Snapshot 118930

Document
Security page
URL
https://www.cointracker.com/security
Fetched
HTTP status
200
Content type
text/html; charset=utf-8
Fetch mode
static
Size
572873 bytes
SHA-256 (raw)
fa233539d7e74c61cc8c66eddc86c16587b9ffd963923ad918224a7561f4fc8b
SHA-256 (normalized text)
cf6a79e8e2d32f8d993beb1088b9f49e33fabce5a868636bf15f976acf65f1f2

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Security
The security of your data is foundational to everything we do. If you have any questions or concerns, please contact us at security@cointracker.com.
Last Updated: Jan 1, 2025
If you have any questions about our Privacy Policy or information practices, please feel free to contact us.
Organization
Our team includes people from top technology companies such as Airbnb, Amazon, Apple, Coinbase, Google, Kraken, Meta, Shopify, Square, and Microsoft.
All CoinTracker employees must pass a thorough background check as part of the hiring process.
No Access to Private Keys
We never ask for your crypto wallets' private keys.
Coinbase integration is done through Coinbase Connect (OAuth). Our Coinbase integration requests read-only access to your Coinbase data.
All other exchanges are integrated with read-access only API keys on the exchange accounts.
All API keys are encrypted & securely stored.
Application Security
Our website traffic runs entirely over encrypted SSL (https).
We use SQL injection filters and verify the authenticity of POST, PUT, and DELETE requests to prevent CSRF attacks.
We hash passwords stored in the database (using bcrypt with a cost factor of 12).
We support token-based two factor authentication via Settings.
A third party security firm conducts an annual penetration test of CoinTracker and verifies security patches for further vulnerabilities. We are certified SOC 1 and SOC 2 compliant.
You can delete all your account data at any time for any reason. This deletes all your wallets, exchanges, transactions, trade history, and all other linked account information. This action is irreversible.
We will never sell your cryptocurrency data to third parties.