Privacy Policy — Blockchain Explorer

This policy describes how Blockchain Explorer ("we", operated by SynthaSkill LLC) collects, uses, and protects information when you use the Service.

1. What we collect

Public lookups (unauthenticated): no personal data is collected. Hash inputs submitted for verification are not logged or stored.
Account info (authenticated users): name, email, hashed password, profile photo if provided.
Query history (authenticated users): hashes you have verified, stored for your own reference and retrievable from your account.
Usage telemetry: page loads, errors (via Sentry), feature usage. No third-party advertising trackers.
Payment info: handled by Stripe; we receive a Stripe customer/subscription ID, never your card number.

2. Why we collect it

To provide the Service you signed up for.
To maintain your personal verification history (authenticated users only).
To bill you for paid plans.
To diagnose errors and improve the Service.
To respond to your support requests.

3. On-chain data

Record hashes anchored to the Ethereum network by the myAviationTools platform are permanently public by the nature of blockchain technology. Only the cryptographic hash is published — the underlying record content is never written to the blockchain and cannot be recovered from the hash alone.

4. Where data lives

Production data is hosted in the European Union (Hetzner FSN1-DC11, Helsinki, Finland) on encrypted disks. Backups are encrypted with age (X25519) and replicated to a Hetzner Storage Box in the same region. We never sell or rent your data.

5. Sharing

We share data only with:

Stripe (payment processing — PCI-compliant)
Sentry (error tracking — error metadata only)
Better Auth (session management — open source, self-hosted)
Resend (transactional email — opt-in only)
Law enforcement when compelled by valid legal process.

We never sell data to advertisers or data brokers.

6. Your rights (GDPR / CCPA)

Access: Export your data from Settings → Export.
Correction: Edit your account details directly in the app.
Deletion: Settings → Delete account triggers a 30-day grace period, then hard purge. On-chain anchors cannot be deleted by their nature — only the hash (not record content) is on-chain.
Portability: JSON export available on request.
Object / Restrict: Email [email protected].

7. Cookies

We use only essential cookies for authentication (Better Auth session) and an opt-in analytics cookie if you accept it on the banner. See our Cookie Policy for the full list.

8. Children

Blockchain Explorer is not directed at users under 18. We do not knowingly collect data from minors.

9. Security

Passwords are hashed via Better Auth's default algorithm (scrypt at time of writing). Sessions use HttpOnly + Secure + SameSite=Lax cookies. We enable TLS 1.3 on all endpoints with HSTS.

10. Changes

Material changes will be announced via in-app notification and email at least 30 days before they take effect.

11. Contact

Data Protection Officer: [email protected].

1. What we collect

Public lookups (unauthenticated): no personal data is collected. Hash inputs submitted for verification are not logged or stored.

Account info (authenticated users): name, email, hashed password, profile photo if provided.

Query history (authenticated users): hashes you have verified, stored for your own reference and retrievable from your account.

Usage telemetry: page loads, errors (via Sentry), feature usage. No third-party advertising trackers.

Payment info: handled by Stripe; we receive a Stripe customer/subscription ID, never your card number.

5. Sharing

We share data only with:

Stripe (payment processing — PCI-compliant)

Sentry (error tracking — error metadata only)

Better Auth (session management — open source, self-hosted)

Resend (transactional email — opt-in only)

Law enforcement when compelled by valid legal process.

We never sell data to advertisers or data brokers.

6. Your rights (GDPR / CCPA)

Access: Export your data from Settings → Export.

Correction: Edit your account details directly in the app.

Deletion: Settings → Delete account triggers a 30-day grace period, then hard purge. On-chain anchors cannot be deleted by their nature — only the hash (not record content) is on-chain.

Portability: JSON export available on request.

Object / Restrict: Email [email protected].