Privacy Policy
Last updated November 2026. Template — have a lawyer review before launch.
What we collect
- Account data — your email, and billing details handled by Stripe.
- Usage data — API calls and dashboard activity, to run and secure the service.
- Watchlist data — the wallets, contracts and sites you choose to monitor.
- Network observations — on-chain addresses and agent behaviour that interact with our bait. On-chain addresses are public data.
What we do not publish
We treat IP addresses and other personal data as confidential. They are never shown on the public Attack Atlas; where relevant they are shared only privately with the infrastructure provider who can act (an ISP or cloud). Public addresses are described as "observed interacting with bait", never as accusations about a person.
Legal basis & your rights
We process data to provide the service (contract) and to keep it secure (legitimate interest). Under UK/EU GDPR you can request access, correction or deletion of your personal data — contact us.
Cookies & analytics
We use privacy-friendly, cookieless analytics where possible. Authentication uses the minimum cookies required to keep you signed in.
Retention
We keep account data while your account is active and for a reasonable period afterwards, then delete or anonymise it.