NFT Sentinel Privacy Policy

• Effective Date: 2026-07-01
• Last Updated: 2026-07-01

1. Scope of this Privacy Policy

For purposes of this Privacy Policy, “App” means the NFT Sentinel mobile application, including iOS and Android versions where available. “Services” means the App, website, wallet-connected features, blockchain-related features, support channels, and related services that link to this Privacy Policy. “NFT Sentinel,” “we,” “us,” or “our” refers to the operator of the NFT Sentinel application, website, and related services.

This Privacy Policy applies to information processed in connection with:

1. the NFT Sentinel mobile application, including iOS and Android versions where available;
2. our website and legal pages;
3. wallet connection features;
4. blockchain-related features;
5. account or profile features, if any;
6. analytics, diagnostics, and crash reporting;
7. customer support communications;
8. any other feature that links to this Privacy Policy.

This Privacy Policy does not apply to third-party websites, wallets, applications, blockchain networks, RPC providers, app stores, or other external services that we do not control. Those third parties may have their own privacy policies.

2. Information We Collect

Depending on how you use the Services, we may collect the following categories of information.

2.1 Wallet and Blockchain Information

When you connect a wallet or use blockchain-related features, we may process:

1. public wallet address;
2. wallet connection status;
3. selected blockchain network or cluster;
4. transaction signatures or transaction identifiers;
5. public on-chain activity related to your connected wallet;
6. token, NFT, transfer, wallet, or account state derived from public blockchain data;
7. timestamps of wallet connection or blockchain-related interactions.

We do not collect, request, store, or control your private key, seed phrase, recovery phrase, mnemonic phrase, or wallet password.

You should never provide your private key, seed phrase, recovery phrase, or mnemonic phrase to us or to anyone else.

2.2 Account Information

If the Services include account functionality, we may collect:

1. username;
2. email address;
3. profile information;
4. authentication information;
5. account preferences;
6. communication preferences;
7. account creation and login timestamps.

If the App does not require account registration, this section applies only if you voluntarily provide account-related information through another feature.

2.3 Contact and Support Information

If you contact us for support or submit a request, we may collect:

1. name or display name;
2. email address;
3. support message content;
4. screenshots or attachments you provide;
5. wallet address or transaction identifier if you provide it for troubleshooting;
6. device and app information relevant to the issue;
7. communication history with us.

You should avoid sending private keys, seed phrases, recovery phrases, passwords, or other sensitive credentials through support channels.

2.4 Device and App Information

We may collect technical information about your device and app environment, such as:

1. device model;
2. operating system and version;
3. app version;
4. language and region settings;
5. time zone;
6. device identifiers or installation identifiers, where permitted;
7. network status;
8. crash logs;
9. diagnostic logs;
10. performance information;
11. feature usage events.

2.5 Usage and Analytics Information

We may collect information about how users interact with the Services, including:

1. screens viewed;
2. buttons or features used;
3. session duration;
4. campaign or attribution information;
5. feature engagement;
6. wallet connection attempts;
7. transaction flow events, such as request initiated, approved, rejected, failed, or completed;
8. error events;
9. aggregate usage metrics.

Where possible, analytics information is collected in a way that minimizes direct identification.

2.6 Error, Crash, and Security Information

To maintain reliability and security, we may collect:

1. crash reports;
2. stack traces;
3. error logs;
4. API error responses;
5. failed wallet connection events;
6. failed transaction request events;
7. abuse, fraud, or security-related signals;
8. app integrity and anti-tampering signals, if implemented.

We configure error reporting to avoid intentionally collecting private keys, seed phrases, recovery phrases, mnemonic phrases, wallet passwords, or other wallet credentials.

2.7 Information from Third-Party Services

We may receive information from third-party services, including:

1. wallet connection providers;
2. blockchain networks;
3. RPC providers;
4. analytics providers;
5. crash reporting providers;
6. authentication providers;
7. app distribution platforms;
8. customer support tools.

The information we receive depends on your interaction with those services and their privacy practices.

