Privacy Policy

Welcome to myhotwallet. This Privacy Policy explains how we collect, use, protect, and handle your data when you use our cryptocurrency wallet platform. We value your privacy and are committed to protecting your personal information.

1. Information We Collect

myhotwallet is designed with a focus on privacy and data minimization. We collect only the information strictly necessary to provide our services securely and efficiently:

1.1. Basic Personal Data:

Email address: Used for account creation, authentication, access recovery, sending verification codes, essential security communications, technical support, and important service notifications.
Account Identifiers: Username or other unique identifiers generated by the platform.
Language preferences: To customize the platform interface according to your preference.
Account settings: Notification preferences and security settings selected by you (e.g., 2FA status).

1.2. Technical Data:

Device information: Device type, operating system, browser, and version (for optimizing user experience, security, and troubleshooting).
IP Address: Collected temporarily for security purposes, fraud prevention, and to identify access sessions (e.g., new device detection).
Access and activity logs: Date, time, and activities performed on the platform (e.g., login, password change, wallet creation) for security, auditing, and system integrity monitoring purposes.
Session data: Technical information necessary to keep your session active and secure while using the platform.

1.3. Wallet Data (Encrypted):

Encrypted recovery keys: Stored using AES-256 encryption and multiple layers of protection.
Wallet metadata: Non-sensitive information such as wallet name (defined by you), cryptocurrency type, creation date, and last wallet access.
Platform transaction history: Records of operations (sending, receiving) associated with the wallet's public address, obtained through third-party services. This includes transactions made through the platform as well as external movements, as long as they are linked to the same public address.

Commitment to privacy: We DO NOT collect your full name (except when required for submission of the contact page form, and this request is made solely for service and identification purposes), physical address, date of birth, identity documents, banking information, biometric data, or any other personal information that is not strictly necessary for the safe and efficient operation of the service.

2. How We Use Your Information

We use your information exclusively for the following legitimate purposes:

2.1. Service Operation:

Authenticate your access to the platform and keep your session secure.
Process and facilitate cryptocurrency transactions through the platform, according to your instructions.
Provide features for creating, securely storing, and managing your cryptocurrency wallets.
Customize the platform interface according to your language preferences and other settings.

2.2. Security and Protection:

Detect and prevent fraudulent activities, unauthorized access, and other malicious activities.
Implement additional security measures, such as new device verification or suspicious activity detection.
Verify your identity in account recovery situations or to confirm sensitive actions.
Monitor platform usage to identify potential vulnerabilities and ensure the integrity of our systems.

2.3. Communication and Support (including via Email):

Send transactional emails, such as registration confirmation, email/password change confirmation, and other relevant actions initiated by you in the account.
Send critical email notifications about security (e.g., suspicious login alerts, new device verification), scheduled maintenance, or important changes to our services or policies.
Provide technical support when requested by you, responding to your inquiries via email or other support channels and assisting in resolving reported issues.
Send verification codes via email for two-factor authentication (2FA), account recovery, or to confirm sensitive account actions.
Communicate important information about the service, including updates to the Terms of Service or this Privacy Policy, when required by law or deemed appropriate for your information.
Occasionally, we may send emails with important security tips or information about essential new features. You can manage your preferences for non-essential communications in your account settings.

2.4. Service Improvement:

Analyze aggregated and anonymized usage data to understand how our services are used and identify areas for improvement.
Develop new features and functionalities based on usage patterns (without identifying individual users).
Optimize the performance, usability, and stability of the platform.

Our Commitment to Your Data: We never sell your personal data to third parties. We do not create behavioral profiles for commercial purposes external to myhotwallet's operation, unless you explicitly consent to the use of advertising cookies for ad personalization, as detailed in our cookie policy.

Advertising on the Platform: Ads displayed on our site may use tracking technologies and collect personal data for personalization. This will only occur with your explicit and granular consent, allowing you to control your preferences through our privacy panel and respecting applicable data protection laws.

3. Data Protection and Security

We implement multiple layers of technical and organizational security to protect your information against unauthorized access, alteration, disclosure, or destruction:

3.1. Advanced Encryption:

AES-256 Encryption: Military-grade standard to protect your recovery keys and other sensitive data stored on our servers.
TLS/SSL: End-to-end encryption for all communications between your device and our servers, protecting data in transit.
Multi-layered encryption: Complementary algorithms and secure hash functions for additional data and password protection.
Password-derived keys: The key used to decrypt your wallet data is generated from your password and PIN, set at the time of wallet creation or during subsequent changes made directly through the wallet panel. These credentials are not stored by us.

