Privacy Policy

Effective 27 July 2026

Data controller: Hongkong Hongzhao Technology Limited (香港弘昭科技有限公司), Rm 03, 24/F, Ho King Commercial Centre, 2–16 Fa Yuen Street, Mong Kok, Hong Kong. Business Registration No. 77605835-000. Contact: privacy@onchainwho.com.

1. If you are searching

onchainwho has no accounts and no login. We do not ask you for anything to run a search. We log the address you searched and a timestamp, in order to run the service, prevent abuse and understand which addresses are in demand. We do not log who searched.

If you buy a report, our payment processor (Stripe) collects your email and payment details in order to take payment. We receive your email and the address you want researched. We never see your card details.

2. If you were searched for

We show information that is already published on public registries. We process it on the basis of legitimate interest in operating a transparency and due-diligence tool over public blockchain data.

Specifically, we read:

• ENS text records — set by the address owner themselves
• Snapshot governance votes — public onchain activity

We do not collect or process: biometric or facial data, private messages, phone numbers, home addresses, government identifiers, data from brokers, or leaked datasets. We do not attempt to de-anonymise an address through transaction-pattern analysis.

3. Your rights

Wherever you live, you can ask us to: tell you what we hold about an address, correct it, delete it, or stop processing it. Email privacy@onchainwho.com and we will respond within 30 days, free of charge.

You do not need to prove ownership of an address to request its removal from our index. If you are in the EEA or UK you also have the right to complain to your data protection authority.

4. Retention

• Search logs: 90 days, then deleted
• Cached lookup results: 30 days, refreshed on demand, deleted on request
• Paid report records: kept as long as required for tax and accounting

5. Sharing

We do not sell or share search data. We use Stripe for payments and Cloudflare and Vercel for hosting and delivery; they process data on our instructions in order to run the service.

6. Changes

We will update the effective date above when this policy changes, and we will not start processing a materially different kind of data without saying so here first.