Privacy

Account information

Google sign-in provides a Google account identifier and email address. An Ethereum wallet provides a wallet identity, not an email address. A wallet-entered email is never collected during connection or inside the EIP-4361 authentication message, and it is not automatically made into a login method or linked to another account.

Product updates

Updates are optional and separate from authentication. After a successful live scan, a wallet user may choose “Email me updates” and enter an address for occasional beta and product updates. That explicit request records the authenticated wallet user ID, email address, wallet-auth source, consent timestamp, consent-copy version, subscription state, and update timestamp.

Wallet-entered addresses remain pending until a confirmation link is used. Confirmation links and unsubscribe links are cryptographically random, single-use, expiry- or account-scoped security links; token hashes, not raw confirmation tokens, are stored. If email delivery is not configured, the address is not claimed to be confirmed or subscribed. “Not now” records prompt dismissal separately from consent, does not subscribe you to email updates, and does not reduce product access. Consent can be withdrawn through the unsubscribe link in an update email, with a withdrawal timestamp retained.

Subscription records are retained while needed to operate the update list and honor preferences. An unsubscribe record remains as a suppression and consent-audit record; prior consent evidence is retained. Deleting the authenticated account removes its subscription row through the account foreign-key cascade. Scan inputs and reports remain request-only and are not saved as account history.

Wallet addresses

A submitted address is used to run the requested analysis. Submitting an address does not prove that you own it.