Effective 22 July 2026

This policy describes the system operating today.

Accounts, email capture, lesson progress, community features, and optional wallet connections are live or in public beta. Features labeled Planned are excluded until they actually collect or process data.

We do not sell personal data or share it with advertisers. Contact privacy@nextcoinclub.com to access, correct, or delete your information.

Privacy

What we collect,
and what we don't.

We do not sell your data. We do not share it with advertisers. You can delete your account and your data whenever you want. That is Standard 03, and this page explains how it works in practice.

Status · Effective
Published · 22 July 2026
Version · 1.0

What we collect

01

What you give us

  • Email address — required. Your account identity, verification, and service messages.
  • Passwordless authentication data — session tokens and one-time email-link records used to sign you in.
  • Display name or handle — optional until you participate in the community.
  • Profile details — optional. Bio and avatar, if you add them.
  • Community content — posts, replies, and questions you submit to Sunday Live.
  • Correspondence — support and security messages you send us.
02

What your use generates

  • Lesson progress — so you can pick up where you left off.
  • Session RSVPs or attendance — only when a session exists and you use those features.
  • Referral attribution — to run the referral programme and prevent fraud.
  • Login times, IP address, browser — for security and abuse prevention.
  • Product events — actions such as lesson completion and onboarding choices. The external analytics provider is currently disabled.
  • Wallet address — only if you choose to connect a non-custodial wallet. We never receive its private key.
03

What we never collect

We never collect private keys, seed phrases, or passwords to any other service. We will never ask for them, and there is no circumstance in which we would need them. Anyone asking is not us.

We do not collect payment card details, because membership is free. We do not collect government identity documents.

Why we use it

04

Legal basis

Where UK, EU or similar law applies, we rely on: contract for running your account, delivering lessons, saving progress, and community features; consent for SMS and any marketing email, which you can withdraw at any time; legitimate interests for security, fraud prevention, and understanding which content works; and legal obligation where the law requires it.

05

What we never do with it

We do not sell personal data. We do not share it with advertisers. We do not build advertising profiles, and we do not allow third parties to track you across the internet through our site.

Who else touches it

06

Service providers

We use providers that support the current product:

  • Supabase — database, authentication, and file storage.
  • Supabase email infrastructure — one-time authentication links and related delivery logs.
  • Netlify — website hosting and delivery, including normal network logs.
  • Web3Auth — optional non-custodial wallet connection when you choose to use it.
  • jsDelivr and Google Fonts — delivery of browser libraries and fonts, which can receive ordinary request metadata such as IP address and user agent.

If we enable a separate analytics, streaming, payment, or email provider, this list will be updated before that provider receives personal data.

07

Community platforms

If you join us on Telegram, X, or Discord, that platform handles your data there under its own privacy policy, as a separate controller. We do not control it, and what you share there is subject to their terms rather than ours.

08

Legal disclosure

We may disclose data where the law requires it, where it is necessary to protect members' safety, or in connection with a merger or sale of the business — in which case we will tell you.

Cookies and storage

09

What this site stores on your device

Local and session storage can hold your theme preference, authentication session, cached profile, lesson progress, pending sign-in email, and onboarding answers. These items keep you signed in, preserve progress, and complete the flow you requested.

Wallet providers may store strictly necessary connection state when you choose to connect a wallet. We do not use advertising cookies.

10

Consent for anything else

We do not use advertising cookies. Before adding non-essential storage or tracking that requires consent, we will provide a choice where rejecting is as easy as accepting. The external analytics provider is currently disabled.

Your rights

11

What you can ask for

Depending on where you live, you can access your data, get a portable copy, correct it, delete it, restrict or object to how we use it, and withdraw consent at any time. You will never be treated differently for exercising any of these.

We will respond within 30 days, or 45 days under California law, and we will not charge you.

12

How to exercise them

Email privacy@nextcoinclub.com. Settings can export your account profile and locally saved lesson progress; that download is not a complete server-side access request. Account deletion and complete access requests are handled manually by email.

13

If you are in the UK or EU

You can complain to your national data protection authority — the Information Commissioner's Office in the UK. You do not need to contact us first, though we would rather you did so we can fix it.

14

If you are in California

We do not sell or share personal information as the CCPA and CPRA define those terms, and we have not in the preceding twelve months. We do not use sensitive personal information beyond permitted purposes. You may make a request through an authorised agent.

Keeping and protecting it

15

How long we keep it

Account and community data are kept while your account is open. Deletion requests are actioned within 30 days unless a record must be kept for security, fraud prevention, dispute handling, or law. Delivery and security logs are kept only as long as needed for those purposes. Deleted data can remain in encrypted backups until the normal backup cycle overwrites it.

16

Security

We use encryption in transit, passwordless sign-in links, access controls, and row-level database security. No system is perfectly secure and we will not claim ours is. If a breach occurs that is likely to affect your rights, we will notify the relevant regulator where required and tell you without undue delay.

17

Children

This service is for people aged 18 and over. We do not knowingly collect data from anyone younger, and we delete it if we learn we have. If you believe a child has given us their data, email privacy@nextcoinclub.com and we will remove it.

18

International transfers and automated decisions

Your data may be processed outside your country, with appropriate safeguards where the law requires them. We do not make decisions about you that produce legal or similarly significant effects by automated means alone.

19

Changes to this policy

If we make a material change, we will email registered members and post a notice here before it takes effect. Previous versions stay available with their dates.

Contact us about privacy. privacy@nextcoinclub.com · General: hello@nextcoinclub.com · Security: security@nextcoinclub.com

Our fourteen published commitments are at standards.html, including Standard 03: your data is not the product. The terms of membership are at terms.html.