Privacy note

Lorg Labs, Ireland, decides how the data below is used. Contact: info@lorglabs.com, also to ask for the name of the person who runs Lorg Labs.

• the address and the chain that were checked, and the size of the trade if you send one;
• our answer, its reasons, when it was given and how long it took;
• who asked: the API key, or the wallet that paid and the payment's transaction;
• the name your software gives for itself (its "user agent").

We do not record what a platform's users are called or which of them a check was for. An address appears in our records only because it was the thing checked, or because it paid.

A payment per check is verified and carried out by Coinbase's payment service. It receives the payment itself (the paying wallet, the amount, our wallet) and screens it against sanctions lists and its own risk signals. The payment is then public on the Base blockchain, like any other.

If you tell us an answer was wrong, we keep what you send: the address, the answer you expected, and your note. Please don't put personal information in the note.

Our own records hold no IP addresses. Two things do use them briefly: a caller without a key is counted by address for one minute, to stop abuse; and the request log kept by our hosting provider, Cloudflare, holds the address each request came from for about a week, so that we can see who attacked us if someone does.

It sets no cookies and runs no analytics. It remembers two things in your own browser and nowhere else: whether you chose the dark theme, and that you have seen the opening screen. The Evidence page reads the service's public figures from our own API.

We look again at tokens we have answered about, an hour, a day and a week later, to measure how often we were right. That reads public blockchain data only. It uses nothing about whoever asked.

• To give you the answer you asked for, and to charge for it: to perform our contract with you.
• To keep the service secure and stop abuse; to measure and improve our accuracy; to publish totals that identify nobody: our legitimate interests.
• To keep accounts and meet legal duties: legal obligation.

• A paying wallet's address: 90 days, then it is replaced by a one-way code that lets us count "the same payer" without knowing which wallet it was. The payment's transaction is deleted at the same time, because it would show the wallet.
• A platform's request records: as its agreement with us says (by default 12 months, then totals only).
• Reports: until settled, then 12 months.
• The hosting provider's request log: about a week.
• Totals that identify nobody: indefinitely.

• Cloudflare hosts the service and its database.
• To check an address we ask blockchain data providers about it (Alchemy, QuickNode, Infura, Blockscout, Etherscan). They learn which address is being looked up, not who asked.
• Coinbase carries out payments (section 3).

We never sell or share records about a wallet or a customer. We publish totals only.

Some of these providers are in the United States. Where data goes there it is under the safeguards European law provides for such transfers.

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to stop using it, and you can object to our use of it. Write to info@lorglabs.com. Because we don't know who is behind a wallet, we may ask you to show the wallet is yours, by signing a message with it. You can also complain to the Data Protection Commission (dataprotection.ie).

Addresses, tokens and payments on a public blockchain can be seen by anyone, and we cannot change or delete what is recorded there.

We post changes here with their date.