Bitpanda Cookie Policy

The current version of this Cookie Policy is: November 2023

1. About this Cookie Policy

Our website and applications use cookies to give you the best possible experience with our products. They not only help us to understand user interactions with our website and to improve Bitpanda’s products and services continuously, but are also important for IT security. This Cookie Policy explains how we use cookies and why, but also on how you can decide which cookies you want to allow and how to protect your privacy for yourself.

To whom does this Privacy Policy apply? 

Bitpanda GmbH and its direct and indirect subsidiaries (hereinafter referred to as "Bitpanda" or "Bitpanda Group" or "we") offer via its websites (e.g.: www.bitpanda.com, exchange.bitpanda.com) and its mobile applications (“Mobile App”) (together hereinafter referred to as "Website" or “Platform”) services and products related to buying and selling cryptocurrencies and other digital assets as well as payment and IT services.

This Privacy Notice applies to all services and products regarding our Platform,our Broker together with associated products, this website and our Helpdesk; and provides an overview in regards to the main actors when providing our Platform.

2. What are cookies, web beacons and other similar technologies?

Generally, cookies are text files (typically made up of letters and numbers) which are downloaded to your computer, tablet, smartphone or other devices (hereinafter referred to as “device”) when you visit our website or use our applications and allow us to recognise your devices. Such files allow us to record certain pieces of information whenever you interact with our website, services (newsletter) and applications, which we then use to optimise the performance of our website as well as to continuously improve our platform, products and services.

There are many specific types of cookies, web beacons and other similar technologies that are used, and their names may change from time to time (e.g. session and persistent cookies, flash cookies, ClearGIFs, pixels, event trackers). In order to help you better understand cookies and their functions as well as our use of such technologies and your settings choices, we would like to explain this to you in more detail hereafter.

3. Important “cookie language”

a. “Session cookies” are temporary cookie files which are only active for the browser session which are erased after you close your browser.

b. “Persistent cookies” are files stored in your browser’s subfolders for a longer period, either until you delete them manually or your browser deletes them after a period contained within the persistent cookie’s file.

c. “First-party cookies” are cookies stored directly by the website that you are visiting, e.g. by us or by an assigned third party.

d. “Third-party cookies” are cookies that are set by a party other than the website you are visiting, but nevertheless through the website.

e. “Cookie IDs” are unique identifiers for cookies that consist of a string of characters with which websites and servers identify the specific internet browser in which the cookie was stored. A person can usually not be directly identified via such cookies (except for certain third-party tools). There are also cookies without a cookie ID.

4. What categories of cookies do we use for what purpose and why are we allowed to?

As you can see also from our cookie settings in the banner, we use different categories of cookies that serve different purposes: 

Essential Cookies:

  • What are those?: These cookies can be session or persistent cookies and are absolutely necessary to provide our services to you. 
  • What are they for?: 
    • They enable us to, for example, display the settings you have made and navigate the website correctly, to remember your privacy and language settings or to know if you are logged into your account. 
    • They also help with the general performance of our services (e.g. crash reports) and to offer our products (e.g. Affiliate programme and Tell-a-Friend programme). 
    • Additionally, such technology makes our services more secure by enabling the identification and examination of potentially defective or suspicious access to our website, users’ accounts and our network (e.g. for the prevention of identity theft, bot attacks, fraud, etc.). 

Essential cookies will be provided by us or by a third party whose services are implemented by us on our website (e.g. reCAPTCHA, Sentry, Cloudflare). If you block these cookies via your browser, our services cannot be provided to you, therefore, your consent for “Essential cookies” is not necessary.

Non-Essential Cookies: 

“Performance cookies”

  • What are those?: These cookies are used to collect information about the visitors of our website (number, frequency, preferences, etc.) and how visitors use our website (e.g. which pages and parts are popular, how they move around). 
  • What are they for?: They are there so that we can measure and improve our performance of our website, including our services. This may also work through web analytic tools. 
  • Performance cookies can be session or persistent cookies. These cookies will be provided by us or by a third party whose services are implemented on our sites. 
  • What happens if you block them?: Blocking such cookies and tools via your browser or not opting-in when you first visit our website by ticking the checkbox for “Performance cookies” has no effect on the services provided to you. However, it makes it harder for us to further improve the user experience. All information collected by these cookies is aggregated and anonymous for us. However, for third party tools implemented on our website this might be different.