3.2. Access Controls:

Restricted data access based on the principle of need-to-know for our team.
Mandatory multi-factor authentication (MFA) for all administrative access to our systems.
Detailed logs and monitoring of all administrative activities for anomaly detection.
Regular reviews of permissions and access to ensure they remain appropriate.

3.3. Secure Infrastructure:

Servers hosted in data centers with internationally recognized security certifications.
Continuous (24/7) security monitoring for detection and response to suspicious activities or incidents.
Advanced firewalls, intrusion detection and prevention systems (IDS/IPS).
Regular and encrypted data backups, stored in a distributed and secure manner for disaster recovery.

Audit and Continuous Improvement: Our security systems and privacy practices are regularly reviewed and, where applicable, audited by independent cybersecurity experts to ensure we maintain the highest data protection standards and to identify areas for continuous improvement.

4. Information Sharing

myhotwallet adheres to the principle of minimal sharing. We share your personal information only in the following limited and controlled circumstances, and always with appropriate safeguards:

4.1. Essential Service Providers (Subprocessors):

Cloud infrastructure providers (e.g., for hosting servers and storing encrypted data) that comply with strict security and data protection standards.
Blockchain node services and API providers to interact with cryptocurrency networks and process transactions, sharing only necessary data. In certain cases, and under appropriate controls, some services may have access to private keys to enable specific wallet functionalities.
Email service providers for sending essential communications (transactional, security, etc.).
All third parties are carefully evaluated for security and compliance. We strive to work only with providers that adopt good data protection practices.

4.2. Legal Requirements and Protection of Rights:

When required by law, applicable regulation, or in response to a valid legal process (e.g., court order, subpoena). We will carefully review such requests to ensure their validity.
To cooperate with investigations by competent law enforcement or governmental authorities, upon legal request.
To protect the rights, property, or safety of myhotwallet, our users, or the public, as permitted or required by law.
In cases of suspected proven illegal activity, to prevent harm or financial loss.

4.3. Business Transfers:

In the event of a merger, acquisition, sale of company assets, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you of such a transfer and any choices you may have regarding your information.
During business restructuring processes, ensuring that the same privacy and security standards will continue to apply to your information.

Privacy Guarantee in Sharing: We do not sell, rent, or trade your personal information with third parties for commercial purposes unrelated to the platform's operation. We never share your recovery keys (even in encrypted format) with third parties, except when strictly necessary and securely to process transactions under your command. Occasionally, we may display ads on our platform, including personalized ones, but this will only occur with your consent. We respect your privacy and follow applicable data protection laws, ensuring you have control over how your data is used.

5. Your Rights and Controls

You have full control over your personal data at myhotwallet and can exercise your rights at any time:

5.1. Rights of Access and Portability:

Access your data: View the personal information we hold about you through your account settings.
Export data (Portability): Request a copy of your personal information in a common, structured, and machine-readable electronic format.
Privacy report: Request a detailed report on how your data is collected, used, and shared.

5.2. Rights of Modification and Rectification:

Update information: Change your email address, language preferences, and other account settings directly on the platform.
Correct data (Rectification): Request the correction of incorrect, inaccurate, or outdated personal information we hold about you.
Manage notifications: Control the types of email communications you wish to receive (e.g., opt out of promotional or non-essential informational emails) through your account settings or unsubscribe links.

5.3. Rights of Deletion (Right to be Forgotten) and Restriction:

Delete account: Permanently remove your account and its associated personal data.
Delete wallets: Delete specific wallets and their encrypted data stored on our platform.
Right to be forgotten: Request the removal of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw your consent (where applicable).
Right to object: Object to the processing of your personal data in certain circumstances, particularly for direct marketing purposes.
Restrict processing: In certain circumstances, request the restriction of the processing of your personal data.

5.4. How to Exercise Your Rights:

Many of these rights can be exercised directly through your account settings on the myhotwallet platform.
For requests that cannot be made directly, or for any questions, contact us by sending a request to our DPO (Data Protection Officer) at the email: [email protected]
You can also use the contact form on our Support page for privacy-related questions.
We will respond to all legitimate requests related to your privacy rights within 30 days, or as required by applicable law. We may request additional information to verify your identity before processing your request.

6. Cookies and Similar Technologies

We use cookies and similar technologies responsibly and transparently, primarily to ensure the proper and secure functioning of the platform:

6.1. Strictly Necessary Cookies:

Session cookies: Essential to keep you logged in while using the platform and to remember your actions within a session.
Security cookies: Help protect your account and our platform against fraudulent activities by verifying the authenticity of requests.
Preference cookies: Store your language settings, theme (light/dark), and other interface preferences to personalize your experience.
These cookies are essential for the platform's operation and cannot be disabled in our systems.

