Effective Date: October 24, 2026
Wallet Sleuth is a read-only analytics and alerting tool for publicly available Solana blockchain data. We do not trade, swap, custody, hold, manage, transfer, or have access to your cryptocurrency, tokens, NFTs, wallets, or private keys. We do not — and have no plans to — offer brokerage, exchange, custody, asset management, or any service that moves or controls digital assets. The data we analyze (transactions, balances, prices) is already public on the Solana blockchain; we present it in a more useful way and notify you about it.
Wisteria Technologies LLC ("we," "us," or "our") operates Wallet Sleuth (the "Service"), available via web at walletsleuth.app and via our iOS and Android mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. If you do not agree with this policy, do not use the Service.
For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, Wisteria Technologies LLC is the "data controller" of your personal information under the EU General Data Protection Regulation ("GDPR"), the UK GDPR, and the Swiss Federal Act on Data Protection. For users in the United States, this policy is also intended to satisfy applicable state privacy laws, including the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA").
Wallet Sleuth is a data analytics, monitoring, and alerting product. It is essential to understand what the Service is and what it is not, because this scope defines what data we handle and how.
Monitoring a wallet address inside the Service is purely informational. The wallet owner is unaffected and is not notified. We have no relationship with, and no control over, any address you choose to track.
We retrieve and process publicly available Solana blockchain data — transactions, balances, token metadata, and prices — associated with the wallet addresses you choose to monitor. This information is already public on the blockchain; we do not own it, and tracking it inside Wallet Sleuth does not give us any control over the wallet, its assets, or its owner.
An auditor using our wallet audit feature may declare that a named person or business controls some of the wallets in an audit, and may ask us to assess that identity. We do this only for identities the auditor declares, and only after the auditor states why they are authorised to review them; that statement is saved with the identity. For an assessment we combine the audit's own on-chain results with a single look at public sources: a web search, public news coverage, the identity's own website if one is given, a public GitHub profile, public company registers, and public profile pages on professional and social networks.
We fetch each public page once per assessment, identify ourselves in every request, honour each site's robots.txt, and never log in, solve a CAPTCHA, or work around a block. We keep only links, page titles and short excerpts (never whole pages, photos or profile contents), and we delete those excerpts and links 180 days after the assessment unless it is run again. An auditor may also record the service providers an identity uses and details of its assurance reports (such as SOC 2 reports). If the auditor uploads a report, we send it to our AI provider to read the report details and keep only the details the auditor confirms; we do not keep the file. Our AI provider's own data-retention terms for data sent to its API apply to that request. If you believe you have been assessed and want to be removed, email admin@wisteriatechnologies.com; we will delete the assessment from every audit and stop it from being run again.
We do not collect:
We use the information we collect to:
We do not use your personal information to make automated investment decisions for you, because we do not make investment decisions at all. We do not engage in profiling that produces legal or similarly significant effects on you. We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law.
If you are in the EEA, the UK, or Switzerland, we process your personal information on one or more of the following legal bases:
Identity assessments (Section 3.4) process public information about people who are not our users. We rely on legitimate interests (GDPR Art. 6(1)(f)): the auditor's interest in understanding who controls the wallets they are reviewing, and the shared interest in preventing fraud. We limit this to identities an auditor declares and attests they may review, keep only links, titles and short excerpts, and delete those after 180 days. Anyone can object and be removed by writing to admin@wisteriatechnologies.com.
We rely on the following third-party providers to deliver the Service. Each operates under its own privacy policy and receives only the information needed to perform its function:
None of these providers are given access to any cryptocurrency or wallet credential — because we do not have any to share.
We use only the cookies and browser storage the Service needs in order to work. We do not use advertising cookies, analytics cookies, or any third-party tracking, which is why the Service shows no cookie banner.
You can clear any of these through your browser settings at any time. Clearing them signs you out and resets your preferences; it does not delete your account or your data.
We do not sell your personal information. We share information only in these limited circumstances:
We retain personal information only for as long as needed for the purposes described in this policy. Typical retention periods:
When the applicable retention period ends, we delete or anonymize the information so that it can no longer be associated with you.
We use industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), credential hashing via our authentication provider, and least-privilege access controls for internal systems. No system is perfectly secure; you are responsible for keeping your account credentials confidential. If you suspect unauthorized use of your account, contact us immediately.
All users can delete their account at any time from within the Service. To exercise any of the rights below, contact us at the email address in Section 16. We will respond within the time frame required by applicable law (generally within 30 days under GDPR and 45 days under the CCPA). We will not discriminate against you for exercising your rights.
You have the right to:
You have the right to:
We extend the core rights of access, correction, deletion, and portability to all users worldwide regardless of where you live, subject to applicable law. Where local law provides additional rights, we will honor them.
Send your request to admin@wisteriatechnologies.com from the email address associated with your account. We may need to verify your identity before fulfilling the request. An authorized agent may submit a request on your behalf with appropriate proof of authority.
With your permission, we send push notifications, emails, and SMS messages for the alerts you have configured. You can change channels for any alert in the Service. You can disable push notifications in your device settings, and you can unsubscribe from non-essential email at any time using the link in the email. We may still send you transactional and security-related messages (password resets, billing receipts, security notices) regardless of marketing preferences. We do not currently send marketing email unless you explicitly opt in.
The Service is not directed to children. We do not knowingly collect personal information from anyone under 13 in the United States or under 16 in the European Economic Area, the United Kingdom, and Switzerland (the minimum age may be higher in some EU member states, in which case the local minimum applies). If you believe a child has provided information to us, please contact us so we can delete it.
We are based in the United States. Several of our service providers also operate primarily in the United States, while others may process data in additional countries. If you access the Service from the European Economic Area, the United Kingdom, or Switzerland, your personal information will be transferred to and processed in the United States and potentially other jurisdictions outside the EEA, UK, or Switzerland. These countries may have data-protection laws that differ from those in your home jurisdiction.
When we transfer personal information out of the EEA, the UK, or Switzerland, we rely on appropriate safeguards as required by applicable law, including the European Commission's Standard Contractual Clauses (and the UK's International Data Transfer Addendum where applicable). We may also rely on derogations under Article 49 of the GDPR where permitted — for example, when the transfer is necessary for the performance of a contract you have with us. You may request a copy of the safeguards we use by contacting us at the address in Section 16.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or via an in-app notice prior to the changes taking effect. The "Effective Date" at the top of this policy indicates when it was last revised. Continued use of the Service after the changes take effect constitutes acceptance of the updated policy.
For questions about this Privacy Policy, to exercise your privacy rights, or to report a security concern, contact us at admin@wisteriatechnologies.com.
Wisteria Technologies LLC — United States