Privacy Policy | TZUR Wallet
Introduction
TZUR Wallet respects your privacy and is designed as a non-custodial Bitcoin wallet.
Data Controller
The data controller responsible for the processing described in this notice is Blocksight OÜ, an Estonian private limited company. Registered at Vesivärava tn 50-301, 10152 Tallinn, Estonia. Estonian e-Business Register code 17474529. For all data-protection inquiries, write to legal@blocksight.live.
Information We Do Not Collect
TZUR Wallet does not collect or store personal information such as names, emails, location data, device identifiers, or wallet balances.
Local Storage
All wallet data is stored locally on the user's device. Sensitive information such as seed phrases and private keys are protected using the iOS Keychain.
Blockchain Communication
To function as a Bitcoin wallet, the application communicates with public Electrum servers to retrieve blockchain information such as balances and transactions.
Analytics
TZUR Wallet may collect anonymous usage analytics in order to improve the application.
Analytics help the developers understand how the app is used, such as:
- App launches
- Wallet creation
- Wallet restoration
- Send and receive feature usage
- Settings interactions
- App version and device information
This data is aggregated and does NOT include:
- Bitcoin addresses
- Wallet balances
- Transaction amounts
- Seed phrases
- Private keys
- Personal identity
Users can disable analytics at any time in:
Settings > Privacy > Analytics
When analytics are disabled, the application does not send usage analytics.
TZUR Wallet does not include tracking technologies or advertising SDKs.
Website Analytics
When you visit our website, we collect anonymous, aggregated usage data including the page visited, the time of the visit, and your country (derived from your IP address). Your IP address is not stored. No cookies or tracking technologies are used. This data helps us understand how visitors discover and use our website.
Lawful Basis for Processing
We process personal data only where one of the following lawful bases under GDPR Article 6 applies:
- App-side analytics (only when you enable them): your consent, withdrawable in Settings > Privacy > Analytics at any time.
- Website visit aggregates (page, time, country derived from IP): legitimate interests in understanding visitor patterns. The data is aggregated, contains no identifying cookies, and IP addresses are not stored.
- Email subscriber list (name, email, country): your consent, given when you submit the subscribe form on tzur.live, withdrawable via the unsubscribe link in every message.
- Communication with public Bitcoin infrastructure (Electrum servers, BlockSight.Live API): performance of the contract you entered into when you purchased TZUR Wallet, because exposing on-chain state is the core wallet functionality.
Retention Periods
- Website visit aggregates: up to 30 days. After that, per-visit records are deleted and only aggregate counts are retained.
- App analytics events (when enabled): up to 90 days at the analytics backend, then aggregated.
- Email subscribers: until you unsubscribe, plus an additional 30 days to honor a re-subscribe grace period.
- Wallet seed phrases, private keys, balances, and transaction history: never received by Blocksight OÜ. These remain on your device and are subject only to iOS Keychain and Secure Enclave protections.
Service Providers and International Transfers
We share personal data only with the following processors, strictly to deliver the service:
- Vercel Inc. (United States): website hosting and the visit-tracking edge function. Transfer to the United States is covered by Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914.
- Render Services Inc. (United States): backend that receives aggregated visit and app event data. Transfer to the United States is covered by Standard Contractual Clauses under Commission Implementing Decision (EU) 2021/914.
- CoinGecko Pte Ltd (Singapore) and Coinbase Inc. (United States): public price-data providers. We send no personal data; we receive Bitcoin price information.
- Apple Inc. (Ireland and United States): App Store distribution and payment processing, governed by Apple's own privacy policy.
- Public Electrum servers and the BlockSight.Live API: blockchain-data providers. The wallet sends script-hash subscriptions and transaction broadcast requests; no personally identifying data is included.
Marketing Communications
When you subscribe to TZUR product updates via the form on tzur.live, we collect your name, email, and country. This is processed under your consent (GDPR Article 6(1)(a)) for the sole purpose of sending product updates from Blocksight OÜ. You may unsubscribe at any time via the link in every message, or by writing to legal@blocksight.live. Unsubscribed records are retained for 30 days to honor a re-subscribe grace period, then deleted.
Your Rights Under GDPR
If you are an individual in the European Economic Area, the United Kingdom, or another jurisdiction with a comparable data-protection regime, you have the following rights with respect to personal data we process about you:
- Right of access (Article 15): obtain confirmation of whether we process your data and a copy.
- Right to rectification (Article 16): ask us to correct inaccurate or incomplete data.
- Right to erasure (Article 17): ask us to delete data where the listed grounds apply.
- Right to restriction of processing (Article 18).
- Right to data portability (Article 20).
- Right to object (Article 21): object to processing based on legitimate interests, including the website visit tracking described above.
- Right to withdraw consent (Article 7): for any consent-based processing, withdraw at any time without affecting the lawfulness of processing performed before withdrawal.
To exercise any of these rights, write to legal@blocksight.live. We will respond within one month of a verifiable request, with one possible extension of two further months for complex cases. There is no fee for a reasonable request.
Right to Lodge a Complaint
If you believe our processing of your personal data infringes the GDPR or your local data-protection law, you may lodge a complaint with a supervisory authority. As Blocksight OÜ is established in Estonia, our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee/en). You may also complain to the supervisory authority in the EU country where you live, where you work, or where the alleged infringement took place.
Data Protection Officer
Blocksight OÜ has not designated a Data Protection Officer because the criteria of GDPR Article 37 are not met. Data-protection inquiries should be directed to legal@blocksight.live.
Children's Privacy
TZUR Wallet is intended for users aged 18 and over. We do not knowingly process personal data of children under 16. If you believe a child under 16 has provided us with personal data, contact legal@blocksight.live and we will delete it.
Security
Private keys are generated locally and used only for transaction signing.