Privacy policy

This policy explains how WithdrawFirst (“we”) handles personal data on this site.

Who is responsible

This site is operated by withdrawfirst.com. For any question about your personal data, or to use your rights, email us at hello@withdrawfirst.com.

Country check for exchange links

Our hosting provider (Cloudflare) determines the country, and for some countries the region, of each visitor from the IP address of the request. We use only that country/region to decide which exchange links we may show you and where a link to an exchange may forward you. We do not store your IP address or the result of this check, and we do not combine it with other data.

When you click “Accept” in the cookie banner, we load Google Analytics 4 (GA4) to count visits and see which pages are useful. Until you accept, no Google Analytics script is loaded and nothing is sent to Google; if you click “Reject” or do nothing, that stays the case. After you accept, GA4 sets first-party cookies (names starting with _ga). We do not use advertising features or remarketing. When you click a link to an exchange we record the click (exchange, position on the page, page and detected country) in Google Analytics, only if you accepted analytics.

What is sent to Google after you accept: the pages you view (the page address without any query string or fragment), the time you spend, the page you came from, your browser, device and operating system type, the exchange-link click events described above, and an identifier stored in the _ga cookie. Your IP address reaches Google as part of each request and is used to estimate your approximate location; according to Google, GA4 does not log or store IP addresses. Analytics data is pseudonymous, not anonymous. We turn off Google signals and advertising personalisation. GA4 keeps event-level and user-level data for a maximum of 14 months (the longest option for our type of property) and then deletes it automatically; aggregated reports are not covered by this limit.

Google provides Google Analytics as our processor under Google’s data processing terms (the Google entity is Google LLC or one of its affiliates, as set out in those terms). Google may process the data outside the UK and the European Economic Area (EEA), including in the United States. Where it does, the transfer relies on the safeguards in Google’s terms: the European Commission’s Standard Contractual Clauses (with the UK equivalent for UK data) or a recognised data protection framework that Google has adopted.

Our legal basis is your consent. You can withdraw it at any time: use (also in the footer) and choose Reject. Google Analytics then stops collecting on this site and the _ga cookies are deleted from your browser. Withdrawing does not affect processing that happened before, and data already sent stays in Google Analytics until the retention period above ends; to ask for it to be deleted, email us.

Your consent choice is stored in your browser’s local storage (key wf-consent). See Cookies.

Links to exchanges

When you follow a link to an exchange, the exchange’s own privacy policy applies on its site. If an affiliate program is approved for that exchange, the exchange may tell us that an account was opened through our link; we do not receive your identity.

Email

If you email us, we use your address and message only to reply.

Analytics: your consent (Art. 6(1)(a)). Country check: our legitimate interest in complying with the rules that apply to promoting exchanges in your country (Art. 6(1)(f)). Replying to email: legitimate interest.

Your rights

You can withdraw consent at any time using “Cookie settings” in the footer. Depending on where you live, you may have the right to access, correct, delete or port your data, to object to processing, and to complain to your data protection authority.

Changes

We will update this page when our practices change.