Kraken app

Kraken

33k
Get the app

Privacy Hub

You control your assets. You control your data.
Read our Privacy NoticeStart a privacy request
Control

You stay in control of your personal data

  • Access, update and export the information we hold about you, directly from your account

  • Request deletion where the law allows - and see clear reasons where retention is required

  • Manage communication, session and device preferences in one place

  • Secure your own account with passkeys, 2FA, a Master Key and the Global Settings Lock

Learn how to secure your account
Kraken account settings

Reject all cookies

Accept all cookies

Manage settings

Transparency

We explain what we do with your data, in plain language

  • Clear summaries of what we collect, why we collect it, and how long we keep it
  • Plain-language answers backed by our full Privacy Notice and Cookie Policy
  • Clear, easy-to-use controls for your cookie and marketing preferences
View your cookies settings
Security by design

Industry-leading security, built into every layer

  • Sensitive data is fully encrypted at rest and in transit

  • Passkeys, 2FA, Master Key and Global Settings Lock

  • Advanced cold storage and hot wallet solutions, plus regular Proof of Reserves audits

  • ISO/IEC 27001:2022 certified and SOC 2, Type 1 examination complete

Explore Kraken security
Kraken security settings
Kraken account settings
Global compliance

Accountable to the world's strictest financial and privacy regulators

  • GDPR, UK GDPR, CCPA/CPRA and other applicable data-protection laws

  • Financial rules covering identity verification, sanctions screening and transaction monitoring

  • Independent audits, certifications and Proof of Reserves attestations

  • Licensed and registered with financial regulators around the world

Read about our regulatory footprint

Submit a privacy request

Want to access, correct, port or delete your personal data? Or have a general privacy question? Our dedicated privacy team is here to help.
Start a privacy request3D illustration of a user icon with passkey in silver and purple metallic tones

How we handle your data

To run a secure, regulated exchange, we collect:

  • Account information — name, email, phone number and credentials

  • Identity verification data — government-issued ID, proof of address and other KYC information required by financial regulators

  • Financial information — funding sources, payment details and transaction history

  • Technical and usage data — device, IP address, product interactions and security signals

  • Third-party data — information from payment providers, identity verification partners, and sanctions and fraud-prevention services

We apply data-minimization principles and collect only what we need to deliver our services and meet our legal obligations.

We process personal data for a defined set of purposes:

  • Service delivery — operating, maintaining and improving Kraken products

  • Regulatory compliance — identity verification, AML/CTF monitoring, sanctions and tax reporting

  • Security and fraud prevention — detecting and stopping threats to your account and the platform

  • Product improvement — measuring performance and enhancing user experience

  • Communication — service updates, security notices, support and (where you've opted in) marketing

We do not use your data for unrelated purposes. Further details are set out in our Privacy Notice.

Protecting your funds and personal information is our highest priority. Kraken takes a comprehensive approach to security, combining layered technical controls, continuous testing and independent validation:

  • Sensitive data is fully encrypted at rest and in transit

  • Access is strictly controlled and monitored

  • Passkeys, multi-factor authentication, Master Key and Global Settings Lock

  • Advanced cold storage and hot wallet solutions, plus regular Proof of Reserves audits

  • Constant, real-time monitoring for suspicious activity, expert security testing and a public bug bounty program

We continuously monitor and test our security controls to address evolving threats. See Kraken Security for more detail on our approach.

We keep personal data only as long as we need it. Because Kraken is a regulated financial institution:

  • Some records must be retained to meet Anti-Money Laundering (AML), Know Your Customer (KYC), tax and other statutory obligations
  • Retention periods can extend beyond account closure, typically for several years
  • When a retention obligation ends, data is securely deleted or anonymised

We're explicit about these constraints so you know what to expect when you close an account.

We share personal data only where necessary and under strict contractual and technical controls:

  • Service providers — cloud infrastructure, payments, identity verification, and fraud and sanctions screening
  • Regulatory and law-enforcement authorities — where required by law, regulation or valid legal process
  • Kraken group companies and partners — supporting delivery of Kraken products across jurisdictions

We require every third party handling your data to meet our security and privacy standards. Kraken does not sell your personal data.

