1. Information We Collect

When you use CryptoLens, we may collect the following information:

Account information: email address and authentication data when you create an account
Wallet addresses: public blockchain addresses you submit for scanning (these are already public on-chain)
Subscription data: payment and subscription status managed securely through Stripe
Usage data: basic analytics about how you interact with the Service

2. How We Use Your Information

We use your information to:

Provide and improve the Service
Process subscription payments via Stripe
Send important account notifications
Respond to support enquiries

3. Data Storage and Security

Account data is stored securely using Supabase with industry-standard encryption. Payment information is processed and stored by Stripe — we never see or store your full card details. Wallet addresses you scan are public blockchain data and are not stored permanently on our servers.

4. Third-Party Services

We use the following third-party services to operate CryptoLens:

Supabase: authentication and database
Stripe: payment processing
Vercel: hosting and deployment
CoinGecko & DexScreener: market data and token prices
Etherscan, BscScan, Solana RPC: blockchain data

Each of these services has their own privacy policy governing how they handle data.

5. Cookies & analytics

We use essential cookies for authentication and session management — these are always on, because the site cannot function without them.

With your consent (gathered via the cookie banner on your first visit) we also use PostHog, a privacy-friendly product analytics tool hosted in the EU, to understand how people use the product and where it breaks. PostHog sets first-party cookies and respects the browser's Do Not Track signal. You can decline analytics and still use every feature.

We do not use advertising cookies, sell data to third parties, or build cross-site tracking profiles. We also do not run ads on CryptoLens.

Alongside PostHog, Vercel Analytics and Speed Insights collect aggregated, cookieless performance metrics (page load times, error rates) as a normal part of hosting.

6. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to processing of your data
Data portability

To exercise any of these rights, contact us at support@cryptolens.uk.

7. Data Retention

We retain account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised usage data may be retained for analytics.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any significant changes via email.

9. Contact

For privacy-related enquiries, please contact us at support@cryptolens.uk.