Privacy policy

Last updated: 1 November 2026

1. Controller

Controller and responsible editor: Pistepoint · Business ID (Y-tunnus) 1926544-7 · Contact: contact@hodlia.fi

2. What we collect and why

• Hosting & security: our host (Hostinger, EU) keeps standard server logs (IP address, time, requested URL, browser). Legal basis: legitimate interest (GDPR art. 6(1)(f)). Retention: 30 days.
• Analytics — Cloudflare Web Analytics (cookieless): we measure visits only as aggregated data: page views, referring sites, device and browser type and approximate country. No cookies or local storage are used, no fingerprinting is done, and no personal data is collected to identify you or follow you across sites. Legal basis: legitimate interest (GDPR art. 6(1)(f)). Cloudflare, Inc. processes this data on our behalf as a processor; data may be processed in the US under the EU–US Data Privacy Framework. See Cloudflare’s privacy policy.
• Google Search Console: used only to see how the site appears in Google Search; it adds no script or cookie to the site.
• Newsletter & e-mail alerts — Brevo (Sendinblue SAS, France, EU): if you sign up, your e-mail address, chosen lists, consent time and consent text are stored with Brevo, plus open/click statistics. Watchlist alerts additionally store coin IDs and thresholds on our server. Double opt-in; legal basis: consent (art. 6(1)(a)). Unsubscribe from any e-mail or by writing to us; data is then deleted (a suppression entry is kept so we do not e-mail you again). Not active yet.
• Anonymous statistics: when you open a coin, stock or versus page, and when you vote in the weekly poll, our server adds +1 to a weekly counter. To avoid double counts we use a hash of your IP address and browser with a random salt that is deleted daily (poll: weekly), so the hash cannot be linked to you or across periods. We store no IP addresses, cookies or user IDs for this; only totals, shown only from 5 readers (poll: 20 votes).
• Daily Hodl leaderboard (optional): if you add your score, we store the nickname you choose and your score for that day, plus a short hash of your IP address and browser made with a random salt that is replaced daily (only to allow one entry per day; it cannot be linked to you across days). Don't use your real name. Legal basis: legitimate interest (running the game you chose to join). Entries are deleted after 90 days.
• Prediction tracker (optional): if you submit a guess, we store your nickname, the guessed BTC price and the time, plus the same kind of weekly-salted hash to allow one guess per week. Results (nickname, guess, distance from the actual price) are shown publicly on /en/weekly/. Legal basis: legitimate interest. Kept while the tracker runs; ask us at contact@hodlia.fi to remove your entries.
• Watchlist sync by e-mail link (optional): if you request a sign-in link, your e-mail address is passed to Brevo (EU) only to send that link. On our server we store your watchlist (coin/stock IDs and names) under a one-way hash of your e-mail (with a secret server-side key); the address itself is not stored by us. The link is valid for 30 minutes, the device session for 180 days. Legal basis: consent (art. 6(1)(a)). “Delete synced copy” on the watchlist page removes the list and all sessions immediately. Not active yet.
• Your browser only: theme, currency, watchlist, quiz streak and browser-alert settings are stored in localStorage on your device and never sent to us — except watchlist IDs if you tick “Count my watchlist in Readers' favourites”.
• E-mail to us: we keep your message only as long as needed to handle it.

3. Cookies

Hodlia sets no advertising or tracking cookies, and our Cloudflare Web Analytics is cookieless. Third-party widgets (TradingView) and data requests (CoinGecko via our server) may process technical data such as your IP address under their own policies.

4. Processors & transfers

Hostinger (hosting, EU), Cloudflare, Inc. (cookieless web analytics; may involve transfers to the US under the EU–US Data Privacy Framework), Brevo (e-mail), Google (Search Console; may involve transfers to the US under the EU–US Data Privacy Framework). We do not sell personal data.

5. Your rights

You have the right to access, rectify and erase your data, restrict or object to processing, data portability, and to withdraw consent at any time. Contact contact@hodlia.fi. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

6. Changes

We update this page when our practices change.