Privacy

No cookies. No trackers. This page explains what happens to the details you send us, who handles them, and how long we keep them.

What this site collects

Nothing beyond what your browser sends to load a page. This site sets no cookies. It uses no analytics, tracking pixels, third-party scripts, fonts or embeds. Every file comes from this site.

When you write to us

The incident form asks what's happening, what happened and your email address. You can add a phone number or Signal username so we can call you back, and transaction IDs or addresses. The contact form asks what it's about, your email address and your message.

We use these only to reply to you and to work on what you've told us. We don't attach your IP address or location, and we don't add you to any mailing list. If a recovery phrase or private key is detected, it's removed before sending.

Before the contact form sends your message, we email you a 6-digit code to confirm the address is yours. The incident form skips this, so nothing slows you down.

Your message isn't stored on this website: it's sent to us by email. Your browser makes a random code so that a retry gives the same reference number. Nothing is saved on your device.

To stop the forms being used to send codes to strangers, we count the codes sent to each email address and each network. We keep these counts for an hour at most, under a scrambled key that can't be turned back into your address or IP address.

When you request an incident report

The report form asks for:

• the blockchain it happened on;
• transaction IDs, the address your funds went to, and your wallet address;
• what happened, roughly when, and your account in your own words;
• your name and email address;
• a police or cybercrime reference, if you have one.

We use these only to review your request, reply to you and, if we go ahead, produce your report. If a recovery phrase or private key is detected, it's removed.

Before your details reach us, we email you a 6-digit code to confirm the address is yours.

What stays in your browser

The report form keeps your answers in this browser tab while you fill it in. They're cleared when you finish or close the tab. Nothing else is stored in your browser.

Who handles your details

• Cloudflare hosts this site and runs its forms.
• Resend delivers the emails the forms send us.

How long we keep it

We keep what you send only as long as we need it to reply to you and do the work, then delete it.

Your details

To ask what we hold about you, or to have it corrected or deleted, write to us through the contact form.