"Kraken presents a critical privacy risk score of 78/100, driven by extensive collection of highly sensitive financial and cryptographic data (including seed phrases and private keys), broad sharing with numerous third parties for compliance and marketing purposes, and permanent on-chain attestations that cannot be deleted or modified. The service deploys sophisticated cross-site tracking via pixels and EUID identifiers while retaining data indefinitely where legal/technical reasons justify it, with minimal user control over core compliance data collection and vague policies regarding which entities receive personal information."
Take Action
7 Privacy Improvements Available
kraken Privacy Concerns & Scorecard
On-chain attestations cannot be modified or deleted once published, eliminating user control over immutable public identity verification records that can be re-identified through forensic analysis.
Collection of cryptographic key material and private keys through Kraken Legacy service creates exceptional security and privacy risk if compromised, as these materials provide complete access to user cryptocurrency assets.
Data shared with extensive array of third parties including payment providers, banking partners, advertising networks, analytics providers, AML/fraud/security service providers, and credit reference agencies with limited user visibility into specific entities.
Policy uses broad language regarding data sharing with 'other third-party service providers' and 'other information' deemed necessary for compliance, without specifying which entities or categories of data.
Kraken deploys web beacons, pixel tags, conversion APIs, and European Unified IDs (EUID) for cross-internet advertising, creating persistent cross-site tracking and behavioral profiling.
On-chain attestations and transaction records are immutable and permanently recorded on public blockchains with no deletion mechanism, creating permanent digital identity linkages.
Account closure
- 1Ensure all funds have been removed from your account before proceeding.
- 2On the Kraken web interface, click on your Account icon in the top right corner and then click on Settings.
- 3Scroll to the bottom and click 'Close account'. Review the important information shown and click Continue if you agree.
- 4Select the reason(s) why you are closing your Kraken account, then click Continue.
- 5Click 'Yes, close my account' to confirm closure and be logged out of all devices.
Marketing communications opt out
- 1Click the unsubscribe link in any marketing email received from Kraken, or log in to your Kraken account and navigate to notification or communication preferences in Settings.
- 2Disable or opt out of direct marketing communications.
- 3Alternatively, contact Kraken via the support contact form to request removal from marketing lists.
Data deletion request
- 1Navigate to the Kraken support contact form at support.kraken.com/forms/64800
- 2Submit a data deletion request specifying what personal data you want deleted, removed, blocked, or anonymised.
- 3Await Kraken's response — they will process the request subject to applicable legal retention obligations.
Automate your privacy
Connect your accounts to TrueTerms to automate these privacy actions and monitor policy changes.
Data Collection & Tracking
Personal Information Collected
Account creation, regulatory compliance, AML/KYC verification, fraud prevention, and sanctions screening
Payment processing, fraud detection, AML compliance, regulatory reporting, and behavioral profiling for dynamic pricing and Salary Match ML scoring
Account management, transaction processing, fraud prevention, regulatory compliance, identity verification, and on-chain attestation creation
Payment service delivery, transaction settlement, fraud prevention, AML compliance, and regulatory reporting
Security, fraud detection, platform optimization, analytics, and cross-device tracking for advertising
Regulatory compliance, fraud prevention, sanctions screening, tax reporting, and AML requirements
Platform optimization, content personalization, product improvement, analytics, and AI model training (without using data to train third-party AI models)
Account access control, security, fraud prevention, and account recovery
Account communication, customer support, marketing communications, and service notifications
Marketing campaign optimization, affiliate partner tracking, customer segmentation, and dynamic pricing analysis
Cross-Platform Tracking
Kraken tracks users across multiple sites and apps through European Unified IDs (EUID) deployed via web beacons and pixel tags for cross-internet advertising profiling. The service also collects device identifiers, IP addresses, and browser fingerprints that enable tracking across devices and platforms. On-chain transaction records are linked to Kraken accounts and recorded on public blockchains accessible globally.
Tracking Methods:
Web Beacons & Pixel Tags
Deployed across website, applications, and emails to track user interactions, conversion events, and engagement. Creates continuous tracking across Kraken properties and enables third-party advertising networks to track conversions.
Cookies & Similar Technologies
Used for session management, authentication, analytics, marketing performance measurement, and personalization. Includes persistent cookies for cross-visit tracking. Users can adjust cookie settings but some functionality may be impacted.
European Unified ID (EUID)
Privacy-preserving but persistent identifier created for cross-internet advertising. Enables Kraken to track user behavior across websites and apps for behavioral targeting and retargeting campaigns.
Conversion APIs
Server-side tracking that sends conversion and engagement events to advertising networks (Facebook, Google, etc.), enabling behavioral profiling and retargeting even when cookies are blocked.
Social Login Tracking
When users sign in via Google or Apple, those platforms receive data about Kraken authentication and usage. Can be disabled by unlinking social sign-in accounts and using email/password instead.
Device Fingerprinting
Collection of device identifiers (IP address, MAC address, device ID, browser type, OS, SIM info) enables unique identification of users across sessions and devices without relying on cookies.
AI & Data Training
kraken does not train AI on your content
Based on their public policy, your content is not used to train AI models.
How to Object
No opt-out available
This service does not currently provide a public way to opt out of AI training.
Why We Analyzed kraken
TrueTerms automatically audits privacy policies and data practices using advanced machine learning to keep you informed and protected. This scorecard is based on the latest available public terms of service and privacy policies as of 2026.