Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
“We will need to terminate your account if we cannot process your personal information for such purposes.”
“We may utilize automated decision-making for fulfilling our regulatory and contractual obligations in relation to the safety, security and integrity of our Services. This includes to: verify accounts...”
“Biometric information generated based on photos or videos you provide in order for us to verify your identity”
“Utility bills (for your billing address) Photographs and/or videos Government-issued identity document, e.g. passport, driver's license, or state identification card Social security or social insurance number...”
“For unresolved complaints concerning our handling of personal information in reliance on the Data Privacy Frameworks, Coinbase is a member of and relies upon the ICDR-AAA services... which may involve, under certain conditions, binding arbitration.”
“We retain your information as needed to provide our Services, comply with legal obligations, or protect our or others' interests... whether we are required to hold the information to comply with our legal...”
This document explains what personal information Coinbase collects about you—including sensitive items like biometric data, government IDs, and social security numbers—how Coinbase uses and shares that information, and how long it keeps it. Coinbase may share your data with advertisers such as Meta and AppLovin, and may transfer it to another company if Coinbase is acquired or undergoes a major corporate change. You can ask Coinbase to delete your information, but legal obligations may prevent full deletion, and you cannot opt out of communications Coinbase deems critical for legal or security purposes.
The Coinbase Privacy Policy establishes the categories of personal information Coinbase collects—including biometric data, government-issued identity documents, social security numbers, and counterparty transaction data—and the purposes for which that information is used, shared, and retained. Coinbase retains personal information as long as needed to provide Services, satisfy legal obligations, or protect its or others' interests, with no fixed deletion timeline. The document grants Coinbase authority to use automated decision-making for regulatory and contractual obligations related to safety, security, and integrity, and to transfer personal information in the event of a merger, acquisition, bankruptcy, or similar change of control. Users hold a qualified right to request erasure subject to applicable law, but have no right to opt out of critical legal or security communications. Unresolved privacy complaints under the Data Privacy Frameworks may be subject to binding arbitration through ICDR-AAA.
As an individual user, your most sensitive personal information—including biometric data generated from photos or videos, government-issued identity documents, and social security numbers—is collected as part of identity verification and may be retained beyond the end of your account relationship if legal obligations or protective interests require it. Your conversion data, including your IP address, is shared with named third-party advertisers such as Meta and AppLovin. If Coinbase undergoes an acquisition, merger, or bankruptcy, your personal information may transfer to a different entity. Coinbase will close your account if it is unable to process your personal information for its stated purposes. You can contact Coinbase to submit a personal information erasure request, though applicable law may limit whether that request must be honored.
Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.
5 important changes detected
9 versions captured · Latest change detected by ConductAtlas: May 2026
Coinbase updated internal section references in its Privacy Policy on April 29, 2026 by renumbering sections throughout the document. The policy previously referenced Section 7, 11, 4, and 9 for …
View change record →Coinbase removed a single sentence from its privacy policy that previously provided a link to access the prior version of the policy. The updated policy no longer includes explicit language …
View change record →Coinbase removed a single sentence from its privacy policy that previously stated 'Previous Privacy Policy can be found here.' This removal eliminates the direct link or reference to accessing prior …
View change record →“We will need to terminate your account if we cannot process your personal information for such purposes.”
“We may utilize automated decision-making for fulfilling our regulatory and contractual obligations in relation to the safety, security and integrity of our Services. This includes to: verify accounts...”
“Biometric information generated based on photos or videos you provide in order for us to verify your identity”
“Utility bills (for your billing address) Photographs and/or videos Government-issued identity document, e.g. passport, driver's license, or state identification card Social security or social insurance number...”
“We retain your information as needed to provide our Services, comply with legal obligations, or protect our or others' interests... whether we are required to hold the information to comply with our legal...”
“For unresolved complaints concerning our handling of personal information in reliance on the Data Privacy Frameworks, Coinbase is a member of and relies upon the ICDR-AAA services... which may involve, under certain conditions, binding arbitration.”
“You may not opt-out of receiving critical service communications, such as emails or mobile notifications sent for legal or security purposes.”
“if we (or our assets) are acquired, merged, reorganized, or if we go out of business, enter bankruptcy, or go through some other change of control or similar event, your personal information could be...”
“This involves disclosing to our third-party service providers conversion data, including IP address, with advertisers such as Meta to create custom audience lists and AppLovin.”
“Coinbase may collect, retain, and/or share with other service providers information about the counterparties in certain cryptocurrency transfers... Coinbase may further be obligated under the Travel Rule...”
“You may request to erase your personal information, subject to applicable law.”
“We use your information to send you targeted marketing communications through email, mobile, in app and push notifications or by SMS. You may also see ads for our Services when you visit other apps...”
Every distinct legal provision identified in this document. Featured provisions appear above with analysis.
Coinbase has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.
Cross-platform context
See how other platforms handle Account closure and data deletion for underage users and similar clauses.
Compare across platforms →Coinbase's User Agreement includes a mandatory arbitration clause that most users may not have reviewed. Here is what the clause states and…
Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.