Last updated: pending legal review.
[PLACEHOLDER: operator legal name, address, contact email, and — if required — a Data Protection Officer contact].
Wallet addresses you submit; on-chain transaction data fetched for those addresses; computed tax and portfolio results derived from that data; your saved allocation strategy preference; and account/authentication data managed by our sign-in provider (Clerk). [PLACEHOLDER: confirm final list once hosting/provider decisions are locked in — see docs/DECISIONS.md].
Processing is necessary to provide the service you requested (Art. 6(1)(b) GDPR — contract performance). [PLACEHOLDER: confirm no additional legal bases are needed, e.g. legitimate interest for abuse prevention/rate limiting].
[PLACEHOLDER: hosting location and encryption-at-rest arrangements are tracked as a deferred decision pending the real launch infrastructure — see docs/DECISIONS.md. Data is retained until you delete your account or request deletion.]
Sign-in and session management (Clerk); on-chain data providers (e.g. Etherscan/Arbiscan, Alchemy, Zerion) queried on your behalf; error monitoring (Sentry), if configured. [PLACEHOLDER: finalize the processor list and confirm data processing agreements are in place before launch].
You have the right to access, correct, export, and delete your data. You can download a copy of everything we store for your account (GDPR Art. 15) and permanently delete it (GDPR Art. 17) at any time from the Account page. [PLACEHOLDER: add contact route for rights requests outside the self-service tools, and confirm any statutory response-time obligations].
[PLACEHOLDER] The sign-in provider sets session cookies necessary for authentication. No advertising or analytics cookies are set by this application today. [PLACEHOLDER: revisit if analytics are added].
[PLACEHOLDER] How and when updates take effect, and how users are notified.