6.2. Functional and Analytical Cookies (with consent, if applicable):

Performance/analytical cookies: Aggregated and anonymized data is collected on how visitors use our platform (e.g., pages visited, time spent), helping us optimize performance and identify areas for improvement. We use tools that respect privacy and anonymize IPs.
Tracking advertising cookies: We use cookies to display personalized and relevant ads, which may include tracking user behavior for advertising purposes. These cookies will only be activated with your explicit consent.

6.3. Cookie Management:

You can configure your cookie preferences (for non-essential cookies) through your account settings or our cookie consent banner, when applicable.
Most browsers allow you to manage cookies through their settings (e.g., view, block, or delete cookies). Consult your browser's documentation for more information.
Note that blocking strictly necessary cookies may affect the functionality of the myhotwallet platform.

Transparency about Cookies: We use cookies, including third-party cookies, to enhance your experience on our site, personalize content and ads, offer social media features, and analyze traffic. Some of these cookies may be used for advertising tracking purposes, allowing us to display more relevant ads based on your browsing. You can manage your cookie preferences at any time in your browser settings or through our privacy panel.

7. Data Retention

We retain your personal data only for as long as strictly necessary to fulfill the purposes for which it was collected, including providing our services, complying with legal obligations, resolving disputes, and enforcing our agreements:

7.1. Active Account Data:

Your account information and wallet data are retained as long as your account remains active and you use our services.
Data is updated as you use the platform and is protected with the same security measures throughout the retention period.

7.2. Data After Account Closure or Deletion:

Account deletion: Upon your request to close your account, your identifiable personal data will be deleted or anonymized from our production systems within 30 days, subject to legal exceptions.
Deleted wallet data: If you delete a specific wallet, its associated encrypted data will be marked for deletion and removed from our production systems within 4 to 8 days.
Security and audit logs: Security and transactional logs may be retained for a longer period for auditing, security, and compliance purposes, after which they are anonymized or deleted.
Aggregated and anonymized data: Statistical information that does not identify individuals may be retained indefinitely for service analysis and improvement purposes.

7.3. Legal Exceptions to Retention:

Your data may be retained for a longer period if we are required by law, regulation, court order, or to comply with other legal obligations (e.g., tax laws, anti-money laundering laws, if applicable).
Information related to legal disputes, investigations, or to protect our legal rights may be retained until the issue is resolved.

7.4. Early Deletion:

You may request the early deletion of specific personal data, subject to our legal obligations and operational needs.
We will review each request individually and provide confirmation of deletion or justification for retention, if applicable, within a reasonable timeframe.
Remember that the process of deleting data from our production and backup systems is irreversible; once deleted, data cannot be recovered.

Our retention policy: Our goal is to retain your data only for as long as strictly necessary to provide services, comply with legal obligations, and protect our systems and users. You have control over your data and can request deletion as described in this policy and permitted by law.

8. International Data Transfer

myhotwallet operates globally, which means your personal information may be processed and stored on servers located outside your country of residence, where data protection laws may differ.

Our main servers are located in jurisdictions with strong data protection laws.
By using our services, you consent to the transfer of your information to these locations.
While we take steps to protect your information, protection levels may vary depending on the jurisdiction to which the data is sent. We recommend that you be aware of the potential risks involved in these transfers.
We ensure that any third parties processing your data on our behalf also provide adequate protection, regardless of their location.

Global Protection: Regardless of where your information is processed, we apply the same protections described in this Privacy Policy and comply with applicable laws to ensure the security and confidentiality of your data.

9. Children's Privacy

myhotwallet's services are not directed to individuals under the age of 18 (or the legal age to enter into contracts in your jurisdiction, whichever is greater).

We do not knowingly collect personal information from children under 18.
If you are a parent or legal guardian and believe that your minor child has provided us with personal information without your consent, please contact us immediately at [email protected].
If we become aware that we have collected personal information from a minor without verifiable parental consent, we will take steps to remove that information from our servers as quickly as possible.

Attention to Parents and Guardians: We encourage parents and guardians to monitor their children's internet use and to instruct them never to provide personal information online without permission.

10. Changes to This Privacy Policy

myhotwallet reserves the right to modify this Privacy Policy at any time to reflect changes in our information practices, legal, or operational requirements.

Any changes will be posted on our website, and the "Last updated" date at the end of this policy will be revised.
For significant changes, we may provide a more prominent notice, such as a notification on the platform or an email to your registered address, before the changes take effect.
We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information.
Your continued use of the myhotwallet platform after an updated policy is posted (or after the notification period for significant changes) will imply your acceptance of the new terms. If you do not agree with the changes, you must stop using our services and may request the closure of your account.

11. Contact

If you have questions about this Privacy Policy, please contact us through the Contact page.

Last updated: June 17, 2025