Privacy Policy

Last updated: March 4, 2026

This policy explains what data ExchangeRates.com collects, why, and what we do with it. We've kept it in plain language on purpose.

The short version

ExchangeRates.com is a free currency converter. You don't need an account to use the converter. If you sign up for rate alerts, we store your email address to deliver them. We don't sell your data. We use analytics to understand how people use the site so we can make it better.

What we collect

Information you provide

• Contact form: If you send us a message, we receive your name, email address, topic, and message content. We use this only to respond to your inquiry.
• Rate alerts: If you subscribe to rate alerts or daily digests, we collect your email address, your chosen currency pairs, and alert preferences (target rates, frequency). We use this only to send the alerts you requested.
• Telegram bot: If you interact with our Telegram bot, Telegram provides us with your Telegram user ID and username. We use this to deliver the rate information you request. We do not store your Telegram messages.
• Feedback: If you submit feedback via the site, we receive the text you provide. We store this on our server to improve the site.

Information collected automatically

• Analytics data: We use Google Analytics and Matomo (self-hosted) to understand traffic patterns - pages visited, time on site, referral source, browser type, and general geographic region. This data is aggregated and not linked to individual identities.
• IP geolocation: When you first visit, we check your approximate location (country level) to pre-select your local currency. We do not store your IP address after this lookup.
• localStorage: We save your currency preferences and recent conversions in your browser's local storage. This data never leaves your device.

What we don't collect

• No passwords (rate alerts use email verification, not accounts)
• No payment information
• No personal financial data
• No tracking cookies beyond analytics
• No advertising or retargeting pixels

Third-party services

We use a small number of third-party services to operate the site:

• Cloudflare - DNS and content delivery. Cloudflare processes visitor IP addresses and may set cookies for security and performance. (Cloudflare's privacy policy)
• Google Analytics - traffic analytics (Google's privacy policy)
• Matomo - self-hosted analytics (data stays on our server)
• Postmark - transactional email delivery for rate alerts and digests. We share your email address with Postmark solely to deliver messages you requested. (Postmark's privacy policy)
• Telegram - bot platform for rate alert delivery. If you interact with our bot, Telegram's own privacy policy governs the platform. (Telegram's privacy policy)
• Exchange rate data providers - TwelveData, Open Exchange Rates, CurrencyLayer, ExchangeRate-API, European Central Bank (via Frankfurter), and MetalPriceAPI provide rate data via our server-side proxy. No user data is shared with these providers.
• IP geolocation APIs - country-level location lookup for currency pre-selection

Cookies

Cloudflare may set cookies for security and performance. Google Analytics sets cookies to distinguish unique visitors. Matomo (our self-hosted analytics) may also set a cookie. No advertising or tracking cookies are used beyond these. You can block analytics cookies through your browser settings without affecting the converter's functionality.

Data retention

• Analytics data: retained for 26 months (Google Analytics default), indefinitely for Matomo (self-hosted)
• Rate alert subscriptions: your email address and alert preferences are retained on our server indefinitely until you unsubscribe or request deletion
• Contact form submissions: retained on our server for as long as needed to resolve your inquiry
• Feedback submissions: retained on our server indefinitely to help us improve the site
• localStorage data: persists in your browser until you clear it

Your rights

Depending on where you live, you may have the right to:

• Access, correct, or delete personal data we hold about you
• Object to or restrict processing of your data
• Request a copy of your data in a portable format
• Withdraw consent for analytics tracking

These rights apply under regulations including the GDPR (EU/EEA), UK GDPR, and CCPA (California). To exercise any of these rights, contact us.

Children's privacy

ExchangeRates.com is not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top. For significant changes, we may add a notice on the homepage.

Contact

For privacy-related questions or requests, reach us through our contact page.