Privacy

It stores what you write and nothing else:

• your name, your email, your organization (if you give one), the profile you choose and your message;
• the language of the page you sent it from, so we can write back in that language;
• the campaign or site you came from: what the link says (utm_source, ref, utm_campaign) or the domain of the site that sent you, if your browser reports it.

What for: to answer you and, if it fits, invite you to create an account. The campaign or site tells us how people find us: the internal dashboard counts requests by origin, without showing emails.

What it does not store: the request does not store your IP address and the form uses no cookies.

How long: each request is deleted 90 days after it was made, whatever its status (pending, invited or rejected). If we invite you, your email stays linked to the invitation and to your account, and the account keeps the campaign or site of origin.

• The server log. The server that serves this website logs every request: the page, the date, the browser and the IP address. It is used for the site's security and to count traffic. That log is deleted after 30 days and is never published.
• Visit counting. When it is on, visits are counted with Umami, installed on our own server (not a third-party service): pages viewed, where visitors come from, country and device type, and whether the form was sent. It uses no cookies, does not store the IP address and honors your browser's «Do Not Track» setting.
• Your browser. The website stores only the theme you choose (light or dark) in your browser, to remember it. It stores nothing for measurement.

• The account stores your email, your name, your organization and your role in it. The password is stored only as a hash: nobody can read it.
• The dashboard session uses a cookie, which is needed for you to log in. Each session stores the IP address and browser it was opened from, and the audit log records logins and actions on the account and on cases, with the IP address. They are used for account security.
• The cases and investigations you save stay on the platform for your organization.

• Google Fonts. This website's typefaces load from Google's servers: your browser asks Google for the files, and Google sees your IP address and the page asking for them.
• The dashboard copilot. When you ask it a question, the copilot sends it to a large language model (LLM) provider, currently Z.ai, together with the conversation history, the context of the graph on screen (the origin address, the chain and the selected node) and what its tools read (addresses, transactions and labels).
• The dashboard OSINT summary. To look for mentions of an address on the open web, it sends the address, and its public label if it has one, to external search engines: Serper (Google results), Tavily, Yandex, Yahoo and DuckDuckGo, in that order, until one returns results. The same LLM provider writes the summary of what was found. Labels your organization uploads are never used to search the web.
• Email. When email sending is on, the invitation, the account-approved notice and the password link go out through Resend, an email delivery service, which receives your email address and the message.
• Sign in with Google. If you choose to log in with your Google account, Google identifies you and passes us your email.

An invitation request deletes itself after 90 days, whatever its status: there is no need to ask.

If we invited you or you have an account, to ask for your account to be deleted, or for a copy of what we keep about you, reply to the Blockgence email you received or write to whoever sent you the invitation, from your account's email.

If what is collected, or what for, changes, this page and its date are updated. The terms of use say what Blockgence does and does not do.