Privacy policy
A directory has no need to know who is reading it. SpendKoin is built accordingly: no accounts, no advertising trackers, no IP addresses stored. This page does not describe intentions — it describes what the code does, what it keeps, and for how long.
Who runs this site
SpendKoin is an independent project, and the data controller under the GDPR. Any question or request about your data goes to contact@spendkoin.com, with no need to explain yourself.
No accounts, no email addresses
The site has no accounts and never asks for an email address — not even to submit a business or confirm a listing, which are the only two actions that write anything at all. The submission form collects information about the business only: its name, category, location, the currencies it takes, its website and a description. Nothing it sends identifies you.
One cookie, and it only remembers your language
A cookie named “langue” stores the language you picked, so you are not asked again on your next visit. It holds two letters — “en” or “fr” — lasts a year, and is read only to decide which version of the home page to serve. It is the only cookie this site sets: there are no advertising trackers, no third-party analytics, no social buttons. That is also why you were shown no consent banner: a cookie strictly necessary for the service you asked for does not need one, and there is no other cookie to ask you about.
What never leaves your device
Your last six searches are kept in your browser’s local storage, so they can be offered back to you next time. They are never sent to the server and are tied to nothing: what someone searches for says a great deal about them, and a business directory has no reason to know it. The “Clear” button under your recent searches removes them at once; clearing this site’s data from your browser does the same.
Your location
“Near me” asks your browser for your position, and only when you click it. Your coordinates sort businesses by distance for the length of that request, then they are forgotten: they are written nowhere, neither to the database nor to a log. Declining costs you nothing important — searching by town name still works in full.
Your contributions: your IP address is never kept
Confirming a listing or submitting a business means recognising a visitor without identifying them, or one person could vote a thousand times. Your IP address is neither stored nor passed to the database: the server derives a SHA-256 fingerprint salted with an application secret, useless for tracing back to you, and only that is recorded. It is erased after sixty days. The free-text note you can attach to a confirmation is never published: it exists for moderation, and for nothing else.
Audience measurement without identifiers
To learn what the search cannot find, the site counts completed searches: the text typed, the language, the mode, whether anything could be offered in reply, and the addresses requested that do not exist. These are counters aggregated by day and kept for ninety days. No IP address, no identifier, no timestamp finer than the day: two searches by the same person cannot be linked to each other, and none can be traced to anyone. One common-sense caveat all the same: the search box does send what you type to the server, so it is not the place for personal details.
The services that keep the site running
Four providers are involved, each for one thing. Vercel hosts the site and keeps short technical logs. Supabase hosts the business database. Upstash hosts the cache and the counters described above. Finally, the map tiles are served by OpenFreeMap: when the map loads, your browser requests them directly and so hands over your IP address, exactly as it would for any image hosted elsewhere. These providers act on instruction, use the data for nothing else, and transfers outside the European Union are covered by the European Commission’s standard contractual clauses.
Business listings
Listings come from OpenStreetMap, where they are public: business name, address, phone number and website where present. A business owner wanting a correction or a removal can write to contact@spendkoin.com, and it will be made here. Better still is to fix the listing at its source on OpenStreetMap: that is where the other crypto maps and apps start from too, and they will pick the correction up.
Your rights, and their honest limit
You have the right to access, correct, erase, object to and port your data. One limit is better stated than discovered: for audience measurement these rights have nothing to attach to, because none of that data is linked to a person — nothing could pick “your” searches out from everyone else’s, which is exactly the point of building it that way. What these rights do apply to are listings and contributions: write to us and we will answer within a month. You may also complain to your national data protection authority.
A question about your data?
Write to contact@spendkoin.com. Any change to this policy will be published on this page, with its date.
Email usLast updated 14 August 2026.