X-RayOnchainProof of performance

Privacy policy

Last updated October 26, 2026

1. Who we are

This Privacy Policy explains how TrustBlock Ltd. (“TrustBlock”, “we”, “us”, “our”), which operates X-Ray Onchain at xrayonchain.com (the “Service”), collects, uses and shares personal information. TrustBlock is the controller of the personal information described in this policy. You can contact us at [email protected].

Please read this policy together with our Terms of service and Cookie policy.

2. Information we collect

Information you give us

  • Searches. The wallet addresses, usernames and other queries you enter.
  • Account information. If you create an account (where available): your email address, display name, and the identifiers provided by the sign-in method you choose, such as a third-party login or a wallet address.
  • Saved items. Watchlists, labels and preferences you choose to save to an account.
  • Messages. What you send us when you contact us, and our replies.

Information collected automatically

  • Device and usage data. Your IP address, browser and device type, operating system, language, referring page, the pages and features you use, actions such as clicks and searches, dates and times, and approximate location derived from your IP address (such as country or city).
  • We collect this through server logs and, where permitted, through cookies and similar technologies. See our Cookie policy.

Information that stays on your device

  • Your watchlist, wallet labels, theme and display settings are kept in your browser’s local storage. We do not receive them as a list unless you sync them to an account. When the Service refreshes data for a wallet on your watchlist, that wallet’s address reaches our servers in the same way as any other search.

Public blockchain and market data

  • The Service retrieves and analyses publicly available data about wallets, such as addresses, transactions, balances, positions, trades and public profile names, from public blockchains and third-party data providers. See Public blockchain data below.

You are not legally required to give us any information. If you choose not to, some features may not work.

We do not ask for sensitive information, and we will never ask for your private keys, seed phrases or passwords. Please do not send them to us or to anyone claiming to be us.

3. How we use information

  • To provide the Service: run searches, generate analyses, and show you results.
  • To remember your choices: keep your preferences and, where available, sync your watchlist across devices.
  • To keep the Service secure: detect and prevent abuse, fraud and attacks, and enforce rate limits.
  • To understand and improve the Service: measure traffic and usage, diagnose problems, and develop new features.
  • To communicate with you: answer your questions and send service or account notices.
  • For marketing: send news or offers, only where you have agreed or the law otherwise allows. You can unsubscribe at any time.
  • For advertising and sponsorships: if we introduce them, display and measure ads or sponsored content, using personal information only as described in this policy and with your consent where the law requires.
  • To comply with law and protect rights: meet legal obligations, respond to lawful requests, enforce our Terms, and establish or defend legal claims.
  • For business transfers: as part of a merger, acquisition, financing, reorganisation or sale of assets.

We may also create aggregated or de-identified information that cannot reasonably be used to identify you, such as statistics on which wallets are searched or watched most often, and use or share it for any purpose.

If you are in the European Economic Area, the United Kingdom or another place with similar laws, we rely on the following legal bases:

  • Contract: to provide the Service and the features you ask for, including accounts.
  • Legitimate interests: to secure, analyse, improve and promote the Service, to analyse public blockchain data, and to establish or defend legal claims. We weigh these interests against your rights, and you can object at any time (see Your rights).
  • Consent: for non-essential cookies and similar technologies, and for marketing where the law requires consent. You can withdraw consent at any time. Withdrawing does not affect processing that took place before.
  • Legal obligation: where we must process information to comply with the law.

5. How we share information

We share personal information only as described below:

  • Service providers that process it on our behalf and under contract, such as providers of hosting, infrastructure and content delivery, databases and storage, analytics and measurement, error monitoring, email delivery, sign-in and authentication, and customer support. The analytics providers we currently use, if any, are named in our Cookie policy.
  • Data sources. To analyse a wallet, we send its address to the blockchain nodes and data providers that supply the data. These requests come from our servers, not your device, and do not include your identity.
  • Advertising and sponsorship partners. If we introduce advertising, we may share aggregated or de-identified information, or personal information with your consent where the law requires it.
  • Professional advisers, such as lawyers, accountants, auditors and insurers.
  • Legal and safety. Authorities, courts or others, where we believe disclosure is required by law or necessary to protect rights, safety or property, or to investigate fraud or abuse.
  • Business transfers, to a buyer, investor or successor as part of a merger, acquisition, financing, reorganisation or sale of assets.
  • With your consent or at your direction.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. If that changes, we will update this policy first and give you any choices the law requires.

6. Public blockchain data

Blockchains are public by design: anyone can see the transactions and balances of any address. The Service retrieves this public data, together with public data from trading and prediction-market platforms, analyses it, and may store, display and feature the results, for example as featured or ranked wallets.

We process this data based on our legitimate interest, and the public’s, in analysing public market activity. We do not try to identify the people behind wallets beyond any public names or social-media handles they have attached to their own accounts. We cannot change or delete data recorded on a blockchain or held by a third-party platform.

Analyses are produced automatically by our methodology. They are opinions about trading activity, and we do not use them to make decisions that have legal or similarly significant effects on anyone.

If you believe a wallet shown on the Service is linked to you, you can contact us at [email protected] to object or ask questions. We will consider your request in line with applicable law. Removing our analysis does not remove the underlying data from the blockchain or from other services.

7. International transfers

We and our service providers may process personal information in countries other than the one where you live, including countries whose data protection laws differ from yours. Where the law requires it, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses or other approved transfer mechanisms. Contact us for more information.

8. How long we keep information

We keep personal information only for as long as we need it for the purposes in this policy, and then delete or de-identify it. For example:

  • account information, while your account is open and for a limited period afterwards;
  • server logs and security records, for a limited period, generally no longer than needed to detect and investigate abuse;
  • analytics data, for the retention period set in our analytics configuration;
  • public blockchain data and the analyses we compute from it, including a wallet’s score history, for as long as the Service offers analyses of that wallet or we need it to maintain and improve our methodology; and
  • messages, for as long as needed to handle your request and keep appropriate records.

We may keep information for longer where the law requires it, or where we need it to establish or defend legal claims.

9. Security

We use reasonable technical and organisational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee the security of your information.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you;
  • correct it;
  • delete it;
  • restrict or object to our processing of it, including processing based on legitimate interests and direct marketing;
  • receive it in a portable format;
  • withdraw your consent at any time; and
  • not be treated differently for exercising your rights.

To exercise a right, email [email protected]. We may need to verify your identity before we act, and we will respond within the time the law requires. Where the law allows, you may use an authorised agent.

If you are in the EEA, the UK or Switzerland, you can also complain to your local data protection authority. We would appreciate the chance to address your concern first.

If you live in California or another US state with a consumer privacy law, your rights include knowing what personal information we collect, use and disclose, and opting out of its sale or sharing. We do not sell or share personal information as those laws define these terms, and we do not use sensitive personal information to infer characteristics about you.

Where the law requires it, we treat recognised opt-out preference signals, such as Global Privacy Control, as a valid opt-out request. There is no common standard for “Do Not Track” signals, so the Service does not currently respond to them.

11. Cookies

We use cookies and similar technologies as described in our Cookie policy.

12. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

13. Third-party sites

The Service may link to third-party websites and services. Their privacy practices are governed by their own policies, not this one.

14. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new “Last updated” date. If a change is material, we will take reasonable steps to let you know, for example with a notice on the Service.

15. Contact

TrustBlock Ltd., operator of X-Ray Onchain. Email: [email protected].