TrustScope

Privacy policy

What TrustScope learns about you when you scan crypto projects, and what it never asks for.

rev. 8 November 2026

$ privacy --tldr

  • no wallet connection, so no wallet addresses or balances
  • no analytics, ad trackers or data sales
  • an account is an email plus a hashed password
  • one cookie, set only when you sign in

  1. Nothing on-chain

    TrustScope works without a wallet. We never see your addresses, balances or transactions, and nothing you do here is linked to them.

  2. Requests to the site

    • Each request reaches our server with your IP address and browser details. We need them to answer the request and to block attacks, nothing more.
    • The project you search for is sent to the server to look it up; it isn't stored against you.

  3. Account data

    • Your email address and a one-way hash of your password; the password itself is never stored.
    • Per signed-in session: start and last activity time, IP address and browser, so the session keeps working and misuse stands out.

  4. Cookie and local storage

    Only strictly necessary storage, so no consent pop-up:

    • PHPSESSID: your session after sign-in. It lasts 15 days with "keep me signed in", a day without.
    • A short-lived access token in local storage while you are signed in.

  5. Legal basis

    Account data: needed to provide the account you signed up for. Security data: our legitimate interest in keeping the site safe. No selling, no ad targeting, no automated decisions about you.

  6. Data about projects

    Scans are about projects and their domains. If a registration record names an individual, we keep only the country and whether a privacy service is used.

  7. Providers

    Hosting and DDoS protection providers process traffic for us, only to deliver that service.

  8. Retention

    • Sessions end on sign-out or expiry.
    • Accounts stay until you ask for deletion.
    • Server logs are kept only as long as operations and security need them.

  9. Your rights

    Personal data is handled under the UK GDPR and the Data Protection Act 2018. Email [email protected] to access, correct, delete or export your data, or to restrict or object to its use. Complaints can go to the Information Commissioner's Office or your local data protection authority.

  10. Changes

    This policy is updated whenever our data use changes; check the revision date above.