Last updated 2 September 2026
This describes what Whalio actually does with data, written from the code rather than from a template. Most of the site works without an account and without you giving us anything.
You can read every public page - the coin tables, the news, the maps - without registering. Doing so, we ask you for nothing and store nothing about you ourselves beyond ordinary web server logs.
The site does load Google Analytics, which sets its own cookies and receives your IP address, approximate location, device and the pages you view. That is Google's processing under their privacy policy, and a browser-level tracker blocker stops it without affecting the site.
Coin icons are loaded from CoinMarketCap's image servers, so those servers see the requests your browser makes for them.
An account exists for one feature: a watchlist of coins you want to follow. Registration stores your name, your email address and a hashed password - the password itself is never stored and cannot be recovered from what we hold.
The watchlist stores which coins you added. That is the whole of it. There is no payment, no billing data, no advertising profile, and your email is not passed to anyone or used for marketing.
A session cookie keeps you signed in. It is required for the account to work at all and carries no tracking beyond that.
Signed in, you can delete your account from your profile page. Deletion removes the account record and its watchlist rows from the database. It is not a flag on a row that stays behind.
If you would rather ask us to do it, or want a copy of what is held, write to [email protected].
The service is operated by SEMALT LLC.