Privacy Policy

1. Data controller

David Karel, Company ID (IČO) 44727062, registered office at Československé armády 229, 250 70 Odolena Voda, Czech Republic, is the data controller for personal data of Euro mincovna (coinalbum.eu) Users. Contact for privacy questions: info@coinalbum.eu.

2. What data we process

• Account data — email, name/nickname, password (stored only as an irreversible cryptographic hash).
• Collection data — the coins you record, their country/year/denomination/value, condition notes.
• Coin photos — discarded immediately after AI processing; the app never stores them permanently.
• Payment data — your credit/payment history in the app; the app never sees or stores your card number, which is handled exclusively by Stripe.
• Feedback — the text of a message the User voluntarily sends from the app (Settings → Send feedback), together with their email so the Operator can reply; deleted together with the account.
• Seller's bank account on the Marketplace — an IBAN, if the User voluntarily provides one; stored in encrypted form.
• Technical and security data — IP address and login timestamp, to protect against misuse.
• Login cookie — a technical cookie required to stay logged in. The app uses no third-party marketing or analytics cookies.
• Anonymous visit statistics — the app remembers, in your browser's storage (localStorage), a random number not linked to any person and where the visitor came from (a tag in the link or the referring site). On the first visit we record that source, the day and the landing page (no IP address and no device data), and at registration we attach it to the account, so we know which links bring users to the app. We share this data with no one and do not use it for advertising. You can clear or block the storage in your browser at any time; the app works without it.

3. Why we process this data

• Contract performance — maintaining your account, tracking your collection, processing payments, connecting you with others on the Marketplace.
• Legitimate interest — protecting the app and its Users against misuse and fraudulent conduct on the Marketplace, and an anonymous overview of where users come from.
• Legal obligation — retaining accounting/tax records for the period required by law.

4. Who we share data with

• Stripe (Stripe Payments Europe, Limited) — processing card / Apple Pay / Google Pay payments.
• Anthropic, PBC — the AI model used for coin recognition; a photo is sent for one-time processing outside the EU/EEA, based on Standard Contractual Clauses (SCCs) under Article 46 GDPR. Anthropic does not store the photo permanently either.
• The app's hosting and email provider — running the server and sending system emails.

We do not sell or share your data with third parties for marketing purposes.

5. How long we keep data

Account and collection data for as long as your account exists, after which we delete it — except for payment records, which we retain for the period required by tax law (typically 10 years). Coin photos are never stored at all.

6. Your rights

As a data subject you have the right to access, correct, erase, restrict processing of, and port your data, to object, to withdraw consent, and to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, uoou.cz). You can exercise your rights at info@coinalbum.eu — we respond within 30 days at the latest.

7. Security

Passwords are stored exclusively as a cryptographic hash, and sensitive data such as IBANs in encrypted form. The app runs exclusively over a secure (HTTPS) connection.

8. Changes to this policy

We may update this policy from time to time. We will notify Users of a material change by email or upon logging into the Application.

This is a standard arrangement under GDPR and Czech law. This English text is provided for convenience; the Czech original governs in case of any discrepancy. For specific disputed situations, we recommend consulting a lawyer.