Incident #C15C6E · 18 NOV 2025minor
Kraken adds social sign-in (Google/Apple) data disclosures and drops Japan from storage locations
The privacy policy now describes data received from Google or Apple when you sign in with them: name, email or private relay address, a user ID and tokens. It says Kraken does not receive your Google or Apple passwords. Login details such as passwords and social sign-in details are now part of 'Verification information', and Japan is no longer listed as a data storage location.
Taken from you
- Kraken now receives name, email, provider user ID and authentication tokens from Google or Apple when you use social sign-in
- Login credentials and social sign-in details are now explicitly part of 'Verification information'
- Revoking social sign-in does not automatically delete information Kraken already holds about your account
Won back
- Clear statement that Kraken does not receive your Google or Apple passwords
- Explained how to unlink social sign-in and that you may need another sign-in method
- Japan removed from the listed data processing locations
Evidence · 4 of 4 quotes matched in source
When you create or access your Kraken account using your Google Account or Apple Account via social sign-in, Kraken receives limited information from the provider necessary to authenticate you and operate your account+ inserted · ✓ matched in source
Kraken does not receive your Google or Apple passwords.+ inserted · ✓ matched in source
Revoking access does not automatically delete information we already maintain about your Kraken account.+ inserted · ✓ matched in source
Archived version ↗ · 355 words changed