Terms, privacy & your data.

Who operates CryptoCGT

CryptoCGT is operated by Mai Thanh Tung, a registered sole trader, of Đà Nẵng, Vietnam. You can reach us at [email protected].

Payments are sold and processed by Paddle.com Market Ltd as our reseller and Merchant of Record — Paddle is the seller of record shown on your receipt and handles applicable taxes (including VAT) and the refund channel.

Important disclaimer

CryptoCGT is an information and calculation tool, not a tax adviser.It helps you organise your cryptoasset transactions and estimate your UK Capital Gains Tax using HMRC's published rules. It does not provide tax, legal, accounting or financial advice, and nothing it produces is a substitute for advice tailored to your circumstances. You are responsible for the accuracy and completeness of the information you enter and for what you report to HMRC. Tax rules change and may apply differently to you — if in doubt, consult HMRC or a qualified professional. To the extent permitted by law, CryptoCGTaccepts no liability for tax assessed, penalties, or losses arising from reliance on the tool's outputs.

Terms of Service

Effective date: 20 June 2026.

These Terms govern your use of the CryptoCGT website and application ("the Service"), provided by CryptoCGT, a service operated by an independent sole trader, sold through Paddle as Merchant of Record("we", "us"). By ticking the consent box at sign-up, creating an account, or using the Service, you confirm you have read and agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not use the Service.

1. The Service

You provide your cryptoasset transaction history by uploading CSV files (exported from your exchange or wallet) or by entering transactions manually. CryptoCGT computes a UK Capital Gains Tax position using HMRC's Section 104 pooling, same-day and 30-day rules, and produces reports including a Self Assessment (SA108) summary. The Service is an information tool only (see the Disclaimer) and does not constitute tax advice.

2. Accounts

You must provide accurate registration details, keep your credentials secure, and are responsible for activity under your account. You must be at least 18.

3. Your data

You provide your transaction data by uploading CSV files exported from your exchange or wallet, or by entering transactions manually. We do not connect to your exchange, never ask for or store API keys, and never read your wallet addresses — so we never touch your funds and cannot move them. You must only upload or enter data you are entitled to use.

4. Accuracy and your responsibility

Outputs depend entirely on the completeness and accuracy of the data you provide and confirm (including resolving flagged issues such as transfers and missing cost basis). You are solely responsible for reviewing outputs and for your tax filings. We strive for correctness and validate our engine against HMRC's published examples, but we do not warrant that outputs are error-free or suitable for your specific situation.

5. Payment

Paid features (such as downloading reports) are sold on a per-tax-year basis at the price shown at purchase. Payments are processed by Paddle, our reseller and Merchant of Record, whose terms also apply to the transaction; Paddle handles applicable taxes (including VAT) and issues your receipt. Refunds are handled per our refund policy and Paddle's terms.

6. Your right to cancel (digital content)

As a consumer you normally have 14 days to cancel a distance purchase. Because your report is digital content delivered immediately, at checkout you are asked to consent to immediate access and to acknowledge that you therefore lose the 14-day right to cancel once the report is unlocked or downloaded. If you do not give that consent, the report is not delivered until the cancellation period ends. You can review your full figures in the free preview before paying. This does not affect a refund for a billing error or a report that failed to generate (see Refund policy), and your statutory consumer rights are unaffected.

7. Acceptable use

You must not misuse the Service, attempt to breach security, scrape or resell it, use it to facilitate tax evasion or unlawful activity, or upload data you have no right to. We may suspend accounts that breach these Terms.

8. Intellectual property

The Service, its software and content are owned by us or our licensors. Your transaction data and the reports generated from it remain yours.

9. Availability

The Service is provided "as is" and "as available". We may change, suspend or discontinue features. We are not liable for downtime of the third-party price-data feeds we rely on to value your transactions.

10. Limitation of liability & your indemnity

To the maximum extent permitted by law, we are not liable for indirect or consequential losses, or for any tax, interest, penalties, or losses arising from your reliance on outputs or from inaccurate data you provided. Nothing excludes liability that cannot be excluded by law. Our total liability is limited to the fees you paid in the 12 months before the claim.

