Coinbase · Coinbase Privacy Policy

User Privacy Rights and Opt-Out Mechanisms

Medium severity
Share 𝕏 Share in Share

What it is

Depending on where you live, you have rights to access, correct, delete, or move your data, and to opt out of data sharing for advertising — all exercisable through Coinbase's online Privacy Rights portal or by emailing privacy@coinbase.com.

Change history

modified Apr 19, 2026

Expanded from California-specific rights to jurisdiction-agnostic rights framework, added data portability and targeted advertising opt-out, and used more formal legal language (object/restrict processing vs. limit use).

View full change record →

Consumer impact (what this means for users)

You can exercise meaningful data rights including requesting access to all data Coinbase holds on you, correcting errors, or opting out of data sharing for targeted advertising, but you must take active steps to do so through the Privacy Rights portal or by email.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Visit Coinbase's Privacy Rights portal at coinbase.com/legal/privacy, select the right you wish to exercise (access, deletion, correction, or opt-out), complete the identity verification step, and submit your request; Coinbase must respond within 45 days (CCPA) or 30 days (GDPR).
  • Delete Your Data
    Email privacy@coinbase.com with a clear request for deletion of your personal information; include your account email address and specify whether you want full deletion or deletion of specific data categories; note that regulatory retention obligations may limit full deletion.

How other platforms handle this

Stability AI Medium

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketi...

Fitbit Medium

By logging into your account, you can access much of your personal information, including your dashboard with your daily exercise and activity statistics. Using your account settings, you can also download information in a commonly used file format, including data about your activities, body, foods,...

OpenAI Medium

Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data: The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format; The r...

See all platforms with this clause type →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

These rights are legally guaranteed under GDPR, CCPA/CPRA, and similar laws, but you must affirmatively request them — Coinbase will not automatically apply them to your account.

View original clause language
Depending on where you live, you may have certain rights with respect to your personal information. These may include the right to: access your personal information; correct inaccurate personal information; request deletion of your personal information; object to or restrict the processing of your personal information; data portability; opt out of the sale or sharing of your personal information; opt out of targeted advertising; and not be discriminated against for exercising your privacy rights. To exercise these rights, please visit our Privacy Rights portal or contact us at privacy@coinbase.com.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: Rights enumerated map directly to GDPR Arts. 15–21 (access, rectification, erasure, restriction, portability, objection); CCPA/CPRA Cal. Civ. Code §§1798.100, 1798.105, 1798.110, 1798.115, 1798.120, 1798.121, 1798.125; Virginia CDPA, Colorado CPA, Connecticut CTDPA, and other state privacy laws with analogous rights frameworks. Non-discrimination right reflects CCPA §1798.125. Enforcement: CPPA, FTC, EU national supervisory authorities, state AGs. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority under Section 5 of the FTC Act to take action against companies that fail to honor advertised privacy rights or impose unreasonable barriers to exercising CCPA/GDPR rights.
    File a complaint →
  • State AG
    California Privacy Protection Agency and state AGs have enforcement authority over CCPA/CPRA and state privacy law rights fulfillment obligations.
    File a complaint →

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
COPPA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GDPR
European Union
GLBA
United States Federal
HIPAA
United States Federal
TCPA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Coinbase Privacy Policy
Entity
Coinbase
Document last updated
March 24, 2026
Tracking information
First tracked
April 9, 2026
Last verified
April 9, 2026
Record ID
CA-P-002485
Document ID
CA-D-00048
Evidence Provenance
Source URL
Wayback Machine
SHA-256
78a7819594fbdda870b5d87062a20d9bc35a005cd93b3d670553ddb635dc7b75
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Coinbase | Document: Coinbase Privacy Policy | Record: CA-P-002485
Captured: 2026-04-09 14:51:12 UTC | SHA-256: 78a7819594fbdda8…
URL: https://conductatlas.com/platform/coinbase/coinbase-privacy-policy/user-privacy-rights-and-opt-out-mechanisms/
Accessed: April 29, 2026
Classification
Severity
Medium
Categories

Other provisions in this document