Privacy Policy

1. Information we collect

• Account information — the email address you register, an authentication credential (stored only as a secure hash), and your subscription tier.
• Usage information — the blockchain addresses and chains you screen, the queries you run, timestamps, your tier’s usage counters, and basic technical data (IP address, browser/device type) used for security and rate limiting.
• Payment information — handled by our payment processor (Stripe). We do not receive or store full card numbers; we keep a customer/subscription reference and billing status.
• Cookies — a session cookie scoped to verify.blox.global to keep you signed in, plus cookies used for anonymous rate limiting. See Section 4.

Blockchain addresses are public data; we treat the fact that you searched a given address as usage information associated with your account or session.

2. How we use information

• to provide, operate, secure, and improve the Service, including training and evaluating our risk models on aggregate and outcome data;
• to authenticate you, enforce tier limits, and prevent abuse and fraud;
• to process payments and manage subscriptions;
• to communicate with you about your account, security, and service changes;
• to comply with legal obligations and enforce our Terms.

3. Cookies

We use a strictly-necessary session cookie to maintain your authenticated session, and cookies to apply rate limits to anonymous use. We do not use third-party advertising cookies. You can clear cookies in your browser, but doing so will sign you out and may limit the Service.

4. How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf, under appropriate safeguards:

• Stripe — payment processing and subscription billing;
• Amazon Web Services — hosting and infrastructure, and email delivery (Amazon SES);
• Token-security providers (e.g., GoPlus) — for the honeypot / token-security checks, which receive the token contract address being analysed.

We may also disclose information where required by law, to enforce our Terms, or to protect the rights, safety, and security of our users, the public, or Bloxcross.

5. Data retention

We retain account information for as long as your account is active and as needed to provide the Service, and thereafter as required to meet legal, accounting, or security obligations. Screening and usage records are retained to operate the Service, power history features, and improve our models, and are deleted or de-identified when no longer needed for these purposes.

6. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed credentials, scoped session cookies, access controls, and rate limiting. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at privacy@blox.global. You may also delete your account, which removes your account information subject to the retention limits above.

8. International transfers

We operate primarily on infrastructure in the United States and may process information there and in other jurisdictions. Where required, we rely on appropriate transfer mechanisms to protect your information.

9. Children

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect information from children.

10. Changes and contact

We may update this Policy; material changes will be reflected by updating the “Last updated” date above. Questions or requests: privacy@blox.global.