Cookie Policy

Last Updated: September 11, 2026

1. Introduction

This Cookie Policy explains how Coinsnap uses cookies, browser storage and similar technologies on its websites and web-based services.

Coinsnap is a brand operated by:

Onlineshop24 DOO
Ljubimira Ivkovica Suce 75
11453 Sopot (Ducina)
Serbia

Registration Number / Matični broj: 21579041
Tax ID / PIB: 111945856

Email: support@coinsnap.io
Website: https://coinsnap.io

This Cookie Policy applies to Coinsnap-operated websites and web-based services, including:

• coinsnap.io; and
• app.coinsnap.io.

This Cookie Policy should be read together with the Coinsnap Privacy Policy and Terms of Service.

2. What Are Cookies and Similar Technologies?

Cookies are small text files that may be stored on a User’s browser or device when a website or web application is used.

Coinsnap may also use browser storage technologies such as:

• localStorage;
• sessionStorage; and
• comparable browser-based storage mechanisms.

These technologies may be used for purposes such as:

• website functionality;
• analytics;
• security;
• authentication;
• bot protection;
• error monitoring;
• remembering interface preferences; or
• maintaining technical application state.

Cookies may be set directly by a Coinsnap-operated website or by an independent Third-Party Provider whose technology is used by Coinsnap.

3. Current Technical Configuration

The information in this Policy reflects the technical configuration observed on September 11, 2026.

The current configuration differs between the public website at coinsnap.io and the Merchant application at app.coinsnap.io.

For anonymous visitors to coinsnap.io, Google Analytics currently sets analytics cookies on the first page view.

At the date of this Policy, coinsnap.io does not operate a separate cookie consent management platform or cookie banner that prevents those Google Analytics cookies from being set before User interaction.

Coinsnap may change this configuration in the future and will update this Policy where appropriate.

4. Cookies Used on coinsnap.io

For anonymous visitors, the following cookies were identified on coinsnap.io:

Cookie	Provider	Purpose	Duration
_ga	Google Analytics	Assigns and maintains a pseudonymous client identifier used to distinguish website visitors	Approximately 400 days
_ga_Y9HTNGQW7Y	Google Analytics	Maintains Google Analytics 4 session and engagement information for property G-Y9HTNGQW7Y	Approximately 400 days

Both cookies are currently written by the Google Analytics tag when a User visits the website.

They are scoped to the .coinsnap.io domain.

For anonymous visitors, no Coinsnap server-side cookie was identified during the technical review of the public website.

5. Google Analytics

Coinsnap currently uses Google Analytics 4 on the public website to understand how visitors use coinsnap.io and to improve website content, usability and performance.

The Google Analytics configuration identified at the date of this Policy uses:

Google tag: GT-PZMTR52
Google Analytics property: G-Y9HTNGQW7Y

Google Analytics may process technical and usage information such as:

• pages viewed;
• website interactions;
• session information;
• browser information;
• device information;
• referring website;
• engagement information;
• approximate geographic information; and
• technical network information.

Google Analytics uses the _ga and _ga_Y9HTNGQW7Y cookies described above.

At the date of this Policy, these cookies are set on the first page view and are not technically withheld pending a separate Coinsnap cookie-consent choice.

Users may restrict or delete these cookies through their browser settings.

Coinsnap may introduce or modify a consent-management solution in the future. If the technical behaviour of Google Analytics changes, this Policy will be updated accordingly.

Google processes information according to the contractual and privacy framework applicable to Google Analytics.

6. Other Browser Storage on coinsnap.io

In addition to cookies, the public Coinsnap website currently uses the following browser storage:

Storage Key	Type	Purpose	Duration
wpEmojiSettingsSupports	sessionStorage	WordPress functionality used to remember whether the browser supports particular emoji rendering capabilities	Until the browser tab is closed

At the date of the technical review, no additional localStorage entries, IndexedDB databases or service workers were identified for anonymous visitors to coinsnap.io.

7. Google Fonts

Coinsnap currently loads certain fonts from Google’s external font infrastructure, including services provided through:

• fonts.googleapis.com; and
• fonts.gstatic.com.

Google Fonts does not set a Coinsnap cookie merely because a font is loaded.

However, when a User’s browser requests a font from Google’s servers, technical connection information, including the User’s IP address, may be transmitted to Google as part of the network request.

Google processes such information according to its own privacy framework.

Coinsnap may change how fonts are delivered in the future, including by hosting font files locally.

8. YouTube Content

Where YouTube videos are embedded on coinsnap.io, Coinsnap currently uses YouTube’s privacy-enhanced domain:

youtube-nocookie.com

Under the configuration observed at the date of this Policy, no YouTube cookie was identified merely from loading a page containing such embedded content.

