Privacy Policy

1. What we collect. 1.1. Account data: the same account data used on coins.black (email, account identifiers) - the Service shares its user accounts with coins.black rather than maintaining a separate registration. 1.2. Check data: the blockchain address, transaction hash and network/token you submit for a check, the check result returned by our AML risk-scoring provider (risk level, risk score, detected risks, exposure data), and the time the check was created. 1.3. Balance data: a record of top-ups and spends against your balance, including the cryptocurrency, network and amount used for each top-up, and the internal USD-equivalent credited. 1.4. Technical data: standard web server logs (IP address, user agent, request timestamps) for security and abuse-prevention purposes.

2. Why we share data with our AML risk-scoring provider. To perform a check, the submitted address or transaction hash (and the selected network/token) is sent to our third-party AML risk-scoring provider ("the Provider"), strictly to obtain the risk assessment. The Provider acts as an independent data processor for this purpose. We do not send your account/contact details (name, email) to the Provider - only the on-chain data needed to run the check.

3. Why we share data with the payment provider. To create a top-up deposit address and confirm payment, we exchange data with our crypto payment provider: the amount requested, the chosen currency/network, and afterwards the transaction details it reports back (amount received, transaction hash). We do not share your submitted check addresses/transactions with the payment provider - top-up and check data are handled separately.

4. Retention. 4.1. Check records (including the submitted address/transaction and the result) are retained indefinitely as part of your account history, so that your check history and any public result links you have created remain available and consistent over time. 4.2. Balance/ledger records are retained indefinitely for accounting purposes. 4.3. You may request deletion of your account and associated data by contacting info@coins.black; note that on-chain data (the address/transaction itself) is inherently public and cannot be "deleted" from the blockchain - deletion applies to our own stored records only, and any already-shared public result links may have been cached or viewed by others before deletion.

5. Public result links. If you generate a public link or PDF for a check result, its contents (the checked address/transaction and the AML risk data) become accessible to anyone who has that link, independent of your account. Treat a result link like any other sensitive document - only share it with parties who should see it.

6. Cookies. The Service uses the same authentication cookies as coins.black to keep you signed in, plus, where applicable, basic technical cookies required for the Service to function (e.g. security/nonce tokens, and your language/theme preference). We do not use third-party advertising or tracking cookies on this Service.

7. Your rights. You may request a copy of the data we hold about you, or its correction or deletion (subject to the on-chain-data caveat in section 4.3), by writing to info@coins.black.

8. Changes. We may update this Privacy Policy from time to time; material changes will be reflected on this page with an updated date.