“Advertisement cookies

  • What are those?:These cookies are mostly persistent cookies from third party tools which are implemented on our website.
  • What are they for?: Such cookies allow us to, e.g., deliver more relevant advertisements to you (customised advertising, retargeting, etc.) and to track our marketing campaigns (conversion tracking, etc.). They might collect information about your browsing habits, like the pages you visited and the links you followed. Third parties like advertising networks set such cookies with our permission and can use the collected information themselves, e.g., to track your browser across other websites where enabled and create a profile with your interests (especially if you are logged into social media accounts while surfing). 
  • What happens if you block them?: Hence, such cookies can also affect the content you see on other websites. Blocking these cookies via your browser or not opting-in when you first visit our website by ticking the checkbox for “Advertisement cookies” has no effect on the services offered to you. However, the ads you see won’t be personalised and therefore less relevant for you. All information collected by these cookies is aggregated and anonymous for us (except for the referral cookie), for third-party tools implemented on our website this might be different.

Other tracking we use are:

  • Tracking technologies like tracking pixels, scripts, web beacons in emails (e.g. newsletter), applications or in ads, are there to record your interaction with us, so that we can better analyse and improve our services and campaigns. The data collected is anonymised. You can generally block all such technologies by following the guide below. However, depending on your email or browser settings, the files might be accepted automatically. Blocking such technologies does not affect the service offered to you. 
  • A first-party cookie is used to determine when affiliates or participants of the Tell-a-Friend and Affiliate Programme, refer new users to Bitpanda. This reference cookie is only set if you have been recruited within such a programme. Setting this cookie is necessary to provide such services to our users and to grant them the respective rewards. The cookie is only used as a reference and beyond that, we will not track you or use this cookie for any other purpose. You can delete this cookie via the settings of your browser or device at any time.
  • As a European regulated fintech company offering a broker platform for various asset classes, it is critical that we maintain operational resilience. Therefore, we also implement Datadog that is essential in providing us with a stable, resilient and secure broker platform that gives our users the confidence to reliably conduct business for a wide variety of asset classes in a regulated environment.
    • Real-time monitoring and alerting on our infrastructure, applications, networks and security posture gives us visibility across our entire platform. This allows us to rapidly detect and respond to incidents or anomalies that could impact our services. Datadog's dashboards and analytics also help us understand usage patterns and capacity planning to scale our platform efficiently. We depend on the service to be able to track and comply with 3rd party SLAs and general availability requirements.
    • Datadog is deeply integrated into our change management procedures and gives us the ability to assess risk for planned changes. This reduces the chances of incidents due to changes gone wrong.
    • For cybersecurity, Datadog provides network security monitoring, vulnerability management and alerting on threats. This is a critical layer of defense to secure our platform and customer assets per regulatory requirements. Several of our security certifications such as ISO27001 as well as SOC2 include this service as part of the security toolchain playing a significant role in detection and response capabilities from a security standpoint.

Mobile app

What happens when you use our mobile app?: 

  • When you use our mobile app, we might record information that is unique to you and associated with your device (such as operating system, IP-address, browser type, device type, unique device identification number), your activities within the app and your network location. 
  • Mostly, this is done by third-party SDKs that are integrated in our mobile app’s source code. 

What is this information collected for?:

  • This information is used to measure and improve the performance and usability of the mobile app.

5. Do we process personal data via cookies?

Yes, personal data may be processed via performance and advertising cookies in accordance with applicable data protection laws. You can find more about the legal basis under which the data is processed,, the purpose of this processing and your rights under the applicable data protection law in our Privacy Policy.

6. How to manage your consent and cookie preferences?

First of all, you can use our cookie banner when you first visit our website to manage your cookies on our website. You can select the specific cookie types you want to accept and which you don’t, there is also an option to simply accept all of them. 

