Coinbase: Buy Crypto & Stocks

"We work with different types of third-party service providers, including: Third-Party Electronic ID Verification Service Vendors, including those that process biometric information; Marketing and promotions providers; Analytics providers; Telecommunications technology providers; CTF/AML service providers; Data hosting service providers and payment vendors; Security service providers; Customer support vendors; Digital asset advocacy groups like Stand With Crypto."

Coinbase shares a very broad range of personal information — including basic identity, financial, biometric, transaction, blockchain, and device data — with a large number of third-party service provider categories.

"We retain your information as needed to provide our Services, comply with legal obligations, or protect our or others' interests. While retention requirements vary by country, we maintain internal retention policies on the basis of how information needs to be used. We may keep pseudonymised personal information (information with identifying details removed or replaced) and your user ID to help us understand usage patterns and improve our services."

Coinbase provides no specific retention periods, uses broad justifications for keeping data indefinitely, and reserves the right to retain pseudonymized data and user IDs even after account closure.

"We receive information such as your name and contact information from our marketing partners, including in some instances what marketing content you viewed or the actions you take on and off our Sites and Apps, to better understand your preferences and customize the ads that you see. We may obtain information about you, such as Basic Customer Information, Transaction Information and Product Usage Information, from our Affiliates as a normal part of conducting business."

Coinbase receives data about user activity across other sites and apps from marketing partners, and shares personal information across its family of affiliated companies, enabling cross-service profiling and tracking.

"Information about the device, operating system, and browser you're using. Other device characteristics or identifiers (e.g. plugins, the network you connect to). IP address. We may also temporarily collect information about limited applications that you are connected to establish that connection."

Coinbase collects device identifiers, network information, browser plugins, and information about connected applications, which goes beyond what is strictly necessary for a financial service.

"Collecting information that you allow us to receive through the device-based settings you enable (such as access to your GPS location, camera or photos) which we use to provide the features or services described when you enable the setting. Product Usage Information including Location Information [is used] to address your request for support."

Coinbase requests GPS location access through device settings and uses location information derived from IP addresses and device settings for customer support and other service purposes.

"We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well. We post any changes we make to our Privacy Policy on this page and, where appropriate, we will provide you with reasonable notice of any material changes before they take effect or as otherwise required by law."

Coinbase reserves the right to change the privacy policy at any time, with changes posted on the page. The qualifier "where appropriate" for material changes means notice is discretionary, not guaranteed.

"In line with these considerations, we delete information that is no longer needed for the above purposes when you close your account, or when you request deletion of your information, or if required under applicable law, when you withdraw consent to us using your information. We also keep certain information where necessary to protect the safety, security and integrity of our Services, Customers, and Users."

Even after account closure or deletion request, Coinbase retains data under broad justifications like safety, security, integrity, legal compliance, and AML/KYC obligations — with no defined timeline for when this retained data is actually deleted.