Privacy policy

1. Who we are and what this policy covers

This policy is issued by Eagle Virtual LLC ("Eagle Virtual", "we", "us"), which provides eaglevirtual.com, the Stablecoin Freeze & Seize Tracker, its account features, its programmatic interfaces (the API and the MCP server), and the pages that describe them (together, the "Service"). It applies to everyone who uses the Service, with or without an account.

It covers two different kinds of information, and keeps them apart throughout: information about you as a user of the Service, and the public on-chain record the Service publishes, which is drawn from public blockchains and may contain wallet addresses. Section 7 deals with the second. The terms of use at /terms apply alongside this policy.

2. Information we collect

We collect the minimum the Service needs to work, and we collect different things depending on how you use it.

When you use the Service without an account. You can use the entire Service without signing in. In that case we do not set a cookie, do not issue you an identifier, and do not keep a record of you or of the wallets you look up. We do keep aggregate operating counts — for example how many checks ran on a day and which chains they concerned. Those counts are totals with no visitor dimension; they cannot be traced back to a person because there is nowhere in them to record one. Preferences you set, such as a light or dark theme, are kept in your own browser and are not sent to us.

When you create an account. If you sign in, we collect and keep the information needed to run your account, including: account information, such as your email address and a display name, and a link to a profile picture if your sign-in provider supplies one; sign-in information, such as which provider you used (Google, Microsoft, or a one-time email code) and the identifier that provider uses for you; the content you choose to keep in the account, such as the wallet addresses you save and any alerts or keys you set up; and security information about your sessions, including the network address, approximate location (country), and type of browser from which a session was started or ended. Session tokens are stored in hashed form, never in the clear.

When you pay for a plan. Payment is taken by our payment processor on its own pages. We keep billing records, such as your plan, your customer and subscription references with the processor, and the billing events the processor sends us. We never see or store your full card number.

When you contact us. If you write to us, we keep the correspondence and the information you choose to include, so that we can respond and keep a record of what was asked and answered.

The weekly quiz. The quiz records only anonymous totals per question and per score. It does not record who answered.

Information our infrastructure providers collect. The providers that deliver and protect the Service keep short-lived technical logs of requests, as any web host does, to operate the platform and defend it against abuse. We do not use those logs to build a record of any visitor.

3. How we use information

We use the information described above for the following purposes: to provide the Service and its account features, including saving your addresses and delivering anything you asked the Service to deliver; to keep the Service and your account secure, including detecting and preventing abuse, unauthorized access and fraud; to understand how the Service is used and to improve it — for example, which chains and features people use, where errors occur, and how the product performs; to communicate with you about your account, your plan, and material changes to the Service or to this policy; to bill for paid plans; and to comply with legal obligations and to establish, exercise or defend legal claims.

Improvement work is done on aggregate and account-level information. We do not build advertising profiles, and we do not attach any score, rating, or characterization to a person or to a wallet address.

4. What we do not do

We do not sell personal information, and we have not done so. We do not share personal information with third parties for their own marketing. We do not run third-party advertising or advertising trackers on the Service. We do not combine what we hold about you with data bought from others.

5. Cookies and similar technologies

Signed out, the Service sets no cookie. Signed in, the Service sets one cookie, which carries your session; it is marked HttpOnly and Secure, is limited to this site, and expires when the session does or when you sign out. The Service does not use cookies for advertising or cross-site tracking.

The Service may keep preferences and in-progress state in your browser’s local storage. That storage stays on your device and is not transmitted to us. Our infrastructure provider may set technical cookies that are needed to protect the site against automated abuse; those cookies do not identify you to us.

6. When we share information

We share personal information only as follows. With service providers that process it on our behalf and under our instructions — for example, the provider that hosts and protects the Service, the providers you sign in through, and our payment processor. The current list, with each provider’s role, is published at /subprocessors. With recipients you direct us to, such as an email address or endpoint you configure to receive alerts. When required by law, regulation, legal process or an enforceable governmental request, or where disclosure is necessary to protect the rights, property or safety of Eagle Virtual, our users, or the public. In connection with a merger, acquisition, financing, or sale of all or part of our business, in which case this policy continues to apply to the information transferred.

