Privacy policy
my-banks.info is an information aggregator of exchanger rates. We do not carry out exchanges, do not hold funds and do not create user accounts. We process a minimum of personal data — only where it cannot be avoided: confirming reviews and protecting against abuse. Processing follows the Law of Ukraine «On Personal Data Protection» of 01.06.2010 No. 2297-VI.
What data, why and for how long
| Data | Why | How long and how we store it |
|---|---|---|
| Email of the review author | to send the review confirmation link | in plain form — up to 72 hours; deleted after confirmation or when the period expires. After that only an irreversible hash (HMAC-SHA256 with a secret key) to accept no more than one review from an address about an exchanger within 30 days. Not published |
| Nickname, rating, review text | publishing the review after moderation | while the review is published; unconfirmed reviews are deleted together with the email after 72 hours |
| IP address | protection against spam and manipulation (forms, «Rate doesn't match») | we do not store the address itself. An attempt counter in the cache — by IP hash, up to 1 hour; a daily IP hash (HMAC with the date) next to a review or report — up to 30 days, then deleted |
| Contact in an exchanger's request | to reply to the monitoring request | until the request is processed and the correspondence with the exchanger ends |
| Feedback message: topic, text, name and contact (optional) | to answer your message (see «Feedback» below) | up to 365 days, spam — up to 30 days; the operators get it in Telegram |
| Clicks to exchanger websites | popularity statistics | only a daily aggregate, without IP addresses or visitor identifiers (see «/go clicks» below) |
Cookies: mb_theme — only the chosen colour theme; on form pages — a session cookie and a form protection token (valid until the session ends). There are no third-party advertising or analytics cookies.
/go clicks
«Go» buttons lead through the address my-banks.info/go/…, which then leads to the exchanger's website. For every click we only increase a daily counter: the date, exchanger, exchange direction, link placement (direction page, exchanger page, etc.), source (my-banks.info or the worldbank.org.ua portal), target type (the exchanger's website or a partner link) and the number of clicks.
We do not store the IP address, cookies or a click identifier. To limit the click rate we use an IP hash that lives in the server cache for no longer than 1 minute and is not written anywhere else. The tags utm_source, utm_medium, utm_campaign are added to the target address (where the link came from and from which section), and for partner links a random click number that we do not store. Partner clicks are marked «Advertising / partner link» on the pages — see «Partner links». What happens to data on the exchanger's website is governed by its own privacy policy.
Clicks to BestChange (the group «Offers according to BestChange» on direction pages and the cards of exchangers without a known website) also go through /go and lead to the BestChange website with our partner parameter. For them we likewise only increase a daily counter (direction, exchanger according to BestChange, site section), without IP addresses or identifiers. Your data on the BestChange website is processed by BestChange under its own privacy policy.
Feedback
From the feedback form we keep the topic, the text of the message, the name and contact if you entered them (email or Telegram), the page you came from, the language, the browser's User-Agent and a sender hash — HMAC-SHA256 of the IP address with the date and a secret key, without the address itself (it limits the number of messages and helps to filter spam). Messages are kept for up to 365 days, messages recognised as spam — up to 30 days, then they are deleted automatically. A new message (topic, page, the beginning of the text, name and contact as you entered them) is sent to the site team's closed Telegram group; Telegram acts as the delivery channel. The legal ground is our legitimate interest: answering your message and protecting the form from spam (Art. 11 of Law No. 2297-VI). Do not include data you do not want to share.
Legal grounds
Email and review text — your consent, given by ticking the box in the form (Art. 11 of Law No. 2297-VI); the consent can be withdrawn. IP hashes — protecting the site against abuse to the extent necessary. Emails, IP addresses and their hashes are not written to the site logs.
Who we share data with
We do not sell or share it with anyone. The email with the link is sent by a mail service acting only as a technical delivery intermediary. We pass only anonymised data (rates, exchanger scores) to the worldbank.org.ua portal, without personal data. The exchanger sees a published review just like all visitors. Feedback messages reach the site team through Telegram (see «Feedback»).
Your rights
You have the rights set out in Art. 8 of Law No. 2297-VI: to know what data about you is processed, to access it, to demand correction or deletion, to withdraw consent, to object to processing and to apply to the Ukrainian Parliament Commissioner for Human Rights or to a court. To delete your review, write to us with the exchanger, date and nickname: no email is needed — we no longer store it.
Contact
Personal data requests are handled by the site administration through the feedback form (subject "Personal data").
my-banks.info is an information aggregator, not a financial institution; the information on the site is not financial advice.