Privacy & Data Handling

Nymis processes submitted addresses, public blockchain activity, and available public names, labels, profiles, and attribution data. It produces findings, scores, and relationship assessments from those sources. You do not need an account or proof of control over an address to request an analysis.

Completed Privacy Scanner reports are available for up to 30 minutes. A report may become unavailable sooner as newer reports replace older ones. Expiration of a report does not mean every record associated with a scan is deleted at that moment.

Completed Address Linkage results are accessible for up to 30 minutes and can disappear sooner after a server restart. They are held in server memory and cleared during later job-store cleanup. Operational job metadata is stored separately from submitted addresses and results.

Nymis may retain an address's latest Privacy Score, its latest authoritative score, score times, and limited finding flags after the report expires. These address-level records are separate from report content. They currently have no fixed expiry.

Nymis also retains limited operational scan metadata, including the submitted address and scan status, temporarily after report content expires. Aggregate usage statistics and temporary analysis caches have separate retention rules; report expiration does not govern them.

Nymis uses Umami Cloud for visits to public pages and a limited set of actions. It sends page paths without query strings and replaces report paths with generic paths; it does not intentionally send submitted addresses or scan results to Umami. Umami may process IP and browser information to estimate visitors.

Separate first-party product metrics use random browser and session identifiers. Individual usage events are normally pruned after 90 days on later writes; daily aggregates and minimal first-seen browser records currently have no fixed expiry.

Yes. Depending on the feature, submitted addresses or related public identifiers may be sent to blockchain-data, infrastructure, identity, analytics, or AI providers. Provider data may be incomplete, outdated, or wrongly attributed.

Read the Privacy Policy for data processing and the Terms for conditions and limits of use.