Interaction with or playback of an embedded video may result in additional communication with YouTube or Google and may cause information to be processed by those providers.

Such processing is governed by the relevant provider’s own privacy framework.

9. app.coinsnap.io

The Coinsnap Merchant application uses cookies and browser storage differently from the public website.

During testing of the logged-out login page, no first-party cookies were identified.

The application does, however, use browser storage and third-party technologies for functions including:

• error monitoring;
• bot protection;
• User interface preferences; and
• remembering application selections.

10. Browser Storage Used on app.coinsnap.io

The following storage entries were identified:

Storage Key	Type	Purpose	Duration
sentryReplaySession	sessionStorage	Supports Sentry Session Replay and error monitoring	Until the browser tab is closed
_grecaptcha	localStorage	Supports Google reCAPTCHA bot protection	Until cleared
theme	localStorage	Remembers the User’s light or dark interface preference	Until cleared
activeSettingsTab	localStorage	Remembers the most recently selected settings tab	Until cleared
selectedStoreId	localStorage	Remembers which Store the User most recently worked with	Until cleared

The availability and use of individual storage entries may depend on the application version, User activity and functionality used.

11. Sentry Session Replay

Coinsnap currently uses Sentry technology in connection with app.coinsnap.io for application monitoring and troubleshooting.

The identified configuration uses a sentryReplaySession entry in sessionStorage.

Sentry Session Replay technology may record information concerning how a User interacts with the application in order to assist with:

• identifying software errors;
• reproducing technical problems;
• diagnosing application failures;
• understanding the circumstances surrounding an error; and
• improving application reliability.

Depending on the technical configuration, information relating to User interactions with the application may therefore be transmitted to or processed through Sentry.

Coinsnap does not use Sentry Session Replay for advertising purposes.

Information processed through Sentry is subject to the contractual and privacy arrangements applicable to that service.

12. Google reCAPTCHA

Coinsnap uses Google reCAPTCHA in connection with the login functionality of app.coinsnap.io.

reCAPTCHA is used to help distinguish legitimate Users from automated or abusive requests and to protect the application against bots and misuse.

The application may use the following storage:

_grecaptcha – localStorage

Google reCAPTCHA also communicates with Google infrastructure, including Google and gstatic domains.

When the reCAPTCHA check executes, Google may set a cookie named:

_GRECAPTCHA

on Google’s own domain.

The exact lifetime of the _GRECAPTCHA cookie depends on Google’s technical configuration and was not independently confirmed during Coinsnap’s technical review.

Google may process technical information necessary to assess whether an interaction originates from a legitimate User or automated activity.

Such processing is subject to Google’s applicable privacy and contractual framework.

13. Merchant Login and Authentication Cookies

The technical inventory on which this Policy is based was conducted using a logged-out application session.

Accordingly, cookies or storage mechanisms that may be created after a Merchant successfully signs in to app.coinsnap.io were not included in that technical review.

Coinsnap may use additional session, security or authentication technologies after login where necessary to:

• authenticate the Merchant or authorised User;
• maintain an active login session;
• protect the account against unauthorised access;
• maintain application security; or
• provide functionality requested by the User.

Where additional relevant cookies or storage technologies are confirmed, this Policy may be updated to provide further details concerning their names, purposes and duration.

14. Essential and Functional Technologies

Some cookies or browser storage technologies are required to provide functionality explicitly requested by a User.

These may include technologies necessary for:

• login and authentication;
• account security;
• session management;
• bot protection;
• application state; and
• security-related functionality.

Other technologies may primarily support convenience or interface preferences, including:

• theme selection;
• remembering the most recently used Store; or
• remembering a previously selected application tab.

Blocking or deleting certain essential storage technologies may cause parts of the Coinsnap application to stop functioning correctly.

15. Analytics and Consent

Google Analytics is currently used only on the public Coinsnap website and was not identified on the logged-out app.coinsnap.io login page during the technical review.

At the date of this Policy, coinsnap.io does not operate a cookie consent banner or consent management platform.

As a result, the Google Analytics cookies described in Section 4 are currently set when the public website is loaded.

Coinsnap is reviewing its cookie and consent-management configuration and may introduce a consent management mechanism or change how analytics technologies are activated.

Where Coinsnap changes the technical implementation, this Policy will be updated to reflect the new configuration.

16. No Advertising Tracking Identified

At the date of the technical review, no advertising or marketing tracking technologies from the following services were identified on the public Coinsnap website:

• Google Ads;
• Google AdSense;
• Meta;
• LinkedIn; or
• HubSpot.