3. Information We Do Not Collect

We do not intentionally collect:

1. private keys;
2. seed phrases;
3. recovery phrases;
4. mnemonic phrases;
5. wallet passwords;
6. full payment card numbers, unless a regulated payment provider separately processes them;
7. government identification documents, unless expressly required for a specific feature and separately disclosed;
8. precise location, unless expressly requested and permitted;
9. contacts, photos, microphone, camera, or files, unless a specific feature requires access and you grant permission.

If you accidentally provide sensitive wallet credentials or other sensitive information to us, we may delete or restrict access to that information where reasonably possible.

4. How We Use Information

We may use information for the following purposes.

4.1 Provide and Operate the Services

We use information to:

1. provide the App and its features;
2. enable wallet connection;
3. display blockchain-related information;
4. show token, NFT, wallet, transfer, or account status;
5. process user requests;
6. provide support;
7. maintain app settings and preferences;
8. verify service availability and functionality.

4.2 Blockchain and Wallet Functionality

We may use wallet and blockchain information to:

1. identify the public wallet address connected to the App;
2. show wallet-specific information;
3. prepare transaction requests;
4. display transaction status;
5. detect failed, rejected, or completed wallet interactions;
6. prevent duplicate or invalid actions;
7. verify transfer requests, wallet-connected features, or access to supported features, if applicable.

We do not use private keys because we do not collect or control them.

4.3 Security, Fraud Prevention, and Abuse Detection

We may use information to:

1. detect fraud, abuse, spam, bots, manipulation, or unauthorized activity;
2. enforce rate limits, access rules, and security checks;
3. protect the Services, users, and third-party systems;
4. investigate suspicious wallet or account activity;
5. prevent misuse of wallet actions, transfer flows, or supported features;
6. comply with security requirements.

4.4 Analytics and Improvement

We may use information to:

1. understand how users use the Services;
2. improve performance and reliability;
3. diagnose bugs and crashes;
4. measure feature adoption;
5. improve user experience;
6. test and evaluate new features;
7. understand app installation and usage patterns.

4.5 Communications

We may use contact information to:

1. respond to support requests;
2. send service-related notices;
3. provide security or operational updates;
4. notify users about important changes;
5. respond to legal or compliance requests.

We do not sell your personal information to advertisers.

4.6 Legal and Compliance

We may use information to:

1. comply with applicable laws and regulations;
2. respond to lawful requests from authorities;
3. enforce our EULA, Terms of Use, and policies;
4. protect our rights, users, and services;
5. resolve disputes;
6. maintain required records.

5. How We Share Information

We may share information in the following circumstances.

5.1 Service Providers

We may share information with vendors and service providers who help us operate the Services, such as:

1. cloud hosting providers;
2. backend infrastructure providers;
3. analytics providers;
4. crash reporting providers;
5. customer support tools;
6. security and fraud prevention tools;
7. email or notification providers;
8. storage providers.

These providers are authorized to use information only as needed to provide services to us and are expected to protect the information they process.

5.2 Wallets, Blockchain Networks, and RPC Providers

When you use wallet-connected or blockchain-related features, information may be processed by:

1. your wallet application;
2. the Solana blockchain or other supported blockchain networks;
3. RPC providers;
4. token programs;
5. NFT metadata services;
6. block explorers;
7. other blockchain infrastructure providers.

Blockchain transactions and public wallet activity may be publicly visible and cannot generally be deleted or modified by us.

When you connect a wallet through Mobile Wallet Adapter or a compatible wallet connection flow, you may interact directly with a third-party wallet application. Wallet applications may process wallet connection requests, transaction signing requests, message signing requests, public wallet addresses, transaction details, and related information according to their own terms and privacy policies.

We do not receive, collect, or control your private keys, seed phrases, recovery phrases, mnemonic phrases, or wallet passwords through Mobile Wallet Adapter or any compatible wallet connection flow.

5.3 Legal, Safety, and Compliance

We may disclose information if we believe it is reasonably necessary to:

1. comply with applicable law, regulation, legal process, or governmental request;
2. enforce our EULA, Terms of Use, and policies;
3. protect the rights, property, or safety of us, users, or others;
4. detect or prevent fraud, security incidents, or abuse;
5. respond to claims that content or activity violates the rights of others.

