Privacy Policy

1. Information We Collect

We may collect the following types of information:

• Contact information, such as your email address, when you sign up for our newsletter or request a quiz result.
• Transaction information, such as your name, email address, and item details, when you request a hold on a Coin Vault item or complete a purchase.
• Survey information, such as your answers to our quiz, associated with an anonymous identifier rather than your name unless you also provide your email.
• Usage data, collected automatically, including pages visited, referral source, and general engagement with the Site.
• Product reviews. If you review an item you bought, we publish your review, your first name and last initial, and the date. We keep your email address and order number privately, only to confirm that you bought the item. If you add photos, we hold them privately until we approve them and show only approved photos; we remove location data from them. If you mark a review helpful, we store an anonymous code for your browser or member account, not your identity, to count one vote each. You can ask us to delete your review or photos.
• Interests and visit history. For visitors who accept cookies, we keep a profile of the pages, articles, videos and products you looked at and the answers you gave to our quizzes, to talk to you about what you care about and to choose what we show you. A browsing history that starts before you give us your email is joined to your profile when you do. If you choose Decline, we do not record your browsing. You can ask us to delete your profile at any time.

2. Cookies and Tracking Technologies

This website uses cookies and similar tracking technologies, including Meta Pixel and Google Analytics, to analyze site traffic, understand visitor behavior, and serve relevant advertising on Facebook and Instagram. These technologies only load after you accept the cookie banner shown on your first visit. You may decline, and you may also block cookies at any time through your browser settings or an ad-blocking extension, without affecting your ability to use the Site.

If you provide your email address and have accepted cookies, we may share a cryptographically hashed (not plain-text) version of that email with Meta for advertising-matching purposes, consistent with Meta's Advanced Matching feature.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve the Site and its features;
• Respond to inquiries and fulfill requests, including Coin Vault holds and orders;
• Send newsletters and updates you have opted into;
• Analyze Site usage and measure the effectiveness of our content and advertising;
• Comply with applicable legal obligations.

4. Third-Party Services

We use third-party service providers, including Google Firebase (data storage), Meta Pixel and Google Analytics (analytics and advertising), and Stripe (payment processing), to operate this Site. These providers may collect information as governed by their own privacy policies. We do not sell your personal information to third parties or data brokers.

5. Our Social Media Accounts and Publishing Tools

We publish our own videos and posts to our business accounts on Facebook, Instagram, Threads, YouTube, and TikTok using each platform's official API, through an internal publishing tool operated only by our business. When we connect one of our own accounts, that platform shares with us only what its permission screen lists, for example our account's display name and avatar, the posting options the platform allows for our account, and view, like, comment, and share counts for videos we posted. We use this information solely to publish our content, show which account a post will go to, and measure how our own posts perform.

Facebook Messenger: when someone messages our Facebook Page, our publishing tool shows us that conversation so we can answer it. We read and reply only to conversations people start with us, we reply by hand, and we do not store the conversation outside Meta. Instagram: we search public hashtags on Instagram to research topics for our own posts; we do not store other people's posts or identities. To ask us to delete anything we hold about you, including anything that came from Facebook, Instagram, or Threads, use the contact options on this site and we will delete it within 30 days. You can also remove our access from your Facebook or Instagram settings.

For our own TikTok account, the tool uses TikTok's Login Kit and Content Posting API to (a) read our own account's basic profile and posting settings, (b) upload or publish videos to our own account with the privacy and interaction settings we choose for each post, and (c) read our own videos' public statistics. We never sell, share, or use TikTok data for advertising.

