Privacy Policy

Plume Exchange ("Plume", "we") processes personal data so you can register, sign in, deposit crypto, and use your account dashboard. By creating an account you confirm that you have read and agree to this policy.

Data we collect

• Email address and bcrypt-hashed password
• Country of residence selected at registration
• Deposit addresses, transaction hashes, and on-chain amounts
• Session cookies (httpOnly) to keep you signed in
• Cloudflare Turnstile signals for abuse prevention

How we use it

We use your data to operate the exchange account, credit deposits, display balances, secure access, and comply with applicable law. We do not sell your personal information to third parties.

Retention

Account data is kept while your account is active. Session cookies expire after 90 days of inactivity or when you sign out.

Your rights

You may request access or deletion of your account by contacting support. On-chain deposits are irreversible; closing an account does not reverse blockchain transactions.

Updates

We may update this policy. Material changes will be posted on this page. Continued use after changes means you accept the updated policy.

Last updated: October 23, 2026