Your indemnity. You agree to indemnify us against any claim, loss, liability, tax, penalty, interest or cost (including reasonable legal fees) arising from data you provided that was inaccurate or incomplete, your use of the Service in breach of these Terms or any law, or your own tax filings. This does not apply to any liability that cannot be limited by law, or to losses caused by our own breach.

11. Termination & changes

You may stop using the Service and delete your account at any time. We may terminate for breach, and may update these Terms; material changes will be notified, and continued use means acceptance.

12. Governing law

These Terms are governed by the laws of England and Wales, whose courts have exclusive jurisdiction, except where mandatory local consumer law gives you other rights. Contact: [email protected].

Privacy Policy

Effective date: 20 June 2026.

CryptoCGT ("we") is the data controller for personal data processed through CryptoCGT. We comply with the UK GDPR and the Data Protection Act 2018.

What we collect

• Account data: name, email, password (hashed), and authentication / login-session data.
• Financial/transaction data: cryptoasset transactions you provide by uploading CSV files or entering them manually, and the tax computations derived from them. We do not connect to your exchange, do not request or hold exchange API keys, and do not read your wallet addresses or private keys.
• Payment data: handled by Paddle (our Merchant of Record). We receive limited confirmation and billing details, not your full card number.
• Technical data:IP address, device/browser info, and import/error diagnostics — metadata about whether a file import or page succeeded or failed and the kind of error, used to keep the app reliable. This never includes your file's contents, your transactions or your tax figures.

Why we use it (lawful bases)

To provide the Service and your tax reports (contract); to secure and improve the Service, keep it running reliably (including privacy-first error monitoring) and communicate with you (legitimate interests); to take payment and meet legal/accounting obligations (legal obligation); and, where required, with your consent (e.g. marketing emails you can opt out of).

Who we share it with (sub-processors)

We use trusted providers under data-processing agreements, including: Supabase(database/auth/storage), Vercel (hosting), Railway (compute), Paddle(payments, as our Merchant of Record), Resend and our SMTP provider (transactional email), and CoinGecko (price data). We also use Sentry (EU region, Frankfurt) for error monitoring; it is configured to not receive personal data or financial data — no PII, no request bodies and no local variables, only the kind of error and where it occurred. We do not sell your personal data.

International transfers & retention

Where data is processed outside the UK, we rely on adequacy decisions or appropriate safeguards (e.g. Standard Contractual Clauses / the UK Addendum), and aim to host personal data in UK/EU regions where feasible. We keep your data while your account is active and as needed to meet legal/tax record-keeping obligations, then delete or anonymise it.

Security

We use encryption in transit and at rest, hashed passwords, and least-privilege practices. We never connect to your exchange and never hold API keys or private keys, so there is nothing on our side that could move your funds. No system is perfectly secure, but we take reasonable measures to protect your data.

We are established outside the UK and act as the data controller for the data described above. For any data-protection question, or to exercise your rights, contact [email protected]. Where UK law requires us to appoint a UK representative, we will do so as our UK user base grows and publish their details here.

Cookie notice

CryptoCGT uses only essential cookies to run the site and keep you signed in. We also run privacy-first error monitoring (Sentry) to keep the app working — it carries no personal or financial data, so we treat it as essential and rely on our legitimate interest in keeping the Service reliable. There is no optional analytics to switch on or off here. We use no advertising trackersand we never sell your data — which is why our cookie banner is a single acknowledgement rather than an "accept all vs essential only" choice.

Your data rights

Under UK GDPR you can request access, correction, deletion, portability (export), restriction, and objection to certain processing, and withdraw consent. CryptoCGT provides self-service data export and data deletion in your settings; to close your account entirely, email us and we will erase your remaining data.

To exercise any right, email [email protected]. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Refund policy

You can see your full Capital Gains figure for free, before you pay anything — so please review it in the free preview before purchasing. The report is digital content delivered instantly on download. At checkout you give your express consent to immediate access and acknowledge that, once the report is available to download, you lose the 14-day right to cancel under the Consumer Contracts Regulations 2013 — so a purchase cannot be refunded simply because you have changed your mind after taking the report.

This does not affect your statutory rights where the product is faulty. If something has genuinely gone wrong — a billing error, the report failed to generate, or a calculation error we cannot put right — contact [email protected]and we'll fix it or refund via Paddle, our Merchant of Record (who processes all payments and refunds).