Privacy

What we collect

Account data when you sign up: an email address and a hashed password (or an OAuth identifier from your provider). We never store your password in plaintext.

API key metadata: an opaque key id, the plan tier you selected, and timestamps for creation and last use. The key secret itself is hashed.

Usage telemetry: per-request method, path, status code, response time, and the originating IP — used for rate limiting, abuse detection, and the per-key analytics you see on /account/api-keys.

Billing information when you upgrade: the on-chain CC payment record (publicly visible on the Canton Network anyway) plus any invoice metadata your billing provider returns.

What we do NOT collect

We don't fingerprint browsers, run third-party trackers, or sell traffic data. The explorer ships with no analytics SDK; the only beacon is our own indexer, which sees the same fields any reverse-proxy access log sees.

We don't read or persist the bodies of the on-chain transactions you query — those live on the Canton Network and are public by construction.

Cookies

We set one first-party cookie — the session cookie used by the sign-in flow. It's HTTP-only, SameSite=Lax, and tied to a server-side session record. You can clear it at any time via your browser; doing so signs you out without affecting any of your data.

Retention

Account records persist until you delete the account. Per-request usage logs are kept for 90 days, then aggregated into per-day counters with the IP truncated. Backups are encrypted and rotate every 30 days.

Your rights

You can export everything we have on you via /account → Export. Email us at hello@netrivo.xyz for deletion or rectification requests. We'll act on a verified request within 30 days.

Changes

If we change this document materially we'll notify signed-in users by email at least 14 days before the change takes effect, and bump the date at the top. The git history on this page is the canonical record.