Your consent to data processing of non-essential cookies can be withdrawn at any time via the app or on the website. Moreover the cookie settings  can also be changed or updated by clicking on “Cookie settings” on our website. 

There are also many other options to prevent tracking and setting of cookies in your internet browser and on your devices. Below are some of the most important possibilities and tools for your devices:

A. Browser Settings

You can prevent the setting of cookies through our website at any time by selecting the appropriate setting (e.g. “Do Not Track”) in your internet browser. With this you permanently object to the setting of cookies or to being informed if a new cookie was set. Cookies which have already been set can be deleted at any time via your internet browser or other software programs. If you use a Do Not Track (“DNT”) function, we will neither track your activity or store any first-party cookies on your devices. However, please note that this does not apply to Essential Cookies. 

Furthermore, tracking tools from third parties might still be able to track you (see below). If the setting of cookies is fully disabled in your internet browser, not all functions of our website may be fully usable for you. You can find a description of the appropriate settings for each common browser with the following links:

B. Appropriate settings for your Bitpanda account

You can update your cookie settings regarding the Performance and Advertising categories at any time or when you are logged into your account.

C. Appropriate settings in the Bitpanda mobile app

You can prevent the setting of cookies through the mobile app at any time by using the tracking slider in the mobile app and may thus permanently object to the setting of cookies. Cookies which have already been set can also be deleted at any time via the settings of your device or other software programs. If the setting of cookies is disabled in the mobile app, not all functions of the app may be fully usable for you.

D. Prevention of third-party cookies

We have implemented different tools from third parties on our website, which can also store cookies on your devices (see below for information and links).

7. Which tools from third parties do we use and how can you opt-out?

Because of how cookies and similar technologies work, we cannot access data collected by third-party cookies, nor can other companies or persons access the data generated by such tools, and in particular, not all tracking functions of third-party tools can be controlled by us. All these providers are obliged to comply with the applicable data protection regulations and are solely responsible for any processing of personal data as a data controller according to article  4 (7) GDPR.

