Privacy Policy

Plastron ("we", "us") operates a read-only, non-custodial wallet screening service. This Privacy Policy explains what data we collect, why, and how you can delete it.

1. What We Collect

• Addresses you check — sent to our servers and to the blockchain data providers needed to run the check (and a price provider for token values). They never go to analytics or advertisers. We never link the addresses you check to you (except the short reopen entry for a full report, below), and we don't keep a history of them. Your recent checks stay in your browser.
• Your account, only if you sign in — the email you verify and the wallets you verify by signature. A wallet you verify is how your account is identified.
• Usage counts — how many full reports your account has run this month, so we can apply the free limit. We also keep a short-lived count per IP address to stop abuse.
• Server logs — standard request logs (IP address, browser type) for security and abuse limits. When you check an address, it is sent in the request body, not in the page link.

Email list. If you joined our earlier Pro waitlist, your email is on Plastron's email list. Invites and credits never add you to it. If you ask for occasional product news when you turn on alerts, your email is added to that list too. Every email we send has a one-click unsubscribe link (/unsubscribe).

Credits and invites. If you have an account we keep your credit balance and what each credit was for, your invite code, and how many friends joined with it this month. Your credit history keeps only the reason for each change. Separately, the address you opened a full report for is kept so you can reopen it for 24 hours, and deleted soon after. Deleting your account deletes all of it.

Alerts. If you turn on email alerts for one of your own wallets, we store which of your wallets have alerts on and the result of the last check for each one. We check those wallets every day against the sanctions and freeze lists and the risk-label lists we track, email you when the result changes, and send a short monthly summary. Turning alerts on is a separate choice from other emails; each alert email has its own one-click unsubscribe. You can also turn alerts off for any wallet on your account page. Deleting your account deletes all of it.

What is kept after you delete your account. So the same email or wallet can't claim a start credit or an invite credit twice, we keep a one-way fingerprint of your email (not the email itself) and the public address of any wallet you linked. Nothing else is attached to them, and they are kept after you delete your account.

2. Why We Use It

• To run the check you asked for.
• To keep the full report free and keep bots out.
• To show the wallets you verified on your scan page.
• To email you only what you ask for.

3. Who Processes It

• Privy — sign-in with email, Google or a wallet.
• Resend — delivers the emails you asked for, and holds Plastron's email list.
• Upstash — our database and short-lived cache of scan results, which is not linked to a person.
• Blockchain data providers — public on-chain data and sanctions lists for the check.
• Umami and Vercel Analytics — page analytics, with any wallet address removed before anything is sent.
• Vercel — hosting.

These services have their own privacy policies.

4. Deleting Your Data

Open your account page (/account) and choose Delete my account. We remove your account record, your email, your wallet links, your alert settings and check results, and your usage counts, take you off our email list, and delete your sign-in account at Privy. Signing out alone does not delete anything. Until you delete your account, we keep what is described above. If you gave us an email without an account (the earlier Pro waitlist), email info@plastron.wtf and we will delete it.

5. What We Never Do

• We do not sell or rent your data.
• We do not share it for advertising.
• We never move your funds. Connecting a wallet is a signature, not a transaction.

6. Cookies and Browser Storage

We set one cookie of our own, pl_session (httpOnly), to keep you signed in. Our sign-in provider (Privy) stores its own session data in your browser. Your browser's sessionStorage and localStorage hold your recent checks, results for the current tab, sign-in state and a returning-visitor flag. We do not use tracking cookies.

7. Changes to This Policy

We may update this policy from time to time. Material changes will be noted with an updated effective date at the top of this page.

8. Contact

Questions? Email us at info@plastron.wtf.

← Back to home