Privacy Policy

1. Introduction

OrcaLayer ("we", "our", "us") operates the website orcalayer.com (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

2. Information We Collect

Account Information: When you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive or store your Google password.

Wallet Addresses: Wallet addresses you search for are publicly available on the blockchain. We do not link wallet addresses to your identity unless you explicitly save them to your account.

Usage Data: We may collect anonymous usage statistics (pages visited, features used) to improve the Service. We do not use cookies for tracking.

We never ask for or store private keys, seed phrases, or wallet passwords.

3. How We Use Your Information

• To provide and maintain the Service
• To manage your account and subscription
• To send alerts and notifications you have opted into
• To improve the Service based on anonymous usage patterns

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only:

• With service providers necessary to operate the Service (hosting, authentication)
• If required by law or to protect our rights

5. Data Security

We use industry-standard security measures including SSL/TLS encryption, secure authentication via OAuth 2.0, and access controls. However, no method of transmission over the Internet is 100% secure.

6. Third-Party Services

We use Google OAuth for authentication. When you sign in with Google, Google's Privacy Policy applies to the information they collect. We only receive the information described in Section 2.

7. Your Rights

You can:

• Request deletion of your account and associated data
• Opt out of notifications at any time
• Access and export your data

To exercise these rights, contact us at [email protected].

8. Children's Privacy

Our Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from children.

9. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on legitimate interest (providing the Service) and your consent (account creation)
• Right of access: You can request a copy of all data we hold about you
• Right to rectification: You can request correction of inaccurate data
• Right to erasure: You can request deletion of your account and all associated data
• Right to data portability: You can request your data in a machine-readable format
• Right to object: You can object to processing of your data
• Right to withdraw consent: You can withdraw consent at any time by deleting your account

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. Sub-Processors & Data Retention

We use the following third-party services to operate OrcaLayer:

• Hetzner Online GmbH (Germany) — server hosting and data storage
• Cloudflare, Inc. (USA) — CDN, DDoS protection, SSL
• Google (USA) — OAuth authentication only

Data retention: Account data is retained for the duration of your account. Upon deletion, all personal data is removed within 30 days. Anonymous blockchain analytics data (publicly available) is retained indefinitely.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

[email protected]