Privacy Policy

Last updated: March 19, 2026

1. What we collect

This Privacy Policy describes the practices of Moneda Media, LLC (“Commodity.com”, “we”, “us”, “our”) concerning information collected through the Commodity.com website (the “Site”).

Information you provide directly

You may provide personal information to us if you choose to:

• Submit a question or feedback through our contact form
• Subscribe to our email newsletter
• Contact us about press inquiries or business matters

Depending on how you contact us, this may include:

• Your name and email address
• The subject and content of your message
• Your newsletter preferences (topics of interest)

Information collected automatically

When you visit the site, we automatically collect:

• Your IP address (used for approximate geolocation – see Section 4)
• Device type, screen size, browser, and operating system
• Pages you visit, how long you spend on them, and how you navigate the site
• The URL of the page that referred you to our site
• Your general geographic location (country and region, derived from your IP address)
• Your language and timezone preferences

2. What we don’t collect

• No user accounts. We don’t have user registration, login, or account creation. You can’t create an account on Commodity.com.
• No passwords. We never ask for or store passwords.
• No payment information. We don’t process payments or store credit card details. If you click through to a broker, any payment relationship is between you and that broker.
• No fingerprinting. We don’t use browser fingerprinting techniques to identify you across sessions.
• No data selling. We don’t sell your personal information to third parties.

3. How we use your information

Purpose	What we use	Legal basis
Respond to your contact form messages	Name, email, message content	Your consent / contractual obligation
Send our newsletter	Email address, name, topic preferences	Your consent (opt-in)
Understand how people use the site	Page views, session duration, device type	Legitimate interest
Show you brokers licensed in your country	IP-derived country (see Section 4)	Legitimate interest / regulatory compliance
Show appropriate risk warnings by jurisdiction	IP-derived country	Legal obligation / regulatory compliance
Measure which affiliate links are clicked	Click events (see Section 6)	Legitimate interest
Protect the site from abuse	IP address, request patterns	Legitimate interest
Comply with legal obligations	As required by law	Legal obligation

4. Location detection and why we use it

When you visit Commodity.com, we use your IP address to determine your approximate location. We currently do this using IP2Location, a GeoIP database stored on our own server. The specific provider may change, but the purpose and scope of location detection will remain as described here.

Why we detect your location

We detect your location for both compliance and commercial reasons:

1. Regulatory compliance. Different countries have different rules about financial products. CFDs (Contracts for Difference) are not available to retail traders in the United States. Certain brokers are not licensed to operate in certain jurisdictions. We use your location to show you only brokers that are legally permitted to serve you.
2. KYC and sanctions compliance. Financial regulations require that broker referrals comply with Know Your Customer (KYC) and international sanctions requirements. We do not refer users in sanctioned jurisdictions to brokers that cannot legally serve them.
3. Appropriate risk warnings. Different jurisdictions require different risk disclosures. For example, users in Spain see a notice that CFD trading is not available there. Users in other countries see loss-percentage warnings specific to the brokers available in their region.
4. Relevant broker recommendations. We show brokers that accept clients in your country, which also means we show brokers with whom we have affiliate relationships in your region. This is both a compliance function and a commercial one.

What we detect

• Your approximate location (country-level, and in some cases region)
• We do not detect your precise street address, GPS coordinates, or exact city
• We currently use IP2Location, a GeoIP database stored on our server. The specific GeoIP provider or method may change over time, but the data collected (approximate location only) and its purposes will remain as described here

5. Third-party services we use

We name our third-party services specifically because vague disclosures are not meaningful disclosures. Each service below receives only the data it needs to function.

Service	What it does	What data it receives	Privacy policy
Matomo	Primary web analytics (self-hosted on our server)	Page views, device info, anonymised IP	Matomo Privacy
Google Analytics 4	Secondary web analytics	Page views, device info, interactions	Google Privacy
Cloudflare	CDN, security, DDoS protection, DNS	IP address, request headers (for security filtering)	Cloudflare Privacy
NitroPack	Page speed optimization and caching	Cached page requests	NitroPack Privacy
IP2Location	GeoIP database for regulatory compliance	Processed locally on our server – no data sent externally	N/A (local database)
TwelveData	Commodity price data API (currencies, crypto, commodities)	No user data – server-to-server calls only	TwelveData Privacy
MetalPriceAPI	Precious metals spot price API (gold, silver, platinum, palladium)	No user data – server-to-server calls only	MetalPriceAPI Privacy
MailChimp (Intuit)	Email newsletter delivery	Email address, name, topic preferences (only if you subscribe)	Intuit/MailChimp Privacy
Contact Form 7 / Flamingo	Contact form handling and message storage	Stored on our server – name, email, message content	N/A (WordPress plugins, data stored locally)
ShortPixel	Image optimization	Server-side image processing only – no user data	ShortPixel Privacy
Affiliate broker partners	Broker referral tracking	Click events when you follow an affiliate link (see Section 6)	See full partner list

