Silverblock Privacy Policy

This Privacy Policy explains how Silverblock Finance ("Silverblock", "we", "us") collects, uses, shares and protects information about you when you use the Silverblock service (the "Service"). It forms part of, and uses the same definitions as, our Terms of Service.

Silverblock is a read-only portfolio tracker. You give us public blockchain addresses to watch; we never hold your private keys, never ask you to sign anything, and cannot move your funds.

Account information. When you sign up we collect your email address and, if you choose to provide them, your name and a profile picture. If you sign in with Google, Google shares your email address, name and profile picture with us.

Tracked wallet addresses. The public blockchain addresses you add to your account. Because they are linked to your account, we treat them as personal data even though the addresses themselves are public.

Portfolio data. Positions, token balances, transactions and related on-chain records that we retrieve for your tracked addresses from public blockchains through our data providers, together with the analysis we derive from them (for example estimated returns and risk notes).

Questions and answers. The questions you ask the in-app assistant and the answers it generates.

Settings and preferences. Your language, theme, transaction filters and other settings. Your currently selected wallet is stored only in your browser.

Usage and device information. Pages viewed, actions taken, browser type, operating system, approximate location derived from your IP address, and error reports produced when something goes wrong.

Billing information. If you subscribe to a paid plan, our payment provider collects your payment details. We receive only a confirmation of the transaction, the plan you chose and the last four digits of your card. We never store full card numbers.

Communications. Feedback you submit through the Service and any messages you send us.

We use the information described above to: (a) create and secure your account and let you sign in; (b) retrieve and display portfolio data for the addresses you track; (c) generate analysis, daily summaries and answers to your questions; (d) send you service emails such as sign-in links, security notices and, where enabled, morning summaries; (e) process payments and manage subscriptions; (f) understand how the Service is used so we can improve it; (g) detect, investigate and prevent abuse, fraud and security incidents; and (h) comply with legal obligations.

We do not sell your personal data and we do not use it for third-party advertising.

We rely on a small number of providers who process data on our behalf and only on our instructions:

Supabase — authentication, database hosting and delivery of sign-in emails.

Vercel — application hosting and delivery.

DeBank — on-chain portfolio data. Your tracked wallet addresses are sent to DeBank to retrieve positions and transactions.

CoinGecko — historical token prices. Only token identifiers and dates are sent; no wallet addresses.

Google — Gemini models generate the assistant's answers and classify transactions (they receive the names of protocols and positions, transaction descriptions and your questions, never your private keys); Google Sign-In; and Google Workspace for delivering email.

PostHog — product analytics (see section 5).

Sentry — error monitoring. Error reports are stored in Sentry's EU data region.

Stripe — payment processing, when paid plans are available.

Resend — transactional email.

Each provider is bound by contractual terms that restrict its use of your data to providing its service to us.

We use strictly necessary cookies to keep you signed in, remember your language and remember interface preferences such as whether the sidebar is open. These cannot be switched off without breaking the Service.

We use PostHog analytics cookies to understand how the Service is used. Analytics profiles are only created for signed-in users. You can block analytics cookies in your browser; the Service will continue to work.

Your browser's local storage holds your currently selected wallet so the Service opens where you left it. This value never leaves your device.

We do not use advertising or cross-site tracking cookies.

Where the DIFC Data Protection Law 2020, the EU or UK General Data Protection Regulation or a similar law applies, we process your personal data on the following bases: performance of our contract with you (providing the Service, billing); our legitimate interests in operating, securing and improving the Service; your consent, where we ask for it (for example analytics cookies), which you may withdraw at any time; and compliance with legal obligations.

We share personal data only with the service providers listed in section 4; with professional advisers; with authorities where required by law or to protect the rights, property or safety of Silverblock, our users or others; and with a successor in the event of a merger, acquisition or sale of assets, in which case this Policy continues to apply to your data.

Silverblock operates from the Dubai International Financial Centre and our providers process data in the European Union and the United States. Where personal data is transferred outside the jurisdiction in which it was collected, we rely on safeguards recognised by applicable law, such as adequacy decisions and standard contractual clauses.

We keep your account information, tracked addresses and portfolio data for as long as your account is active. When you delete your account from Settings, we delete your account, your tracked addresses and the portfolio data associated with them; copies held in backups are removed in the ordinary course of backup rotation.

We may retain limited records where required by law, to resolve disputes or to enforce our agreements. Analytics data and error reports are retained for the periods configured with the respective provider and then deleted.

Public blockchain data is outside our control: deleting your account removes our copy but not the underlying on-chain records.

We protect your data with encryption in transit, per-user access controls enforced in the database, and least-privilege access for our systems and staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your sign-in email account secure, because anyone who can read it can sign in as you.

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format, and to withdraw consent where processing is based on consent.

You can update your profile and delete your account from Settings. For any other request, contact us using the details in section 15. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with a supervisory authority, including the DIFC Commissioner of Data Protection or, for residents of the European Economic Area, the data protection authority in your country.

The Service is not directed at anyone under 18 and we do not knowingly collect personal data from them. If you believe a person under 18 has given us personal data, contact us and we will delete it.

The Service links to protocols, block explorers and other third-party sites and displays data that originates from public blockchains and third-party providers. We are not responsible for the privacy practices of those third parties and we do not guarantee the accuracy of the data they supply.

We may update this Policy from time to time. If we make material changes we will notify you by email or through the Service before they take effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Questions or requests about this Policy or your personal data can be sent to legal@silverblock.finance.