BACK TO HOME
crypto

crypto

General Servicecrypto.com

Privacy Conclusion

"Crypto.com exhibits aggressive data collection practices typical of financial services but with significant privacy concerns exceeding industry norms. The service collects extensive sensitive data including biometric identifiers (facial geometry), financial records, government IDs, and political/behavioral information with indefinite retention for active accounts and post-account-closure sharing. Combined with broad third-party sharing to affiliates, advertising platforms, public blockchains, and government agencies alongside cross-site behavioral tracking, this creates compounded privacy exposure comparable to ad-tech platforms but with higher financial and identity theft consequences."

Risk Score
78
HIGH RISK

crypto Privacy Concerns & Scorecard

Privacy Risk Analysis
Third-Party SharingCRITICAL

Broad sharing with government and law enforcement agencies and fraud prevention agencies beyond what may be legally required, with limited user consent or notice mechanisms

Data CollectionCRITICAL

Comprehensive financial and identity data collection including Social Security Numbers, national identity documents, passports, driving licenses, bank account details, payment card details, and virtual currency accounts

Transparency & RightsHIGH

Limited opt-out mechanisms relative to extensive data collection scope; service messages and core functionality communications cannot be opted out of, limiting user control

Tracking & AdsHIGH

Marketing profiling creates inferred preference profiles for targeted advertising; affiliates market to users based on transaction history and customer experiences without explicit per-campaign consent

Retention & ControlHIGH

Minimum 5-year retention period mandated by Bank Secrecy Act after relationship ends, with additional indefinite retention for litigation, audit, and compliance purposes

Recommended Actions

No recommended actions at this time.

Automate your privacy

Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.

Data Collection & Tracking

Personal Information Collected

Identity & Government Data

Regulatory compliance, identity verification (KYC/AML), and fraud prevention

Biometric Data

Identity verification, account access authentication, and compliance/training purposes

Financial & Transaction Data

Account management, transaction processing, fraud detection, investment suitability assessment, and regulatory compliance

Contact & Address Data

Account communications, service delivery, fraud prevention (suspicious address changes monitored), and marketing

Device & Technical Data

System security, fraud prevention, technical troubleshooting, and service optimization

Location Data

Fraud detection, regulatory compliance (geographic restrictions), and service personalization

Behavioral & Preference Data

Risk assessment, compliance evaluation, marketing segmentation, and product/service recommendations

Social & Identity Integration Data

Account verification, fraud prevention, social login integration, and marketing reach

Cross-Platform Tracking

Crypto.com tracks your activity across other websites and applications through cookies and similar tracking technologies. When you visit non-Crypto.com websites, the service collects technical and behavioral data to measure advertising effectiveness and deliver targeted content. This cross-site tracking data is shared with advertising platforms and analytics providers to build profiles of your interests and online behavior.

Tracking Methods:

Cookies & Similar Technologies

First-party and third-party cookies track user behavior on Crypto.com and across other websites to measure advertising effectiveness, deliver targeted content, and build marketing profiles

Web Analytics & Tracking Pixels

Tracking pixels on partner websites and embedded analytics code collect behavioral data to measure campaign effectiveness and create audience segments for targeted advertising

Device Fingerprinting & Identifiers

Technical data (IP, browser, device type, OS) combined to create unique user identifiers for fraud detection and cross-session tracking within Crypto.com

Affiliate & Third-Party Pixels

Data shared with advertising platforms and social media networks that track users across the internet for remarketing and audience building purposes

AI & Data Training

crypto does not train AI on your content

Based on their public policy, your content is not used to train AI models.

How to Object

No opt-out available

This service does not currently provide a public way to opt out of AI training.

Why We Analyzed crypto

TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.