Sharing to your own TikTok account: signed-in customers can make a short video of a coin on this Site and post it to their own TikTok account. When you choose Continue with TikTok, TikTok asks you to allow this Site to use your basic profile (your display name, profile picture and an account identifier) and to post videos for you. We use that access only to show which account you are posting to, to read the posting options TikTok allows your account (who can see a post, comments, Duet, Stitch and the longest video), to post the video you made with the caption and settings you chose, and only when you press Post, and to show you whether the post finished. Your video is made in your browser and passes through our server straight to TikTok; we do not keep a copy. We store your TikTok account identifier and TikTok's access and refresh tokens, encrypted, and a record of each post you sent (TikTok's post id, the piece it shows and its status), and nothing else from TikTok. We do not read your other videos, followers, likes or messages, we never post anything on our own, and we never sell or share TikTok data or use it for advertising. You can disconnect at any time from your account page: that revokes our access at TikTok and deletes the stored tokens and post records straight away. Removing this Site in TikTok's Settings > Security > Manage app permissions also ends our access, and we delete the stored tokens the next time they are refused or when you ask us.

6. When You Sell to Us

When you sell gold, silver, coins, jewelry or other valuable articles to us, Colorado law (C.R.S. 18-16-103 and 18-16-105) requires us to identify you and to keep a record of the purchase. For that record we collect your full legal name, your home address, your date of birth, the type and number of your government-issued identification, a photo of that identification where we take one, a description of each item, and your signed declaration that you own the items or are authorised to sell them. When you sign electronically we also record your signature, the date and time, and the IP address and browser you signed with.

We use this information only to meet that legal requirement and to complete your sale. We do not use it for advertising, analytics, interest profiles or marketing email. It is stored privately, and only the owner of the business can open it. Colorado law requires us to make the purchase record available to peace officers and to report purchases to local law enforcement, so we share it with law enforcement as the law requires. We do not share it with anyone else.

We keep each purchase record, including any photo of your identification, for three years after the purchase, as the law requires, and then we delete it. If something on your record is wrong, tell us and we will add a correction; the law does not allow us to remove a record before the three years have passed.

7. Your Choices and Rights

You may decline cookies at any time via the cookie banner or your browser settings. Every email we send includes an unsubscribe link. To request access to, correction of, or deletion of your information, contact us using the information below.

8. Data Retention and Security

We retain information for as long as necessary to fulfill the purposes described in this policy. Purchase records for items you sell to us are kept for three years, as described in Section 6. Information is stored using reputable third-party providers (Google Firebase and, for the identity/analytics data described in Section 2, Turso) and is not stored on servers we operate ourselves.

9. Children and the Cambist Club

This Site is meant for adults, and we do not knowingly collect personal information from children under 13 through its public pages.

The Cambist Club is a membership that an adult buys for a child. The account, the email address and the payment always belong to an adult, and the adult chooses an age group (ages 8 to 12, or ages 13 to 17) so that the right lessons and games are provided. The age group is a range, never a date of birth, and it never changes the price.

What the club keeps about a child. At checkout the only detail about a child is an optional first name or nickname for the envelope. In the online club the adult creates a profile for each young collector. A profile has a nickname and the age group, and an avatar the child chooses. The adult may also enter a birthday month and day (never the year), which we use only for a birthday-month gift or bonus where the club offers one, and for nothing else. The club keeps what the collector does in it: lessons and quizzes finished and the answers given, points and badges earned, the coins the collector adds to a collection or a wish list, the short notes the collector writes about a coin, and the Mint card codes entered and the coins drawn. We do not ask for a child's surname or school.

A reminder address or number. If the adult switches on lesson reminders for a collector, the adult may type that collector's own email address or telephone number and must tick a box confirming being the parent. We use it only to send that collector a reminder about an open lesson, one at a time, and every reminder carries a one-click link that turns them off. The adult receives a copy of each reminder at the account email address. No text message is sent today. The reminder is sent through our email service provider, which receives the address and the message for that purpose.

Coin photographs. A member can photograph a coin to identify it. The photographs are sent from our server to OpenAI to read the coin, are held in memory for that one request and are not saved by us; the section on coin identification says more.

What we do not do with it. We do not use anything about a child for advertising, we do not send it to an advertising platform, and we do not sell it. Child details are kept in our Google Firebase database with the adult's account, and what a collector does in the online club is not reported to the analytics or advertising tools used on the rest of this Site.

