Privacy policy

01

Who is responsible

PrimerasCripto is a personal community project that publishes calculators for crypto games. It is not a company and is not affiliated with the games it covers. The controller is based in Mexico, and this document is the privacy notice required by the Mexican data protection law (LFPDPPP). For anything about privacy, write to [email protected].

02

What data we handle without an account

The tools work without signing up. Without an account, the only data handled is:

• Technical data from each visit (IP address, browser, page requested). Cloudflare, which hosts the site, processes it to serve pages and protect them from attacks.
• Cookieless visit statistics. Loading a page sends its path, the site you came from and the language. Your IP and browser are turned into an irreversible code with a key that is destroyed every day: it counts unique visitors for that day without storing the IP and without being able to recognise you the next day. Country, device type and browser are kept too, with nothing that identifies you.
• The farm or game account ID that you type in. It is a public identifier from the game itself. It travels to our server only so we can ask the game's API for your public data and return the calculation. We do not store it on any server: it stays in your browser so you do not have to type it again.
• If you ask Pete, the guide's advisor, for advice, our server sends an artificial intelligence provider (Google Gemini and, if it fails, Cloudflare Workers AI) your farm's public data and the plan the guide worked out. Nothing from your account and not your IP is sent. You can ask once per farm every 12 hours: to enforce it we keep when you asked (with an account, on your account with the farm ID; without one, your IP with the farm ID in the server cache for 12 hours). The advice is kept in your browser and, with an account, in your settings, so you can read it again.
• Whatever you configure in the tools (skills, goals, filters, your own rate, light or dark theme). It is saved in your browser's local storage and never leaves your device.
• If you turn on floating island alerts, your browser's notification subscription: an address at your browser's notification service and its keys, along with the language and time zone used to write the alert's time. It needs no account and does not identify you. It is deleted when you turn the alerts off or when your browser cancels it.
• If you vote for a build on the Events page, your vote, kept with a random identifier your browser creates (or with your account, if you are signed in) so you can change it and it does not count twice. To stop ballot stuffing, each new vote without an account leaves your IP turned into a code with a secret key, deleted after 24 hours; we never store the IP itself.

03

What data we handle if you create an account

Creating an account is optional; it lets you keep your settings across devices, earn PrimerasCoins by answering surveys and, later on, enter raffles. For it to work we handle:

• Your email address: to identify you, send you the verification code and security notices about your account (for example, that your password changed). We never use it for advertising or give it to anyone.
• Your password, which we never see or store as typed: it is stored hashed with a one-way algorithm (bcrypt), so not even we can read it.
• A nickname, if you choose to set one, and the language you signed up in (so we write to you in it).
• If you rate one of Pete's answers: your rating, your comment, the farm ID and the answer you rated, tied to your account. You and the site's owner see them. An artificial intelligence (Google Gemini) checks the comment against that farm's public data to spot false or malicious comments; if it is a valid correction, the owner may turn it into an instruction for Pete, without your name or your data. They are deleted when you delete your account.
• If you use PrimerasCoins: your balance and a record of each survey CPX Research reports to us (its transaction number, what it paid, the coins, the status and the IP you opened the survey from, as CPX sends it). It is used to credit your coins, release them after 72 hours and void them if the provider detects fraud. It is deleted when you delete your account.
• Session and security data: sign-up and last sign-in dates, and the IP and browser of each sign-in, which the authentication provider logs to detect unauthorised access.

To stop bots, sign-up, sign-in and password recovery go through Cloudflare Turnstile, a check that usually asks nothing of you. Turnstile looks at technical signals from the browser to decide whether you are a person; it does not use that data for advertising.

04

Who it is shared with

We do not sell data and we do not pass it to advertisers. These providers are involved, acting as processors on our behalf and only for what is listed:

Some of these providers store data outside Mexico, mostly in the United States. These transfers are needed to provide the service you ask for, and each provider is bound by contract to protect the data and not to use it for its own purposes.

The site also links to games and exchanges with affiliate links. If you click, the destination knows you arrived from here and applies its own privacy policy, which we do not control.

05

How we protect your account

• Each row in the database can only be read or changed by its owner: the database itself enforces it, not just the page.
• Email codes expire after 15 minutes and work only once.
• Changing your password signs out your other open sessions.
• Everything travels encrypted over HTTPS, and the account pages refuse to load inside other sites or to send data to foreign domains.

Even so, no system is infallible: if a breach affected you, we would email you if you have an account, publish it on the site and announce it through the community channels.

06

How long it is kept

• Your account data, for as long as you keep the account. If you ask us to delete it, we remove it together with its profile within 30 days at most.
• A sign-up that was never verified with its code is deleted automatically after 7 days.
• Visit statistics contain no IP; the daily key that allows counting unique visitors is destroyed when the day changes.
• What your browser stores lasts until you delete it, in one click from the cookie policy or by clearing the site's data.
• The providers' technical and security logs are kept for a short period, as each provider sets, for security and diagnostics.

07

Your rights

You have the right to access your data, correct it if it is wrong, cancel it (including deleting your account) and object to a specific use — the ARCO rights under Mexican law. You can also withdraw consent or limit the use of your data. Write to [email protected] from your account's email saying what you want, and we will answer within 20 business days at most. Without an account, almost everything that exists is in your browser and you control it.

08

Where to complain

If you believe your request was not handled properly, you can go to the Secretaría Anticorrupción y Buen Gobierno, Mexico's personal data protection authority since March 2025 (it took over that role from the dissolved INAI). If you live in the European Union or Brazil, you also keep the rights the GDPR and the LGPD give you, and you can go to your own country's authority.

09

Minors

The site is not aimed at children under 14, and they must not create an account. We do not knowingly collect their data; the games we cover have their own age rules, which you must respect. If you believe a child created an account or sent us data, write to us and we will delete it.

10

Changes

If this policy changes, the date in the header changes. Substantive changes will also be announced on the site and, if you have an account, we will email you before they take effect.