5.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

5.5 With Your Direction or Consent

We may share information when you direct us to do so or when you provide consent.

6. Public Blockchain Data

Blockchain networks are public or semi-public systems. If you sign or submit a transaction, information such as wallet addresses, transaction signatures, token transfers, program interactions, timestamps, and other transaction data may become publicly visible.

We do not control public blockchain networks and generally cannot delete, modify, or hide information recorded on-chain.

You should consider the public nature of blockchain transactions before using wallet-connected features.

7. Third-Party Services and SDKs

The Services may include or interact with third-party services or SDKs, such as:

1. wallet applications;
2. Mobile Wallet Adapter-compatible wallet providers;
3. analytics tools;
4. crash reporting tools;
5. backend infrastructure;
6. RPC providers;
7. cloud hosting providers;
8. app stores and distribution platforms.

These third parties may process information according to their own privacy policies. We encourage you to review their privacy policies before using those services.

API calls to our own servers are processed by us as part of operating the Services and are not treated as a disclosure to a third party. API calls to third-party services, if any, may cause information such as public wallet addresses, transaction signatures, device information, diagnostics, support content, IP address, or request metadata to be processed by those third parties according to their own terms and privacy policies.

When you use blockchain-related features, public wallet addresses, transaction signatures, transaction details, and related request metadata may be processed by blockchain networks, RPC providers, wallet applications, or other blockchain infrastructure providers. This does not mean that we collect or control your private keys, seed phrases, recovery phrases, mnemonic phrases, or wallet passwords.

We do not list provider-specific entries here unless those providers are actually used by the Services to process personal information, support communications, diagnostics, analytics, hosting, RPC requests, or similar data. If we later use such providers in a way that materially affects this Privacy Policy, we will update this Privacy Policy as appropriate.

8. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention periods may vary depending on the type of information.

Information Type	Typical Retention
Support communications	As long as needed to resolve the request and maintain records
Analytics events	For analytics and service improvement purposes
Crash logs	For debugging and reliability improvement
Account information	While your account remains active or as needed for legal purposes
Wallet connection records	As needed to provide features, prevent abuse, and maintain security
Legal/compliance records	As required by applicable law

Public blockchain data is controlled by the relevant blockchain network and may remain publicly available indefinitely.

9. Security

We use reasonable technical, organizational, and administrative measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no system is completely secure. We cannot guarantee that unauthorized third parties will never defeat our security measures.

You are responsible for:

1. securing your device;
2. securing your wallet;
3. protecting your private keys and recovery phrases;
4. using trusted wallet applications;
5. avoiding phishing websites and malicious applications;
6. reviewing transaction prompts before approval.

We will never ask you for your private key, seed phrase, recovery phrase, or mnemonic phrase.

10. Your Choices and Rights

Depending on your location and applicable law, you may have rights regarding your personal information, such as the right to:

1. request access to information we hold about you;
2. request correction of inaccurate information;
3. request deletion of certain information;
4. object to or restrict certain processing;
5. request a copy of certain information;
6. withdraw consent where processing is based on consent;
7. opt out of certain communications.

To exercise your rights, contact us at:

support@nftsentinel.com

We may need to verify your request before responding. Some information may be retained where necessary for legal, security, fraud prevention, or legitimate business purposes.

We cannot delete or modify public blockchain data controlled by a blockchain network.

11. Data Deletion Requests

You may request deletion of certain information by contacting us at:

support@nftsentinel.com

Please include enough information for us to identify your request, such as your email address, account identifier, public wallet address, or other relevant details.

We may not be able to delete:

1. public blockchain data;
2. information we are legally required to retain;
3. information necessary to prevent fraud, abuse, or security incidents;
4. information stored in backups until those backups are overwritten or deleted according to our retention practices;
5. information held by third-party services under their own policies.

12. International Data Transfers

We may process and store information in countries other than your country of residence.

These countries may have data protection laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards for cross-border data transfers.

By using the Services, you understand that information may be processed in countries where we or our service providers operate.