Cookie Name Provider Type Category Purpose of cookie data collection Expiration time
__cf_bm Cloudflare Essential Essential Used to read, filter and protect the website from bots 30 minutes
__zlcmid Zendesk Essential Essential Store visitor's machine-id for the Chat widget's authentication 365 days
uc_advertisement_v1_* Bitpanda Essential Essential Used to manage cookie settings and user consent for Advertising cookies 13 months
uc_performance_v1_* Bitpanda Essential Essential Used to manage cookie settings and user consent for Performance cookies 13 months
uc_essentials_v1_* Bitpanda Essential Essential Used to manage cookie settings and user consent for Essential cookies 13 months
_uetvid Microsoft Bing Non-essential Advertisement and Targeting Used to store and track visits across websites 13 months
_ttp TikTok Non-essential Advertisement and Targeting Used to measure and improve the performance of advertising campaigns and to personalise the user’s experience (including ads) on TikTok 13 months
_ga Google Non-essential Advertisement and Targeting Used to distinguish users 13 months
_rdt_uuid Reddit Non-essential Advertisement and Targeting Used to attribute conversions back to Reddit Ads 90 days
ajs_group_id Segment Non-essential Analytical Used to store the group id Persistent
ajs_user_id Segment Non-essential Analytical Used to analyse how users use the website 365 days
TP.uuid Trustpilot Non-essential Functional These cookies are used by the TrustPilot service to identify you and enable you to leave reviews of our products and services 365 days
_hp2_ses_props Heap Analytics Non-essential Analytical Used to store performed actions on the website 30 minutes
_uetsid Microsoft Bing Non-essential Advertisement and Targeting Used to store and track visits across websites 1 day
_hjAbsoluteSessionInProgress Hotjar Non-essential Analytical Used to detect the first pageview session of a user 30 minutes
_hjSession_* Hotjar Non-essential Analytical Ensures subsequent requests in the session window are attributed to the same session 30 minutes
_gid Google Non-essential Analytical Used to store and count pageviews 1 day
_hjFirstSeen Hotjar Non-essential Analytical Identifies a new user’s first session 30 minutes
_hp2_id.* Heap Analytics Non-essential Analytical Used to store a unique user ID and track interaction 13 months
_hjIncludedInSessionSample_* Hotjar Non-essential Analytical Used to determine if a user is included in the data sampling defined by your site's daily session limit 2 minutes
_hjSessionUser_* Hotjar Non-essential Analytical Creates a Hotjar User ID and ensures data from subsequent visits to the same site are attributed to the same user ID. Hotjar does not track users across different sites 365 days
ajs_anonymous_id Segment Non-essential Analytical Sets an Anonymous ID for each new visitor to the Bitpanda site to track new and returning users 365 days
_fbp Meta Non-essential Advertisement and Targeting Used to store and track visits across websites 90 days
_tt_enable_cookie TikTok Non-essential Advertisement and Targeting Used as a means of tracking your website activity to help us optimise our advertising 13 months
Secure-1PAPISID__Secure-3PAPISID APISID Google Non-essential Functional These cookies are set by Google and are used to store user preferences and information when viewing pages with Google maps on them 13 months
__Secure-1PSIDCCSIDCC Google Non-essential Functional These cookies are set by Google and are used to protect users' data from unauthorised access. 12 months
__Secure-1PSID__Secure-3PSID HSIDSID Google Non-essential Functional These cookies are set by Google and are used to authenticate users, store session preferences, and perform security measures 13 months
__Secure-ENID Google Non-essential Functional This cookie is set by Google and is used to store user preferences and information, such as language preferences and customised search results 13 months
SAPISID SSID Google Non-essential Functional This cookie is set by Google and is used to store user preferences and information, such as the preferred language and browsing preferences 13 months
MUID Microsoft Bing Non-essential Advertisement and Targeting Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes. 12 months
muc_ads Twitter Non-essential Advertisement and Targeting This cookie is used for optimising ad relevance by collecting visitor navigation data 12 months
guest_id_ads Twitter Non-essential Advertisement and Targeting Used to assign a unique id to guest users for the purposes of advertising, including content served from Twitter to our pages 12 months
guest_id_marketing Twitter Non-essential Advertisement and Targeting Used to detect whether a user is logged into Twitter 12 months
personalization_id Twitter Non-essential Advertisement and Targeting This cookie is set by Twitter for advertising and to identify and track the website visitor 12 months
guest_id Twitter Non-essential Advertisement and Targeting Unique id that identifies the user’s session 12 months
1P_JAR Google Non-essential Advertisement and Targeting Used to provide ad delivery or retargeting 30 days
NID Google Non-essential Functional Used to remember users’ preferences and other information, such as preferred language or preferences in regards to Google’s SafeSearch filter. 6 months
OTZ Google Non-essential Analytical Used by Google Analytics to provide an aggregate analysis of website visitors End of browser session
_ga_* Google Non-essential Analytical Used by Google Analytics to store and count pageviews 12 months
DV Google Non-essential Analytical Used to collect information about how visitors use the site and use the information to compile reports to help improve the site. The cookies collect information in an anonymous form, including the number of visitors, where visitors have come from and the pages they visited End of browser session
Tta_attr_id_mirrortta_attr_id TikTok Non-essential Advertisement and Targeting To measure and improve the performance of advertising campaigns and to personalise the user’s experience (including ads) on TikTok 12 months
sid_guard_ads TikTok Non-essential Advertisement and Targeting To measure and improve the performance of advertising campaigns and to personalise the user’s experience (including ads) on TikTok 12 months
tta_attr_id TikTok Non-essential Functional Used for tracking the use of embedded services 12 months
dprwd Meta Non-essential Functional These cookies are used for performance purposes to deliver an optimal experience for your device's screen 7 days
datr Meta Non-essential Functional Used for security, site and integrity to help keep users’ account, data and the Meta Quest Services safe and secure by identifying users’ browser securely 12 months
_cfuvid Cloudflare Non-essential Functional Set as part of a Rate Limiting Rule, and is used to allow the Cloudflare WAF to distinguish individual users who share the same IP address End of browser session
d_ticket_ads TikTok Non-essential Advertisement and Targeting Used to help measure and optimise digital marketing activity, and to ensure serving relevant advertising to users across the platform 12 months
recent_srsloidedgebucket Reddit Non-essential Advertisement and Targeting Saves the information about log-on Reddit user for the purpose of the advertisement recommendation and updating the content, the content of the cookie is confirmed within the conditions of the Reddit use 12 months
locale Meta Non-essential Functional This cookie contains the display locale of the last logged in user on this browser 7 days 
usida Meta Non-essential Advertisement and Targeting Collect information about your browser, as well as unique identifiers to tailor advertising End of browser session

