Privacy Policy

TL;DR

• We analyze public blockchain data — no privacy is created or compromised.
• IP addresses are used for rate limiting only, deleted after 60 seconds.
• We use only essential cookies for authentication. No tracking cookies.
• We never sell your data or use it for AI training.
• Analytics are cookieless and GDPR-compliant (Plausible).
• You can delete your account and all associated data at any time.

What We Collect

Blockchain Data

Transaction hashes, addresses, and on-chain data you look up. This is all public blockchain data. We do not create privacy concerns by processing it.

Account Data (Optional)

If you create an account: email address, OAuth profile info. Stored and processed by Clerk (our authentication provider). We never store passwords.

API Usage

API key identifiers, request counts, endpoints called, response times. Stored in Redis with automatic expiration. Used for rate limiting and billing.

Rate Limiting

IP addresses stored in 60-second sliding windows for rate limiting. Automatically deleted after the window expires. We do not build IP-to-address profiles.

Payments

Processed entirely by Stripe. We store only your Stripe customer ID and subscription status. We never see or store credit card numbers.

Analytics

We use Plausible Analytics, which is cookieless and GDPR-compliant by design. No personal data is collected for analytics. No cookies are set.

Error Tracking

We use Sentry for error monitoring. Error reports may contain request URLs (which include transaction hashes — public data) and browser metadata. No PII is intentionally collected.

What We Do NOT Collect

• We do not track which addresses belong to which users.
• We do not build behavioral profiles.
• We do not sell any data to third parties.
• We do not use your data for training AI models.
• We do not store IP addresses beyond rate-limiting windows.

Cookies

We use only functional/necessary cookies for authentication (Clerk session cookies). No marketing, tracking, or advertising cookies. No cookie consent banner is required as we only use strictly necessary cookies.

Third-Party Processors

Data Retention

• Blockchain data caches: permanent (public, immutable data)
• Account data: until account deletion
• API usage logs: 90 days
• Rate limit data: 60 seconds
• Payment records: as required by applicable tax law

Your Rights (GDPR / CCPA)

You have the right to access, correct, delete, and export your personal data. To exercise these rights, contact us at hello@ethintel.io. We will respond within 30 days.

When you delete your Clerk account, all associated API keys and usage data are automatically cleaned up.

Contact

For privacy-related inquiries: hello@ethintel.io