13. Children’s Privacy

The Services are not intended for children under the age of 13 (or the applicable minimum age required by local law in your jurisdiction).

We do not knowingly collect personal information from children under the applicable age. If you believe that a child has provided personal information to us, contact us at:

support@nftsentinel.com

If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it where required by law.

14. Do Not Track and Tracking Technologies

Some browsers or devices may offer “Do Not Track” or similar signals. Because there is no universally accepted standard for responding to such signals, we may not respond to them unless required by applicable law.

If we use cookies, local storage, SDK identifiers, or similar technologies, we use them to operate the Services, remember preferences, improve performance, measure usage, detect abuse, and provide security.

The App does not use cookies. Our website may use basic cookies or similar technologies as described in this Privacy Policy.

15. Marketing Communications

If we send marketing communications, you may opt out by following the unsubscribe instructions in the message or by contacting us.

Even if you opt out of marketing communications, we may still send service-related messages, such as security notices, support responses, policy updates, or transactional messages.

We do not currently send marketing communications.

16. Advertising and Sale of Personal Information

We do not sell your personal information.

We do not use your private wallet credentials because we do not collect them.

If we use advertising or tracking technologies in the future, we will update this Privacy Policy and provide any required notices or choices.

The App does not currently display third-party advertisements.

17. Regional Privacy Rights

Depending on your location, you may have additional rights under privacy laws such as the GDPR, UK GDPR, CCPA/CPRA, or other applicable laws.

Where required, we will provide additional notices or rights, including information about:

1. categories of personal information collected;
2. purposes of processing;
3. categories of recipients;
4. retention periods;
5. legal bases for processing;
6. rights to access, delete, correct, restrict, object, or port data;
7. rights to opt out of certain processing;
8. rights to lodge a complaint with a supervisory authority.

If you are located in a jurisdiction with specific privacy rights and wish to exercise those rights, contact us at:

support@nftsentinel.com

18. Legal Bases for Processing

If applicable law requires us to identify a legal basis for processing, we may process information based on:

1. performance of a contract, such as providing the Services;
2. legitimate interests, such as security, fraud prevention, analytics, support, and service improvement;
3. consent, where required for certain processing activities;
4. legal obligations, such as compliance with laws or lawful requests;
5. protection of vital interests, where necessary.

19. App Permissions

The App may request certain device permissions depending on its features and the platform version you use. Permission prompts may be presented through the applicable iOS, iPadOS, Android, app store, or device operating system permission flow.

Permission	Purpose
Internet access	Connect to APIs, blockchain RPC providers, wallet services, and backend services
Notifications	Send service-related alerts, if enabled
Camera	Scan QR codes, if applicable
Photos or files	Upload attachments or images, if applicable
Biometric authentication	Secure local access, if applicable

The App should request only permissions needed for its functionality. You can manage app permissions through your device settings, including iOS, iPadOS, or Android system settings where applicable.

The App requests only permissions needed for its functionality.

20. App Stores, Platform Providers, and Distribution Channels

If you download, install, update, or access the App through the Apple App Store, Google Play, Solana dApp Store, or another authorized distribution channel, the applicable app store, device platform, operating system provider, wallet provider, or distribution provider may process information according to its own terms and privacy policy.

Depending on the platform and distribution channel, such providers may process information related to app downloads, purchases, subscriptions, updates, crash diagnostics, device identifiers, app review, fraud prevention, account status, payment status, installation status, or compliance checks.

We do not control the privacy practices of Apple, Google, Solana Mobile, wallet applications, blockchain networks, RPC providers, or other third-party distribution or platform providers.

21. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may provide notice through the App, our website, the applicable app store listing, email, or other reasonable means. The updated Privacy Policy will be effective as of the date stated at the top of the document unless otherwise specified.

Your continued use of the Services after the effective date of the updated Privacy Policy means that you acknowledge the updated Privacy Policy.

22. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:

• Operator / Service: NFT Sentinel
• Privacy Contact: support@nftsentinel.com
• Support: support@nftsentinel.com
• Website: https://nftsentinel.com
• Address: Gyeonggi-do, Republic of Korea