.

Counters and the market poll

Two small things on the site involve your device, and both are deliberately anonymous:

• "Watching now" counts open boards using a random identifier generated per browser tab. It is not stored, not linked to you, and disappears within ninety seconds of you leaving.
• The "next market" poll stops repeat voting using a salted one-way hash of your IP address. We store the hash, never the address, and it cannot be reversed to identify you or your location.

Our own site analytics

The website uses a small analytics tool that The Compendium Co. runs itself, served from this site's own address. It isn't Google Analytics or any other outside service, and it isn't in the iOS app. When it's on, it sets a first-party cookie called _cmk that holds a random visitor ID and lasts up to 13 months. Under that ID it records:

• The pages you view: the page address, keeping only these labels from it if they're present (utm campaign tags, ref, q, search, asset, coin, symbol, product, sku, category, plan, tier, tab and page), plus the page title, the site that sent you (its domain only), how long you stay on the page, and how far you scroll.
• The links and buttons you click: their visible text, up to 60 characters, and where they lead.
• The forms you submit: the form's name, the names of its fields, and where it's sent. It never records what you type into a form, with one exception: when you submit your email address, we link that address to your visitor ID so we can see what you were interested in.
• Your device type, browser, operating system and country. Your country comes from Cloudflare. We don't store your IP address.

We use this to understand what visitors are interested in, to improve our sites and offers, and to tell people about products across The Compendium Co.'s sites that match their interests. If we have your email address, that can include emailing you about them. The data stays with The Compendium Co. and its sites. We don't sell it, and we don't share it with advertisers or outside analytics companies.

Your analytics choices

A banner lets you choose Accept all or Necessary only. We remember your choice for one year in a cookie called _cmk_c.

• If you're in the European Union or European Economic Area, the UK or Switzerland, or we can't tell where you are, nothing is recorded until you choose Accept all.
• Everywhere else, analytics run unless you choose Necessary only or your browser sends a Global Privacy Control signal, which we honor.
• Choosing Necessary only, or visiting battle-crypto.com/_m/optout, turns analytics off and deletes the activity we've recorded under that browser's visitor ID.

There's a short, plain-language summary at battle-crypto.com/_m/privacy.

What the app connects to

To show a live market your device connects directly to public market-data services. We do not proxy, record or receive that traffic:

• Coinbase — public market data for trades and prices (api.exchange.coinbase.com, ws-feed.exchange.coinbase.com).
• The XRP Ledger — a public node cluster for on-chain activity (xrplcluster.com).

As with any internet request those services can see your device's IP address. They are independent companies and their own privacy terms apply. Neither request carries any identifier from us.

If the app cannot reach them it says so on screen and runs a clearly labeled simulated market instead.

Others who process something for us

• Stripe — takes the payment on the web and tells us an email address and that the payment succeeded.
• Apple — takes the payment if you buy the app on the App Store. That purchase happens entirely inside Apple: we are never told who you are, we receive no receipt, and the app itself sends us nothing at any point.
• Amazon SES — sends the email containing your code.
• Cloudflare — serves the site and keeps standard short-lived server logs (IP address, timestamp, page requested) for security and abuse prevention.
• Coinbase and Kraken — only if you link them. Your instructions go to them directly under your own API key; they are your accounts, under their terms.
• Your browser vendor's push service (Apple, Google or Mozilla) — it delivers alert notifications. It sees that a message was sent to your device, never your account.

We set no advertising cookies. We use one cookie to keep you signed in, and on the website we use the two analytics cookies described above, _cmk and _cmk_c.

How long we keep it

Your account and license are kept for as long as the license is valid — it is a lifetime license, so that is indefinitely, unless you ask us to delete it. Server logs are short-lived. The analytics cookie that holds your visitor ID lasts up to 13 months, and the cookie that remembers your banner choice lasts one year.

Your choices

Email [email protected] and we will delete your account and email address, or send you a copy of what we hold, within 30 days. Deleting the account ends the license, since the license is what the account is for. You can clear everything held on your device at any time by clearing site data in your browser. To turn off the website's analytics and delete what it has recorded under your browser's visitor ID, visit battle-crypto.com/_m/optout.

Children

Battle Crypto is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has created an account, email us and we will remove it.

Not financial advice

Battle Crypto is a visualization. It cannot place orders, holds no funds and no keys, and is not investment advice. It is not affiliated with Coinbase, Ripple, Apple or any exchange.

Changes

If this policy changes the effective date above changes with it. If a change materially affects data we already hold, we will email account holders before it takes effect.

Contact

The Compendium Company
[email protected]