6. Affiliate link tracking

Commodity.com earns revenue through affiliate links to regulated brokers. For a full list of our affiliate partners, see our affiliate disclosure.

When you click an affiliate link on our site:

1. Pretty Links (a WordPress plugin on our server) logs the click – which link was clicked, when, and from which page. This data is stored on our own server.
2. You are redirected to the broker’s website, where their own tracking identifies that you came from Commodity.com.
3. If you go on to create an account with the broker, they may pay us a commission. You pay nothing extra.

Affiliate link click tracking does not identify you personally. We see aggregate data (“this link was clicked 47 times today”), not individual user profiles.

7. Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies for the following purposes. For full details, see our Cookie Policy.

Category	Provider	Purpose
Essential	Cloudflare	Security, bot detection, load balancing
Analytics	Matomo (self-hosted)	Anonymous usage statistics
Analytics	Google Analytics 4	Usage statistics and traffic analysis
Performance	NitroPack	Page caching and speed optimization
Functional	Commodity.com (first-party)	Language preference, dismissed notifications

8. How we share information

We do not sell your personal information. We share data only in these circumstances:

• Service providers: Companies that help us operate the site (listed in Section 5) receive only the data they need to perform their function.
• Affiliate brokers: When you click an affiliate link, the destination broker knows you came from our site. Any data you provide to a broker after clicking through is governed by their privacy policy, not ours.
• Legal requirements: We may disclose information if required by law, court order, or government request.
• Business transfers: If Moneda Media, LLC is acquired or merged, your information may be transferred as part of that transaction. We will notify you of any such change.

9. How we protect your information

We use industry-standard security measures to protect the information we collect:

• All connections to Commodity.com use HTTPS encryption (SSL/TLS)
• Cloudflare provides DDoS protection and web application firewall (WAF) services
• Wordfence provides additional WordPress-specific security
• API keys and sensitive configuration are stored server-side and never exposed to browsers
• Contact form submissions are stored on our own server, not in third-party cloud storage

No system is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security. See our terms of use for the full limitation of liability.

10. How long we keep your data

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law. Specifically:

Data type	Retention period
Analytics data (Matomo, GA4)	26 months (Google Analytics default); Matomo retains indefinitely in anonymized form
Contact form messages	Retained until you request deletion or for up to 3 years
Newsletter subscriber data	Until you unsubscribe, then deleted within 30 days
Server logs (IP addresses)	90 days
Affiliate link click data	Retained in aggregate form indefinitely; not linked to identifiable individuals

When we no longer need your personal information, we securely delete or anonymize it. In some cases we may retain data longer to comply with legal obligations, resolve disputes, or enforce our agreements.

You can request deletion of your personal data at any time – see Section 13 (GDPR) or Section 14 (CCPA) for details.

11. International data transfer

Commodity.com is operated by Moneda Media LLC in the United States. If you are accessing the Site from outside the United States, your personal data will be transferred to and stored on servers in the US.

By using the Site, you consent to the transfer and processing of your data in the United States. The US may not provide the same level of data protection as your home country.

If you are in the EEA or UK: We have put in place appropriate safeguards in accordance with applicable legal requirements to provide adequate protections for your personal information transferred outside the EEA/UK. For further details, see the European Commission’s Standard Contractual Clauses.

Commodity.com is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).

12. Linked sites and third-party services

The Site contains links to third-party websites, including broker websites, data providers, and educational resources. We are not responsible for the privacy practices or content of those third-party sites.

