Privacy Policy

21bags.io is operated by P2P.AI, Inc., the controller of the data described below.

What we collect

• Email address: required to get a bag. It is your identity on 21bags.io: receipts, sale notices and payout claim links go there. Never sold or shared for marketing. Sale amounts shown publicly (feed and charts) never include who was paid.
• Bag content: the coin you pick (and its image) is public by design, shown in the Bag, on your bag's page, in charts and in the directory. Prior holdings are retained for ownership history.
• Owner name & link: your display name and link (a website or an @handle for X) are public, shown on the bag and kept in its history. Any link you submit is sent to Google Safe Browsing and a URL-categorization provider for safety screening before and while it is shown, and clicks on it are logged for abuse prevention.
• Payment and payout details: handled entirely by Stripe (Checkout for purchases, Connect for payouts). 21bags.io never sees or stores card numbers, bank details, wallet keys or identity documents. See Stripe's privacy policy.
• Technical data: IP address and request logs, retained briefly for abuse prevention and rate limiting.

What we don't do

No advertising trackers, no selling data, no profiling. We keep our own first-party visitor count: while you are on the site, a random session identifier, the page you are on, and an approximate city-level location (derived from your network address, which itself is not stored) let us see who is here right now. There is no cross-site tracking and no ad network involvement.

Retention

Order, bag and payout records (including your email) are kept for as long as your bag or any payout exists, plus the period required for tax and accounting purposes. You can ask us to delete your email from our records; note we then cannot send you sale notices or payout claims.

Your rights

You may request access to, correction of, or deletion of your personal data via the contact form.

Cookies and storage

We use a functional session value (browser session storage) to hold your bag reservation during checkout, a local preference for the theme, and a random per-session visitor identifier (browser session storage, never shared across sites). Stripe sets its own cookies on its pages.

Third parties

Coin names, symbols and logos come from CoinGecko and link to coingecko.com. Links you add are screened via Google Safe Browsing. Payments and payouts run through Stripe. We are not affiliated with CoinGecko.

Last updated: August 22, 2026. Operator: 21bags.io. Contact: hello@21bags.io.