This Privacy Policy explains which personal data we process when you visit cabalspy.xyz, why we process it and which rights you have under the EU General Data Protection Regulation (GDPR). We keep data collection to the minimum needed to run the website: this site sets no cookies, loads no advertising or social-media trackers and serves its fonts and icons from our own server.
1. Controller
Davis von Löwe Kiedrowski
Sole proprietorship (Einzelunternehmen)
Walsroder Straße 158
30853 Langenhagen, Germany
Email: contact@cabalspy.xyz
Phone: +49 511 7663766
Full provider details are available in our Legal Notice.
2. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you open a page, the server automatically records technical information your browser transmits:
- IP address, date and time of the request
- requested URL, HTTP status code and amount of data transferred
- referring URL, browser type and operating system
We need this data to deliver the website, to keep it stable and secure and to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and working website). Log files are deleted after a short period unless a security incident requires us to keep them longer. We have concluded a data processing agreement with the hosting provider (Art. 28 GDPR).
The servers used for this website are located in the United States. The transfer is based on the EU Standard Contractual Clauses concluded with the hosting provider (Art. 46(2)(c) GDPR).
3. Cookieless web analytics (Umami)
To understand which pages are used, we use Umami Cloud, provided by Umami Software, Inc., USA. Umami works without cookies and without cross-site tracking. It does not store your IP address or build user profiles; visits are counted in aggregated, anonymised form (page views, referrer, country, browser and device type).
The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in improving the website). Where data is processed in the USA, this is based on the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework. You can object at any time (see section 9); you can also block the script cloud.umami.is in your browser.
4. Cookies, fonts and icons
This website does not set cookies. Fonts and icons are served from our own server, so no connection to Google Fonts or other content delivery networks is made when you visit cabalspy.xyz.
5. Submitting a wallet
If you use the Submit Wallet form, we process the data you enter: wallet address, chain, name or alias, X/Twitter handle and, optionally, a screenshot. We use this data to review your submission and, if it meets our criteria, to list the wallet with the submitted label in the CabalSpy dataset.
Please note that a listed wallet label (wallet address together with the public name or handle you submitted) becomes part of our public dataset and is made available through our website, API and partner integrations. By submitting, you ask us to do exactly this. The legal basis is Art. 6(1)(a) and (b) GDPR. You can withdraw your consent and request removal at any time by contacting us.
Submissions are stored in our own database on a virtual server rented from our hosting provider (see section 2). We keep them as long as the wallet is listed, or until you ask us to delete them. Rejected submissions are deleted once reviewed. To prevent abuse, the form stores a short-lived, IP-based rate-limit counter that is deleted automatically.
6. Wallet lookups and visualisation
When you look up a wallet or use the visualisation tools, the wallet address or token you enter is forwarded from our web server to the CabalSpy API to retrieve the data. Your IP address is not passed on to the API. Apart from the server log files described in section 2, we do not store these queries. Legal basis: Art. 6(1)(b) and (f) GDPR.
7. Public blockchain data and wallet labels
CabalSpy processes publicly available blockchain data and associates certain wallets with publicly known persons or accounts (for example KOLs who publicly trade under their name or social-media handle). We do this to provide transparent market information to our users. The legal basis is Art. 6(1)(f) GDPR. We only use information that is already public, and we do not publish private contact details.
If you believe a wallet is incorrectly attributed to you, or you object to a label, contact us at contact@cabalspy.xyz. We will review your request and remove or correct the label where your interests prevail.
8. Contact by email or messenger
If you contact us by email, Telegram or Discord, we process the data you send us (for example your name, contact details and message) to answer your request. The legal basis is Art. 6(1)(b) GDPR for business enquiries and Art. 6(1)(f) GDPR otherwise. We delete the data once your request is completed, unless statutory retention periods apply. Telegram and Discord are operated by third parties under their own privacy policies.
9. Your rights
You have the right to:
- Access the personal data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR)
- Withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
To exercise these rights, email contact@cabalspy.xyz. You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.
10. Other CabalSpy services
Our dashboards, API dashboard, leaderboard, documentation and status pages run on separate subdomains (for example dashboard.cabalspy.xyz or docs.cabalspy.xyz). Where those services process additional data, for example when you create an API account, you will find the relevant information there.
11. Security and changes
All connections to cabalspy.xyz are encrypted via TLS (HTTPS). We may update this Privacy Policy when our services or legal requirements change; the current version is always available on this page.