When you click a link to a third-party site (including affiliate links to brokers), you leave Commodity.com and become subject to that site’s privacy policy and terms. We encourage you to read the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Your rights under GDPR (EU/EEA/UK)

If you are in the European Union, European Economic Area, or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access – Request a copy of the personal data we hold about you
• Right to rectification – Request correction of inaccurate personal data
• Right to erasure – Request deletion of your personal data (subject to legal obligations)
• Right to restrict processing – Request that we limit how we use your data
• Right to data portability – Request your data in a machine-readable format
• Right to object – Object to processing based on legitimate interests
• Right to withdraw consent – Withdraw consent at any time (e.g., unsubscribe from our newsletter)

How to exercise these rights: Contact us at commodity.com/contact/. Please include your name, email address, and a description of the right you are exercising. We may need to verify your identity before processing your request.

We will respond within 30 days. If your request is complex or we have received a large number of requests, we may extend this by a further 60 days, but will notify you within the initial 30-day period.

There is no fee for exercising your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.

You also have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

14. Your rights under CCPA (California)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you the following rights:

• Right to know – Request what personal information we collect, use, and disclose, including the categories of sources and third parties involved
• Right to delete – Request deletion of your personal information
• Right to opt out of sale – We do not sell personal information, so this right does not apply
• Right to non-discrimination – We will not treat you differently for exercising your privacy rights
• Right to correct – Request correction of inaccurate information
• Right to limit use of sensitive personal information – We do not collect sensitive personal information as defined by CCPA
• Right to a transportable copy – Request a copy of your personal information in a usable electronic format

You may make these requests no more than twice in a twelve-month period, for the twelve months prior to the request date.

How we verify your identity

To protect your privacy, we must verify your identity before processing CCPA requests. Our verification process works as follows:

1. Submit your request via our contact form
2. We will send a verification email to the address you provide
3. You must confirm your identity by following the instructions in that email
4. We will check our systems for the email address you provide and any information associated with it

If we cannot verify your identity, we will be unable to fulfill your request. Some personal information we maintain (e.g., anonymized clickstream data tied only to a browser ID) is not linked to enough identifying information for us to verify ownership – as required by the CCPA, we do not include such information in response to requests.

We will make commercially reasonable efforts to respond to your request. We will not charge a fee unless your request is excessive, repetitive, or unfounded.

Categories of information we collect (CCPA disclosure)

Category	Examples	Collected?	Sources
Identifiers	Name, email, IP address	Yes, if you provide it	Directly from you; your device
Internet activity	Pages visited, browsing history on our site, search queries	Yes (analytics)	Your device; analytics tools
Geolocation	Approximate country from IP address	Yes (regulatory compliance)	Your device (IP address)
Financial information	Bank account, credit card	No	N/A
Biometric information	Fingerprints, facial recognition	No	N/A
Sensitive personal information	Race, religion, health, sexual orientation	No	N/A

We do not knowingly “sell” personal information as defined by the CCPA. There is not yet a consensus as to whether third-party cookies may constitute a “sale” under the CCPA. You can exercise control over browser-based cookies by adjusting your browser settings – see our Cookie Policy for details.

15. Notice to Nevada residents

Under Nevada law, Nevada residents may opt out of the sale of certain “covered information” collected by operators of websites or online services. We currently do not sell covered information as defined by Nevada law, and we do not have plans to sell this information.

If you would like to be notified if we decide in the future to sell personal information covered by the Act, please contact us to provide your name and email address. We may share your data as explained elsewhere in this policy (such as with service providers), and those activities are unaffected by a Nevada do not sell request.

16. Children’s privacy

Our services are intended for adults over the age of 18. We do not knowingly collect information from children under 18. If you believe we have collected information from a child, please contact us and we will delete it promptly.

17. Changes to this policy

We will continue to evaluate this Privacy Policy against new technologies, business practices, and our users’ needs, and may make changes accordingly. If we make any material changes, we will post the updated policy here along with its effective date, and will notify you by means of a notice on our Site.

Your continued use of the Site after changes are posted constitutes acceptance of the updated policy. We encourage you to review this page periodically.

18. How to contact us

If you have questions about this Privacy Policy or want to exercise your privacy rights:

• Contact form: commodity.com/contact/
• Company: Moneda Media LLC
• Address: 1013 Centre Road, Suite 403S, Wilmington, DE 19805, USA

See also: Terms of use · Cookie policy · Affiliate disclosure · Legal disclaimers · Editorial policy · Methodology