How an adult sees, changes and deletes it. The adult signs in to the online club with the email address used to pay and can open every profile to see what is kept, change the nickname or the age group, clear the birthday, turn reminders off, remove a coin or a wish, or delete a profile and everything in it. To have the whole membership and its records deleted, contact us through the options on this Site and we will delete them.

If you believe a child has given us personal information that you did not intend, contact us through the contact options available on this Site and we will delete it.

10. Coin identification in the Cambist Club

A signed-in Cambist Club member can photograph a coin or a banknote, front and, if wished, back, and ask the online club to identify it. When you do, the photographs are sent from our server to OpenAI, whose vision service reads what is printed or drawn on the piece: the country, the value, the year, any mint mark, the lettering and the design.

What is sent is the photographs and our reading instructions. We do not send your name, your email address or any account detail. Our server keeps the photographs in memory only for the length of that one request and then discards them. We do not save them, write them to a log or add them to the membership record. We ask OpenAI not to store the request. What OpenAI itself retains, and for how long, is governed by OpenAI's own terms and privacy policy.

An adult buys and holds every membership. Please photograph only coins and banknotes.

11. Text messages

We do not send text messages today. No text-messaging service is connected to our systems, and we reply to requests by email or by telephone call.

Some forms, such as the request for a price range from photographs, carry a box that lets you say we may text you. If you tick it, we record your choice and the telephone number you typed, with your request, so that we can honour it. No text is sent because of it. If we begin to send text messages, we will send them only to people who ticked that box, and we will update this policy to say so.

12. Purchases and advertising

When you complete a purchase or join, and you have not declined cookies, we tell Meta that it happened so that we can see which advertisements worked. We send the order value and what was bought, and cryptographically hashed (SHA-256) versions of the email address, name, telephone number and billing address you gave at checkout, never the plain text. If you accepted cookies we also send Meta's own browser identifiers and a random identifier for your browser. If you declined cookies, or your browser sends the Global Privacy Control signal, we send Meta nothing about your order.

If you accepted cookies and arrived from an advertisement or a tracked link, your browser remembers where you came from for up to 90 days, including the advertisement's click identifier, and an order you place carries that, so that we can measure which advertisements led to orders. If you declined cookies, none of this is kept.

13. Your choices as a Colorado resident

Colorado law gives residents the right to opt out of advertising that is based on their activity on different websites (called targeted advertising), and of the sale of personal data. You can use that right without writing to us. Choose Decline on the cookie banner, and the Meta Pixel, Google Analytics, Microsoft Clarity and our own record of the pages you view are switched off for you, and we send Meta nothing about your orders or sign-ups. If your browser sends the Global Privacy Control signal, we treat it the same way as Decline, on every visit, without your having to answer the banner.

If you have not yet answered the banner, the tools above stay off in your browser. A newsletter sign-up, a purchase or a membership may still be reported to Meta from our server in hashed form, without Meta's browser identifiers, until you decline. The reference code we attach to a sign-up when we report it is a random code, never your email address.

You may also ask us to tell you what personal data we hold about you, to correct it, to delete it, or to give you a copy of it. Write to us through the contact options on this Site. If we decline a request and you disagree, reply and say that you are appealing, and we will review the decision and tell you the result in writing. If you are still not satisfied, you may bring the matter to the Colorado Attorney General.

14. Advertising lists

When we use a list of our own contacts for advertising on Facebook and Instagram, either to show an advertisement to those people or to leave them out of one, we send Meta a cryptographically hashed (SHA-256) version of each email address, never the address itself. The lists are built from our own email system, and an address that has unsubscribed, bounced or reported a message as unwanted is left out before anything is sent. Meta matches the hashed addresses against its own users, and its use of them is governed by Meta's own policies.

We use only lists of adults. We never send an advertising platform a list built from anything about a child: an age group, the number of children in a household, an envelope name, or how a child uses the Cambist Club. A list that our system marks as email-only is never uploaded. At present we do not upload address lists to Google or to any other advertising platform.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights described above, contact us through the contact options available on this Site.