Subject to your local law, you have the right to:

  • Access the personal data we hold about you

  • Correct data that is inaccurate or incomplete

  • Request deletion, subject to legal retention obligations

  • Restrict or object to certain processing

  • Receive a portable copy of your data

  • Withdraw consent where processing is based on consent

  • Opt out of the "sale" or "sharing" of personal information

The fastest way to exercise these rights is through our privacy request form. We'll verify your identity to protect your account and respond within the time frames required by applicable law.

Kraken operates globally, which means your data may be transferred to and processed in countries outside your home jurisdiction, including the United States, the United Kingdom, Ireland and other locations where Kraken entities or service providers operate.

When personal data crosses borders we rely on recognised safeguards, including:

  • Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum

  • Transfer impact assessments for higher-risk flows

  • Technical and organisational measures such as encryption, pseudonymisation and strict access controls

We keep our transfer mechanisms under review as regulatory guidance evolves.

Updates to this page

Privacy is a living practice. We'll refresh this page as our services and the law evolve, and highlight updated sections so you can see what's changed.

Privacy notice

The full legal detail on how we collect, use and protect personal data.

3D illustration of an ID icon in silver and purple metallic tones

Transparency report

How we handle law enforcement and regulatory data requests, annually.
3D illustration of a magnifying glass in silver and purple metallic tones

Security at Kraken

How we engineer, test and certify our security controls.
3D illustration of stacked shields bearing the kraken icon - in silver and purple metallic tones

Proof of reserves

Verify that your balances are backed by real assets in our custody.

3D illustration of multiple coins forming a circular shape - in silver and purple metallic tones

Privacy FAQs

You do. We hold and process your personal data to provide our services and comply with the law, but your data remains yours. You can request access, correction, a portable copy or deletion at any time through our privacy request form — and we'll explain clearly where a legal obligation requires us to retain records.

As a regulated financial institution, Kraken is legally required to verify the identity of every client. These Know-Your-Customer (KYC) checks help prevent fraud, money laundering, terrorist financing and sanctions violations — and they stop someone opening an account in your name. Learn more about verification levels and requirements.

You can close your Kraken account at any time. However, because we're a regulated financial institution, some records (including KYC data and transaction history) must be retained for periods set by financial law — typically several years after account closure, depending on your jurisdiction. Once the retention period ends, your data is securely deleted or anonymized.
We fully encrypt sensitive data at rest and in transit, strictly control and monitor access to our systems, and continuously test our security. We're ISO/IEC 27001:2022 certified and have completed a SOC 2, Type 1 examination. You can add further protection to your own account with passkeys, multi-factor authentication, a Master Key and Global Settings Lock.

No. No one can buy your personal data from Kraken. Like most companies, we do share limited data with advertising and analytics partners, mainly through cookies, to measure our marketing. You can opt out at any time: adjust your Cookie Settings or submit a Do Not Sell or Share request.

Only with vetted partners and service providers (for example, payment and identity-verification partners), Kraken group companies supporting our services, and regulators or law enforcement where legally required. All third parties handling your data are contractually bound to meet appropriate security and privacy standards.
Because Kraken operates in multiple jurisdictions, personal data may be transferred internationally. Where data leaves your home jurisdiction we rely on recognised legal safeguards — including Standard Contractual Clauses and the UK International Data Transfer Addendum — together with strong technical controls such as encryption and pseudonymisation.

Yes. We comply with the GDPR, UK GDPR, California's CCPA/CPRA and other applicable data-protection laws. Our full Privacy Notice explains our lawful bases for processing, your rights and how to exercise them.

The fastest way is through our privacy request form, which routes your request to the Kraken privacy team. We'll verify your identity to protect your account and respond within the time frames required by law.

Follow our compromised-account guide immediately and contact Kraken Support. You can also review our scam-awareness resources to help identify common threats.

Contact our privacy team

3D illustration of a three stacked shields with Kraken logo
Have a Kraken account?
Sign in to help us verify your identity and relevant account. This is the fastest way to contact our team, and gives you additional options.
Sign in
Have a Kraken account?
Sign in to help us verify your identity and relevant account. This is the fastest way to contact our team, and gives you additional options.
Sign in

Contact our privacy team

What happens next

You’ll need to verify your email address before your support request is sent to our team.

Know your rights

Questions about how Kraken handles your data are handled by our global privacy team and Data Protection Officer. If you're not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority. We’ve listed the regional addresses of these authorities at the end of our Privacy Notice.
See our Privacy Notice (section 17)