Kraken is a cryptocurrency exchange operated by Payward, Inc., a privately held Delaware corporation headquartered in San Francisco (no ticker, SEC filings limited to Form D exempt-offering notices and Schedule 13G investor-ownership statements, not a 10-K). Its privacy notice discloses broad identity-verification and AML/KYC data collection (financial, tax, and PEP status) alongside device-level signals (MAC address, SIM info, marketing identifier, full clickstream) and routine sharing with categories of third parties including marketing, analytics, and identity-verification vendors; the Kraken iOS app's App Store label separately confirms Usage Data is used to track users across other companies' apps and sites and flags a Third-Party Advertising purpose. Kraken publishes an annual Transparency Report with concrete law-enforcement/regulatory request counts and states it narrows or challenges overbroad requests, an affirmative track-record artifact uncommon among peers. In 2022, Kraken (Payward, Inc.) settled with the U.S. Treasury's OFAC for $362,158.70 over apparent violations of Iran sanctions; this is a sanctions/regulatory matter, not a data-privacy enforcement action, and is noted here only as part of the entity's public regulatory record.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
6 ON FILE
COLLECTION
Kraken's Privacy Notice states that for identity verification, compliance, and anti-money-laundering/sanctions purposes it processes categories including financial and tax information, trading information, PEP (politically exposed person) information where relevant, and verification information.
SEC EDGAR's company record for Payward, Inc. (which operates Kraken) shows CIK #0001785695, a Delaware state of incorporation, a San Francisco, CA business address, SIC classification 6199 (Finance Services), and filings limited to Form D exempt-securities-offering notices and Schedule 13G beneficial-ownership statements rather than periodic public-company reports.
Kraken's Privacy Notice states it may disclose personal data to third parties providing administrative, legal, tax, compliance, insurance, IT, debt-recovery, marketing, analytics, credit reference, identity verification, payment card issuance and processing, and money remittance and payment services.
Kraken's 2025 Transparency Report states it received 7,957 law-enforcement and regulatory data requests globally in 2025, provided data in response to only 51.3% of them, and that where requests are overly broad or legally insufficient Kraken narrows or challenges them to keep disclosures proportionate.
The Kraken iOS App Store privacy label (self-reported by Kraken) discloses that Usage Data is used to track the user across apps and websites owned by other companies, and separately lists a Third-Party Advertising purpose covering Advertising Data, Analytics, Location, Search History, and identifiers linked to the user's identity.
Kraken's Privacy Notice discloses that its logs automatically collect device-level information including device identifier, device operating system and model, device storage, MAC address and SIM information, behavioral/device-interaction signals, and a marketing identifier, alongside full URL clickstream data.