Aggregate statistics that do not identify anyone — for example, counts of restriction events by month, coin or chain — are part of what the Service publishes and may be shared freely.

7. Wallet addresses in the public record

The Service publishes a record of restriction events — freezes, seizures, blacklist additions and removals — that companies have written to public blockchains. Those events identify wallet addresses. We obtain the addresses from the blockchain itself, not from the people they may relate to, and we publish them because they are the record and are already public on a public ledger. What we publish, and the limits we place on it, are described at /data-we-publish.

Where a wallet address can be tied to a person, publishing it is processing of personal data. We rely on our legitimate interests, and those of the public, in making an accurate, dated record of these events available: letting anyone check whether a named company has restricted a wallet before funds move, and preserving a transparent account of actions that were taken on public infrastructure. We publish the minimum that identifies an event — the address, the action, the company, the transaction, the date, and the amount as the chain recorded it — and nothing that characterizes the person behind the address. Events drop off every listing surface after six months and remain reachable only by direct lookup; the full list of addresses is not published as a download.

If information about you appears in the record and you believe it is wrong or misattributed, write to legal@eaglevirtual.com or follow the corrections policy at /corrections. We can correct our record of what a public source published; we cannot alter what the source published, because the transaction is on the chain whether or not we record it. Objections and erasure requests concerning the public record are considered individually and answered in writing.

8. How long we keep information

We keep personal information for as long as it is reasonably necessary for the purposes set out in section 3, and then delete or anonymize it. In general: information held without an account is not personal information and is not retained as such; aggregate operating counts are kept indefinitely because they identify no one. Account information and the content you keep in your account are retained for as long as your account is open. Security records about your sessions, including network addresses, are kept for the life of the account and are removed when the account is erased. Billing records are kept for as long as tax, accounting and payment-dispute rules require. Correspondence is kept for as long as needed to handle the matter and to keep a record of it.

We may keep information longer where the law requires it or where it is needed to resolve a dispute or enforce our agreements.

9. Your choices and your rights

You can use the Service without an account, and you can sign out at any time, which ends the session and its cookie. You can see and remove the addresses you have saved from within your account.

You can ask us to access, correct, or delete the personal information we hold about you, to restrict or object to how we use it, or to receive a copy of the information you provided in a portable form, by writing to legal@eaglevirtual.com. We will verify that the request comes from the account holder before acting on it, and we respond within the time the applicable law allows.

If you ask us to erase your account, we remove the information that identifies you — including your email address, your saved content, your sign-in identities, and the session records with their network addresses — and retain only an anonymized internal reference and the non-identifying audit entries that show what actions were taken. Erasing an account does not alter the public on-chain record, which is not account data; section 7 explains how to raise a concern about that record.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, these rights are provided under that law, and you also have the right to lodge a complaint with your data-protection authority. If we have appointed a representative in the European Union or the United Kingdom, their details are listed in section 14. Where we rely on legitimate interests, you may object, and we will stop unless we can show compelling legitimate grounds that override your interests or the processing is needed to establish, exercise or defend legal claims.

10. Security

We protect information with measures appropriate to its sensitivity and to the small amount of it the Service holds: encryption in transit on every public endpoint, hashed rather than stored session tokens, access limited to the people and systems that need it, and a design that collects nothing it does not use. The measures in place and how to report a vulnerability are described at /security. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, write to legal@eaglevirtual.com and we will delete it.

12. International processing

Eagle Virtual LLC is established in the United States, and the Service is operated and its information processed there and in the locations our service providers use. If you use the Service from outside the United States, your information will be transferred to and processed in the United States. For customers who process personal data through the Service, transfer terms are set out in our data processing agreement at /dpa.

13. Changes to this policy

We may update this policy from time to time. Each version carries the date it took effect, shown at the top of this page, and the current version is always published here. Where a change is material, we will give notice on the Service or, for account holders, by email before it takes effect. Your continued use of the Service after a change takes effect means you accept the updated policy.

14. How to contact us

For anything in this policy, including requests about your information and concerns about the public record, write to legal@eaglevirtual.com. Our postal address and other contact routes are published at /contact. No representative in the European Union or the United Kingdom is listed at this time.