SRCHUSR

SRCHUID

SRCHHPGUSR

SRCHD

Microsoft Bing Non-essential Analytical This cookie is an analytics service that connects data from the Bing advertising network with actions performed on the website 12 months
c_user Meta Non-essential Advertisement and Targeting The c_user cookie contains the user ID of the currently logged in user. The lifetime of this cookie is dependent on the status of the ‘keep me logged in’ checkbox End of browser sessionOR 90 days
xs Meta Non-essential Functional Used to record session number and the ‘secure’ flag for if the user has enabled the secure browsing feature. The lifetime of this cookie is dependent on the status of the ‘keep me logged in’ checkbox  End of browser sessionOR 90 days
tag Bitpanda Non-essential Analytical Used to track which channel or campaign the user came from 6 months
AEC Google Non-essential Functional Used to prevent spam, fraud, and abuse. Ensures that requests within a browsing session are made by the user, and not by other sites. These cookies prevent malicious sites from acting on behalf of a user without that user’s knowledge 6 months
irclickid Bitpanda Essential Essential Used to collect and store a unique identifier from a click coming from an affiliate partner 30 days
cf_clearance Cloudflare Essential Essential Clearance Cookie stores the proof of challenge passed. It is used to no longer issue a challenge if present. It is required to reach an origin server 12 months
_gcl_aw Google Non-essential Advertisement and Targeting Used to store ad click information, generate unique IDs for visitors to remember preferences and track and gather statistics and conversion rates through the website 90 days
cppo Meta Non-essential Advertisement and Targeting This cookie is being used by Meta to track users 1 day
sb Meta Non-essential Functional Meta stores information about the browser to improve its security settings 13 months
cookie-consent TikTok Non-essential Functional Used to track cookie consent 12 months
odin_tt TikTok Non-essential Advertisement and Targeting Used to measure and optimise digital marketing activity, and to ensure we are serving relevant advertising to users across the platform 12 months
_gcl_au Google Non-essential Advertisement and Targeting First-party cookie for "Conversion Linker" functionality by taking information in ad clicks and storing it in a first-party cookie so that conversions can be attributed outside the landing page 90 days
ref Bitpanda Non-essential Analytical Used to record the referrer of user traffic 30 days
_gat Google Non-essential Advertisement and Targeting Used to limit and filter requests from bots 1 minute
_gac_UA* Google Non-essential Advertisement and Targeting Used to store campaign information in order for Google Ads to measure the interactions users have with the business. Analytics writes campaign information to the _gac cookie when a user opens a page on the site via a URL that employs Google Ads auto-tagging. 90 days

8. What about links to other websites and content of third parties?

Our services contain links to other websites (e.g. this link to delicious panda cookies right here) over which we have no control. Therefore, we do not assume any liability for the content of such websites. The respective provider of the linked website is solely responsible for the content and correctness of the information provided there, as well as for the tracking and setting of cookies by such websites.

9. How do you find out about changes to this Cookie Policy?

We regularly review and update our Cookie Policy. We will inform our visitors about updates by providing the new version of the policy on our website. For this reason, we recommend that you read this cookie policy every time you are deciding whether to accept cookies from us or not. If it is required by applicable law, we will obtain your express consent to significant changes.

10. How to contact us?

If you have any further questions about this Cookie Policy or the processing of your personal data, please contact our privacy team: privacy@bitpanda.com or have a look at our Privacy Policy. Please note that for certain requests we require further identification data from you (e.g. passport, ID card, etc), in order to ensure that your personal data is only shared with you.