Privacy Policy

Last updated 29 September 2026

This policy explains what Hodl1099 (operated by 9GG LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, USA, "we") collects when you use hodl1099.com, and what we do with it.

What we collect

Account data: your email address and a salted scrypt hash of your password. We never store your password itself.
Financial records you enter: wallet names and the transactions you type or import (dates, assets, quantities, prices, fees, notes). We do not ask for, and you should not enter, exchange API keys, seed phrases, private keys or wallet addresses.
Usage events: a small internal log of account actions (signup, imports, report exports) with a timestamp, used to run and improve the service.
Server logs: our web server records IP address, requested URL, time and browser user agent for security and abuse prevention.

Cookies

We set one first-party cookie, ll_sess, which keeps you signed in for up to 30 days. It is strictly necessary. We do not use advertising cookies, third-party analytics or tracking pixels.

How we use it

To provide the service (calculate your gains and produce your reports), send you account emails such as the welcome message, respond to support requests, and protect the service against abuse. We do not sell or rent your data, and we do not use your transactions for advertising.

Service providers

Hosting: the app and database run on a virtual server rented from Contabo.
Email: account emails are sent through Resend, which receives your email address and the message.
Prices: the server fetches public market prices from CoinGecko. No personal data is sent with those requests.
Network: Cloudflare proxies traffic to the site and sees connection metadata such as IP address.

Retention and deletion

Your data is kept while your account is open. You can delete any transaction, wallet or all transactions at any time from the app. To close your account and erase everything, email [email protected] from your account address; we delete it within 30 days. Server logs are rotated within 90 days.

Security

Traffic is encrypted with TLS, passwords are hashed, and session cookies are HTTP-only. No system is perfectly secure; keep your password unique.

Your rights

EEA/UK (GDPR): you may request access to, correction, deletion or export of your data, object to or restrict processing, and complain to your data protection authority. Our legal bases are performance of our contract with you and our legitimate interest in securing the service. Your data may be processed in the United States and the European Union.

California (CCPA/CPRA): you may request to know, delete or correct your personal information. We do not sell or share personal information for cross-context advertising. We will not discriminate against you for exercising these rights.

Send any request to [email protected].

Children

Hodl1099 is not directed to anyone under 18, and we do not knowingly collect their data.

Changes

If we change this policy we will update the date above, and for material changes we will email account holders.

Home · Terms · Disclaimer · About