Privacy Policy
Effective date: May 18, 2026 | Last updated: May 18, 2026
This Privacy Policy describes how Lexxyapp ("we," "us," or "our"), operator of the website at lexxyapp.com (the "Site"), collects, uses, discloses, and protects information when you visit or use our free currency tools. By using the Site, you agree to this Privacy Policy.
1. Information We Collect
We are committed to collecting only the minimum data necessary to operate and improve the Site.
1.1 Information You Provide
Our tools (currency converter, symbols reference, widget generator, currency pairs) do not require registration. We do not collect names, email addresses, or payment information through the tools themselves. If you contact us by email, we collect the information you voluntarily include in your message.
1.2 Automatically Collected Information
When you visit the Site, certain technical information may be collected automatically, including:
- IP address (may be truncated or anonymized by analytics providers)
- Browser type and version
- Device type and operating system
- Pages visited, referring URL, and approximate geographic region (country/region level)
- Date and time of access
1.3 Cookies and Similar Technologies
We use cookies and similar technologies as described below. You can control cookies through your browser settings. Disabling cookies may affect some Site functionality.
2. How We Use Your Information
| Data Category | Purpose | Legal Basis (where applicable) |
|---|---|---|
| Technical / usage data | Operate and secure the Site; measure traffic and performance; fix errors | Legitimate interest; consent where required |
| Analytics data (aggregated) | Understand how visitors use our tools; improve content and UX | Legitimate interest; consent where required |
| CDN / security logs | Distribute content; prevent abuse, DDoS, and fraud | Legitimate interest |
| Email correspondence | Respond to inquiries; support requests; legal compliance | Contract / legitimate interest |
| Conversion inputs (amount, currencies) | Processed locally in your browser to display results; not stored on our servers | Service delivery (no retention) |
3. Third-Party Services
We use trusted third-party services to host, secure, and analyze the Site. These providers process data on our behalf under their own privacy policies:
| Service | Provider | Purpose | Data Shared |
|---|---|---|---|
| CDN & Security | Cloudflare, Inc. | Content delivery, SSL, DDoS protection, Web Application Firewall | IP address, request headers, device/browser data, security logs |
| Privacy-Focused Analytics | Plausible Analytics (Plausible Insights OÜ) | Aggregated, cookieless website statistics | Page URL, referrer, browser/OS (aggregated); no cross-site tracking; IP not stored in identifiable form |
| Exchange Rate API | Frankfurter (ECB-based public API) | Fetch live currency rates for tools | Currency codes requested; no personal data intentionally sent |
We do not sell your personal information. We do not share data with third parties for their own marketing purposes.
4. Advertising
We may display advertisements through Google AdSense or similar programs in the future. If enabled, Google and its partners may use cookies to serve ads based on your prior visits. You can opt out of personalized advertising by visiting Google Ads Settings or aboutads.info. We will update this policy before enabling personalized ads and implement a consent mechanism where required.
5. Children's Privacy (COPPA)
The Site is intended for a general audience and is not directed to children under 13 years of age (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us at ybkihdu7689@163.com and we will promptly delete it.
6. European Union Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have certain rights under the General Data Protection Regulation (GDPR) and applicable national data protection laws.
6.1 Lawful Basis for Processing
We process your personal data only where we have a valid lawful basis under Article 6 of the GDPR:
- Consent: Where you have given explicit consent (e.g., cookie preferences, marketing communications).
- Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., site security, analytics, service improvement), provided these interests are not overridden by your data protection rights.
- Contractual Necessity: Where processing is necessary to provide the services you request (e.g., processing currency conversion inputs locally in your browser).
- Legal Obligation: Where we are required by law to process your data.
6.2 Your Data Subject Rights
- Right of Access: Request a copy of the personal data we hold about you, including the purposes of processing, categories of data, and recipients.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data where there is no compelling reason for us to continue processing it.
- Right to Restriction of Processing: Request that we restrict processing of your data in certain circumstances (e.g., while accuracy is being verified).
- Right to Data Portability: Request transfer of your personal data in a structured, commonly used, machine-readable format to another controller.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent. This does not affect the lawfulness of processing before withdrawal.
6.3 Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at edpb.europa.eu.
6.4 How to Exercise Your Rights
Email ybkihdu7689@163.com with the subject line "GDPR Privacy Request". Include your name, email, and the right you wish to exercise. We will verify your identity and respond within 30 days (or as permitted by applicable law). We will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.
7. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the CPRA:
- Right to Know — Request categories and specific pieces of personal information we collected, sources, purposes, and third parties.
- Right to Delete — Request deletion of personal information we hold about you, subject to legal exceptions.
- Right to Correct — Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing — We do not sell or share personal information for cross-context behavioral advertising.
- Right to Limit Use of Sensitive Personal Information — We do not collect sensitive personal information as defined by CPRA.
- Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights.
How to Submit a Request
Email ybkihdu7689@163.com with the subject line "California Privacy Request". Include your name, email, and the right you wish to exercise. We will verify your identity and respond within 45 days (or as permitted by law).
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and identity verification.
8. Data Retention
Analytics and security logs are retained only as long as necessary for the purposes described above, typically no longer than 26 months for analytics aggregates. Email correspondence is retained as needed to resolve inquiries and comply with legal obligations.
9. Data Security
We use HTTPS encryption, Cloudflare security features, and industry-standard practices to protect data. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.
10. International Data Transfers
The Site is operated from the United States. If you access the Site from outside the U.S., your information may be transferred to and processed in the U.S. or other countries where our service providers operate.
For transfers of personal data from the EEA, UK, or Switzerland to countries outside these jurisdictions, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs): We rely on the European Commission-approved SCCs for data transfers to third countries.
- Adequacy Decisions: Where applicable, we transfer data to countries recognized by the European Commission as providing an adequate level of data protection.
- Transfer Impact Assessments: We assess whether the destination country provides an adequate level of protection and implement supplementary measures where necessary.
You may request a copy of the safeguards we have put in place by contacting us at ybkihdu7689@163.com.
11. Your Choices
- Browser cookies: Manage or block cookies in your browser settings. For EU visitors, we will obtain your prior consent before placing non-essential cookies through a cookie consent banner.
- Do Not Track: We do not currently respond to DNT signals; we limit tracking by using privacy-focused analytics.
- Global Privacy Control (GPC): Where applicable, we honor GPC signals as an opt-out of sale/sharing (we do not sell data).
- Cookie consent: If you are in the EEA, you will be presented with a cookie consent banner on your first visit. You can accept, reject, or customize your preferences at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before withdrawal.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect changes. Material changes will be posted on this page before taking effect. For significant changes affecting EU users, we will provide additional notice (e.g., email or prominent site notice) and, where required, obtain fresh consent.
13. Contact Us
For privacy questions or requests:
Email: ybkihdu7689@163.com