Privacy Policy

This Privacy Policy explains how Cypher Trace ("Cypher Trace," "we," "us," or "our") collects, uses, stores, and discloses information when you visit our website, submit a cryptocurrency scam case assessment, or communicate with us by email.

1. Information We Collect

Information you provide

When you submit a case assessment, we may collect:

• your full name and email address;
• the approximate amount of the reported loss;
• cryptocurrency or digital asset type and blockchain network;
• transaction hashes (TxIDs), public wallet addresses, and relevant platform or website URLs;
• your description of the incident and other case information you choose to provide; and
• your consent and submission timestamp.

Information collected automatically

Our hosting and security providers may automatically process limited technical information such as IP address, browser/device information, request timestamps, pages requested, and diagnostic or security logs. If you arrive through an advertising or referral link, we may also store limited UTM/referral parameters such as campaign source, campaign name, medium, or content identifier.

2. Why We Use Information

We use information for the following purposes:

• to receive, organize, assess, and manage submitted cases;
• to review blockchain transaction information and determine whether further investigation or recovery assistance may be appropriate;
• to communicate with you by email about your case;
• to create and maintain case identifiers, case status, and internal case records;
• to protect the website, detect abuse, troubleshoot errors, and maintain security;
• to understand which advertising or referral sources produce case submissions; and
• to comply with applicable law, legal process, or legitimate requests from competent authorities where required.

3. Notice at Collection

The categories of personal information we may collect at the case form include identifiers (name and email), internet/technical information, and case-related financial or transaction information that you voluntarily provide. We collect these categories for case review, communications, security, recordkeeping, and service operation.

We do not sell personal information. We also do not intentionally share case contents for cross-context behavioral advertising.

4. Service Providers and Disclosures

We use service providers to operate the website and process case information on our behalf. These may include:

We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights or security, investigate fraud or abuse, or in connection with a legitimate business reorganization or transfer. We do not authorize service providers to use case information for their own unrelated marketing purposes.

5. Meta/Facebook Advertising and Sensitive Case Data

We may use Facebook or Meta advertising to direct visitors to this website. Advertising URLs may contain campaign attribution parameters such as UTM tags. We do not intentionally send reported losses, wallet addresses, transaction hashes, case descriptions, case scores, or other sensitive case details to Meta/Facebook through Meta Pixel, Conversions API, or similar advertising tools.

If our advertising measurement practices change, we will update this Privacy Policy and provide any legally required notice or consent before deploying technologies that collect additional personal information.

6. Data Retention

We generally retain case records for up to 24 months after the last meaningful case activity, unless a shorter period is appropriate or a longer period is reasonably necessary for an active investigation, dispute, security matter, legal obligation, or preservation request. We may delete clearly incomplete, fraudulent, test, or rejected submissions sooner.

When information is no longer reasonably needed, we aim to delete, de-identify, or securely isolate it, subject to technical backup cycles and legal requirements.

7. Data Security

We use reasonable administrative and technical measures designed to protect case information, including restricted server-side credentials, access controls, HTTPS encryption in transit, and database security controls. No website, transmission, or storage system can be guaranteed to be completely secure.

8. Your Privacy Choices and Rights

Depending on where you live and which privacy laws apply, you may have rights to request access to, correction of, or deletion of personal information, or to receive information about how it is used or disclosed. You may also withdraw consent where consent is the applicable basis for processing.

To make a privacy request, email case@cypher-trace.com. Please include enough information for us to identify the relevant case. We may need to verify your identity before completing a request.

If the California Consumer Privacy Act (CCPA/CPRA) applies to our processing, applicable California residents may exercise the rights provided by that law. We do not discriminate against a consumer for exercising applicable privacy rights.

9. Children

This service is intended for adults. We do not knowingly solicit or collect personal information from children under 18 through the case assessment service. If we learn that a minor submitted information, we may delete it unless retention is legally required.

10. International Processing

Our service providers may process or store information in the United States and other countries where they operate. Privacy and data-protection laws may differ by jurisdiction. Where required by applicable law, appropriate safeguards should apply to international transfers.

11. Changes to This Policy

We may update this Privacy Policy as our services, vendors, advertising practices, or legal obligations change. The "Last updated" date at the top will indicate the latest version. Material changes may also be highlighted on the website where appropriate.

12. Contact

Email: case@cypher-trace.com