Loading…
Loading…
Last Updated: October 6, 2026
This statement complements our Privacy Policy. It summarizes the legal bases we rely on and the rights of people in the European Economic Area (EEA) and the United Kingdom under the General Data Protection Regulation (GDPR) and comparable laws.
The operator of Squaby.com is identified on the Imprint page.
Third-party providers whose widgets or websites you use (for example swap and on-ramp providers) decide for themselves why and how they process the data you give them. They are independent controllers under their own privacy policies.
| Purpose | Legal basis |
|---|---|
| Analytics (Google Analytics, Google Tag Manager) | Consent, Article 6(1)(a) GDPR, and the e-privacy rules for cookies and similar technologies. |
| Advertising measurement and personalization signals (only if advertising tags are enabled in our tag setup) | Consent, Article 6(1)(a) GDPR, and the e-privacy rules. |
| Security, rate limiting and hosting logs | Legitimate interests, Article 6(1)(f) GDPR: protecting the website and its tools against abuse. |
| Providing the tools you use (for example wallet and contract lookups) | Legitimate interests, Article 6(1)(f) GDPR: delivering the lookup you requested. |
| Administrator sign-in and audit log | Legitimate interests, Article 6(1)(f) GDPR: security and traceability of content changes. |
| Answering messages you send us | Legitimate interests, Article 6(1)(f) GDPR, or steps before a contract, Article 6(1)(b) GDPR. |
Analytics and advertising are separate choices. You can change or withdraw either at any time, as easily as you gave it: . The same button is in the footer of every page. When you withdraw consent, Google cookies set earlier are removed from your browser. Your choice is stored for 180 days, after which we ask again.
To use a right, write to support@squaby.com. We may need to confirm your identity first, and we answer within one month, as the GDPR requires. Because we do not hold user accounts, we can usually only find data that you can describe to us, such as an IP address and a time period.
Some of our providers (see the table of recipients in the Privacy Policy) may process data outside the EEA. Where this happens, the provider relies on a transfer mechanism recognized by the GDPR, such as an adequacy decision or standard contractual clauses. The mechanism used by each provider is described in the provider's own documentation.
The retention periods for each category of data are listed in the Privacy Policy. Categories without a fixed period are marked “To be defined”; we will publish a period there when we set one.
You have the right to complain to a supervisory authority, in particular in the EU or EEA country where you live or work, or where you believe a violation took place.
We would appreciate the chance to address your concern first, so please contact us before you complain.