1. Who the data controller is

This site is operated independently by me (writing under the pen name Frost Kim). It is run by one person, not a company or a foundation. Whoever answers your email is the person who handles the data.

Email: [email protected].

2. What I collect

The cleanest thing is to tell you up front. This site receives the following:

  • Access logs. The web server keeps standard access logs (IP address, time, URL, User-Agent) for troubleshooting and abuse prevention. Your request passes through Cloudflare's proxy first, and Cloudflare processes technical information in it, such as your IP address and User-Agent; see the Cloudflare entry in section 4 below.
  • Google Analytics 4 data. The site's pages use GA4 (G-PZEDWR568V) for page views, time on page, device type, traffic source, and clicks on the Binance referral link and the copy-code button; these events record where on the page the click happened and the page language, never clipboard contents. Google receives analytics requests and connection information including IP addresses; aggregate reports do not mean the underlying requests never involve personal data.
  • The site's cookies. The only cookies I set are GA4's own analytics cookies (_ga and _ga_*), used to recognize "this is the same browser" across visits; how long they last is decided by Google. The site has no ad cookies, no remarketing cookies, no cross-site tracking cookies.
  • Whatever you write to me. When you email [email protected], the body, attachments, and your email address land in my mail client. They are used only to reply to you.

3. What I do not collect

  • No account credentials. The site has no registration flow, no login page, no user system. Any page asking you to "log in to Hodler's Handbook with a password" is phishing.
  • No private keys, seed phrases, or wallet credentials of any kind. The site never asks you to enter a private key or seed phrase, and the online seed phrase checker has been taken down. Ticks on the self-audit checklist are saved only in your own browser and are not uploaded to any server.
  • No email list, no newsletter, no promotional emails. There's no subscribe form on this site, so you cannot leave your email and find it on a list. Unless you write to me first.
  • No ad slots, no ad SDKs, no affiliate ad networks. So there are no third-party ad cookies riding alongside GA4.
  • No fingerprinting. The site uses no canvas fingerprinting, no audio fingerprinting, no font probing or other de-anonymization methods.

4. Who I share data with

Three sharing channels, named up front:

  • Google LLC. GA4 data goes to Google under its Google Privacy Policy. The site's pages also load Google Fonts, sending Google font requests and connection information such as IP address and browser details. I only read aggregate reports in GA4 and do not export raw data.
  • Cloudflare. Traffic to this site is proxied through Cloudflare: your browser's request reaches Cloudflare first, and Cloudflare forwards it to the site's server. Cloudflare provides CDN and security services for the site, so it processes technical information in each request, such as your IP address and User-Agent. How Cloudflare handles that data is set out in the Cloudflare Privacy Policy. Cloudflare also drops its Web Analytics snippet (fetched from static.cloudflareinsights.com) into every page, and that is where I get a rough page-view tally and a read on how quickly pages load. Per Cloudflare, the snippet sets no cookies, writes nothing to local storage, and doesn't try to work out who an individual visitor is.
  • VPS provider. The provider may see encrypted HTTPS traffic at the system level (they can see volume, not content). The access logs described in section 2 are stored on this server.

The site does not share data with any of the following: ad networks, data brokers, user profiling services, remarketing platforms, cryptocurrency exchanges (except the referral relationship — see next section), or regulators (unless required by valid legal process in the applicable jurisdiction).

5. The Binance referral link and your data

The site's Binance sign-up link appears on one page only, the Binance registration guide. When you click it, your browser is sent to binance.com with a ref parameter. From that moment:

  • You are no longer on the wechibi.com domain; you are on Binance's pages and subject to Binance's privacy policy (see binance.com Privacy Notice).
  • Binance uses ref to identify "this user was referred by Frost Kim". Binance reports sign-ups and commissions under this code to me; this site receives no details of your Binance account.
  • The site does not sell or share information about which readers clicked the Binance sign-up link.

If you would rather no one knew you came from Hodler's Handbook, just type binance.com directly into the address bar.

6. Your rights

  • Block the measurement scripts. Turning cookies off in your browser settings does not stop the GA4 script from sending hits. A content blocker such as uBlock Origin stops both GA4 and the Cloudflare snippet from loading, and content browsing is unaffected. There is no "accept cookies to read" interstitial.
  • Disable GA4 tracking. Install Google's official GA Opt-out Browser Add-on; once installed, GA4 on this site will not send any data to Google.
  • Data access and deletion requests. If you believe this site has collected data that identifies you in a specific visit, email [email protected] with a deletion request. Include reasonable identifying information (such as a prior email subject line). I will respond and delete within 30 days.
  • EU readers (GDPR) and California readers (CCPA). If your jurisdiction grants you additional rights (access, portability, objection to automated decisioning, etc.), the same email address handles the request. EU and California reader requests get the same treatment.

7. How long data is kept

  • Web server: standard access logs (IP address, time, URL, User-Agent) are kept for troubleshooting and abuse prevention.
  • GA4 data: held by Google under Google's own retention rules.
  • Email correspondence: kept in my mail client and not actively deleted, but you can request deletion.

8. Minors

This site's content concerns crypto assets and may not be suitable for minors in your jurisdiction. The site does not actively offer services to minors or deliberately collect minors' data. If you are the guardian of a minor who has left information through the site's email channels, you may request its deletion.

9. Policy updates

When a substantive change happens to this page (adding data collection beyond what this page describes, switching hosting provider, adding a new third-party sharing recipient), I will:

  • Log a record on the Corrections page with date, change summary, and effective date.
  • Update the "Last updated" date at the top of this page.
  • For material changes (such as adding an ad SDK), post a banner at the top of the home page for at least 30 days.

The version you are reading is dated 13 October 2026.

10. Contact

Privacy and data requests, corrections and citation issues: [email protected] (corrections are recorded on the Corrections page)

Security reports: see /.well-known/security.txt (RFC 9116 standard disclosure policy)