No Google Tag Manager container was identified.

This section describes the configuration observed at the date of the technical review and may be updated if Coinsnap’s website configuration changes.

17. Bitcoin Payments and Cookies

Cookies and browser storage used by Coinsnap websites or applications do not change the nature of a Bitcoin payment.

For a standard self-custodial Coinsnap payment:

Payer’s Wallet → Bitcoin / Lightning Network → Merchant-selected Wallet

Coinsnap does not require a cookie to identify the Payer as part of the standard Bitcoin payment transaction record.

Coinsnap does not store the Payer’s IP address as part of the standard Bitcoin or Lightning payment transaction record.

Google Analytics data from the public website is not intentionally used to add a Payer’s identity or IP address to the Merchant’s standard Bitcoin transaction record.

Additional information concerning technical payment information and Merchant-Provided Payer Data is provided in the Coinsnap Privacy Policy.

18. Third-Party Providers

Some technologies described in this Policy are provided by independent Third-Party Providers.

Current examples include:

• Google Analytics;
• Google Fonts;
• Google reCAPTCHA;
• YouTube; and
• Sentry.

These providers may receive technical information directly from the User’s browser when their technology is used.

The processing performed by such providers may be governed by their own:

• terms;
• privacy policies;
• security practices; and
• international data-processing arrangements.

Coinsnap may replace, remove or modify Third-Party Providers as its website and application infrastructure develops.

19. International Processing

Some Third-Party Providers used by Coinsnap may process information outside Serbia or outside the country in which the User is located.

International processing may therefore occur when a User’s browser communicates with services such as Google or Sentry.

Where Coinsnap is responsible for an international transfer of Personal Data, the requirements described in the Coinsnap Privacy Policy apply.

The applicable transfer mechanism depends on the provider, jurisdictions involved, Processing activity and Applicable Data Protection Law.

20. Managing and Deleting Cookies

Users can generally manage or delete cookies and browser storage through their browser settings.

Depending on the browser, Users may be able to:

• view stored cookies;
• delete individual cookies;
• delete all cookies;
• block new cookies;
• restrict third-party cookies;
• clear localStorage;
• clear sessionStorage; or
• configure tracking protection.

Blocking or deleting certain storage may affect website or application functionality.

In particular, technologies associated with authentication, security, bot protection or application state may need to operate in order for certain Coinsnap functions to work correctly.

21. Browser Privacy Controls

Browsers and devices may offer additional privacy tools such as:

• third-party cookie restrictions;
• tracking protection;
• private browsing;
• content blocking; or
• other privacy controls.

The functionality and effect of these features depend on the browser or device used.

Users should refer to their browser or device documentation for information on configuring these settings.

22. Retention

Cookie and browser-storage retention depends on the particular technology.

At the date of this Policy:

• _ga is configured for approximately 400 days;
• _ga_Y9HTNGQW7Y is configured for approximately 400 days;
• wpEmojiSettingsSupports remains for the browser-tab session;
• sentryReplaySession remains for the browser-tab session;
• _grecaptcha remains in localStorage until cleared;
• theme remains in localStorage until cleared;
• activeSettingsTab remains in localStorage until cleared; and
• selectedStoreId remains in localStorage until cleared.

The exact lifetime of Google’s _GRECAPTCHA cookie was not confirmed during the technical review and depends on Google’s implementation.

Users can delete stored cookies and browser storage at any time through the relevant browser settings.

23. Personal Data and Privacy Rights

Where information processed through cookies, browser storage or related technologies constitutes Personal Data, the Coinsnap Privacy Policy also applies.

Depending on Applicable Data Protection Law, Users may have rights concerning their Personal Data.

These may include rights to:

• request access;
• request correction;
• request deletion;
• object to certain Processing;
• request restriction of Processing;
• withdraw consent where applicable; or
• lodge a complaint with a competent supervisory authority.

Further information is provided in the Coinsnap Privacy Policy.

24. Changes to This Cookie Policy

Coinsnap may update this Cookie Policy where necessary to reflect:

• changes to coinsnap.io;
• changes to app.coinsnap.io;
• newly introduced or removed cookies;
• changes to browser storage;
• changes to analytics functionality;
• introduction or modification of a consent-management platform;
• changes to Third-Party Providers;
• changes to application security functionality; or
• changes in Applicable Data Protection Law.

The current version and the date of the latest revision will be published on the Coinsnap website.

25. Contact

Questions concerning this Cookie Policy may be sent to:

Coinsnap / Onlineshop24 DOO
Ljubimira Ivkovica Suce 75
11453 Sopot (Ducina)
Serbia

Email: support@coinsnap.io
Website: https://coinsnap.io