1. What we collect

• Public lookups (unauthenticated): no personal data is collected. Hash inputs submitted for verification are not logged or stored.
• Account info (authenticated users): name, email, hashed password, profile photo if provided.
• Query history (authenticated users): hashes you have verified, stored for your own reference and retrievable from your account.
• Usage telemetry: page loads, errors (via Sentry, not currently enabled), feature usage. No third-party advertising trackers.
• Payment info: handled by Stripe; we receive a Stripe customer/subscription ID, never your card number.

2. Why we collect it

• To provide the Service you signed up for.
• To maintain your personal verification history (authenticated users only).
• To bill you for paid plans.
• To diagnose errors and improve the Service.
• To respond to your support requests.

3. On-chain data

Record hashes anchored to the Sepolia Ethereum test network by the myAviationTools platform are public and we cannot remove them once anchored. Test networks are not run to production standards and may be reset. Only the cryptographic hash is published — the underlying record content is never written to the blockchain and cannot be recovered from the hash alone.

4. Where data lives

Our application servers and primary database are hosted in the European Union on a server operated by netcup GmbH, and our websites are served through Cloudflare. Transactional email is sent through our own mail relay on that server. Files uploaded to myAviationTools services are stored with Cloudflare R2, and we use Cloudflare for content delivery, so some data may be processed outside the EU. Backups are encrypted with age (X25519) and kept on the production server. An offsite backup copy is not yet in place. We never sell or rent your data.

5. Sharing

We share data only with:

• Stripe (payment processing)
• Sentry (error tracking, not currently enabled; if enabled, only after you accept cookies)
• Better Auth (session management — open source, self-hosted)
• Cloudflare (content delivery and R2 file storage)
• Law enforcement when compelled by valid legal process.

We never sell data to advertisers or data brokers.

6. Your rights

• Access: email [email protected] to request a copy of your data.
• Correction: Edit your account details directly in the app.
• Deletion: Settings → Delete account. When you delete your account, your name and email are replaced with dummy values and you are signed out everywhere. We still keep your original name and email, and your files, so the account can be restored. We do not automatically erase them on a schedule. To have them erased, email [email protected]. Some records are kept where the law requires. Hashes already written on-chain cannot be removed. On-chain anchors cannot be deleted by their nature — only the hash (not record content) is on-chain.
• Get your data: Ask us for your data by email. There is no PDF or JSON export in the app yet.
• Ask us to stop: If you want us to stop using or limit how we use your data, email [email protected].

7. Cookies

We use only essential cookies for authentication (Better Auth session). Optional error tracking (Sentry) is not currently enabled; if we turn it on, it will load only after you accept it on the banner. See our Cookie Policy for the full list.

8. Children

Blockchain Explorer is not directed at users under 18. We do not knowingly collect data from minors.

9. Security

Passwords are hashed via Better Auth's default algorithm (scrypt at time of writing). Sessions use HttpOnly + Secure + SameSite=Lax cookies. We enable TLS 1.3 on all endpoints with HSTS.

10. Changes

Material changes will be announced via in-app notification and email at least 30 days before they take effect.

11. Governing law

This Privacy Policy is governed by the laws of the State of Texas, without regard to its conflict-of-laws provisions. Any dispute will be resolved exclusively in the state or federal courts located in Texas.

12. Contact

Privacy contact: [email protected]. We reply by email, usually within a few days.