Data Protection & Privacy

Privacy Policy

Last updated: October 17, 2026 • Effective immediately

1. Introduction & Privacy Philosophy

At GiwaMaps (“GiwaMaps”, “we”, “us”, or “our”), we are fundamentally committed to user privacy, data minimization, and the pseudonymous ethos of decentralized blockchain networks.

This Privacy Policy explains how GiwaMaps collects, processes, and protects information when you access or interact with our web platform (https://giwamaps.com), APIs, and mobile client applications (collectively, the “Platform”). We believe that on-chain research tools should empower users without subjecting them to intrusive personal surveillance.

2. What We NEVER Collect: Zero-Custody Guarantee

Absolute Zero-Knowledge Standard:
GiwaMaps NEVER requests, collects, stores, or handles private cryptographic keys, seed phrases, recovery passwords, or personal banking details. We have no ability or authorization to access your funds or sign transactions on your behalf.

Furthermore, GiwaMaps does NOT require you to provide:

  • Your legal name, physical home address, or telephone number.
  • Government-issued identity cards, passports, or biometric scans.
  • Credit card numbers, bank account routing details, or payment credentials.

3. Categories of Information Processed

To operate our decentralized visual intelligence engine, we process the following limited categories of data:

A. Public Blockchain Ledger Information

The Platform indexes, queries, and visually formats data that is already publicly broadcasted across decentralized blockchains (such as Ethereum, TON, Base, BNB Chain, Arbitrum, and Polygon). This includes token contract addresses, public wallet addresses, token transfer quantities, liquidity pool addresses, and block timestamps. Public blockchain transactions are immutable, globally accessible, and not created by GiwaMaps.

B. Technical Log Data & DDoS Mitigation

When your web browser or client communicates with our servers or Cloudflare reverse proxy, routine network metadata is temporarily logged for security and load-balancing purposes:

  • Internet Protocol (IP) address (used for rate-limiting and DDoS defense).
  • Browser user-agent string, operating system version, and viewport metrics.
  • HTTP request path, timestamp, response status code, and payload latency.

C. Client-Side Browser Storage (Local Storage)

We utilize standard browser local storage (`localStorage`) solely on your local device to enhance your browsing experience:

  • Recent token searches and cached search queries.
  • User interface preferences (e.g., active network filter, layout preferences).
  • Local saved watchlist tokens.

This data remains strictly on your device and is never uploaded, synced, or sold to remote telemetry servers.

4. Legal Bases & Purposes for Data Processing

We process the limited technical information described above exclusively under the following legal bases:

  • Service Delivery: To generate requested visual cluster layouts, calculate token holder risk ratings, and render interactive graphs.
  • Legitimate Security Interests: To detect and prevent automated scraping attacks, API abuse, bot swarms, and denial-of-service attempts that degrade service availability for genuine researchers.
  • System Optimization: To monitor server latency, cache frequently requested pairs, and verify high-throughput indexing throughput.

5. Third-Party Integrations & Data Sinks

GiwaMaps communicates with independent third-party services and public decentralized APIs to fetch live market parameters and token balances. When you interact with specific tokens, queries are dispatched to:

  • Decentralized Liquidity Feeds (DexScreener API): Fetches real-time price quotes, DEX pair volume, and automated pool reserves.
  • Public Blockchain RPC Nodes (PublicNode, Cloudflare, Infura): Submits standard read-only JSON-RPC calls to query token balances and supply totals.
  • Public Ledger Explorers (TonAPI, Blockscout): Fetches historical top holder lists and transfer event logs.
  • Edge Infrastructure & Security (Cloudflare): Provides SSL/TLS encryption, edge caching, and firewall filtering.

These external entities operate under their respective independent privacy terms. We do not transmit personal identifying information to any third-party provider.

6. Cookies & Tracking Technologies

GiwaMaps does NOT use cross-site behavioral tracking cookies, advertising identifiers, or invasive marketing pixels (such as Facebook Pixel or Google Ads trackers). We do not build commercial advertising profiles or monetize your data. Any cookies utilized are strictly essential for session management and Cloudflare bot challenge verification.

7. Data Retention & Erasure

Routine server access and error logs are retained temporarily for security auditing purposes (typically 14 to 30 days) and are periodically purged. Cached on-chain token data and cluster snapshots are refreshed continuously to match current block states. You can clear your local device search history and watchlist at any time by clearing your browser cache and cookies.

8. Data Security Measures

We enforce industry-standard security protocols to protect all communications and server environments:

  • Mandatory HTTPS with TLS 1.3 encryption across all web domains and API gateways.
  • Hardened reverse proxy configurations with automated rate-limiting per IP address.
  • Isolated execution environments for block scanner workers and background queues.

9. International Data Transfers & User Rights

Due to the decentralized and globally distributed nature of the internet and blockchain networks, technical server requests may be routed through edge servers located worldwide.

Under applicable data protection frameworks (such as GDPR or CCPA/CPRA where applicable), users have the right to know what personal data is stored. Because GiwaMaps does not store legal identities or account registrations, we generally hold no personal record linking any blockchain address to a real-world individual.

10. Children's Privacy Protection

The Platform is not directed to individuals under the age of 18. We do not knowingly collect or solicit any information from children. If we become aware that an individual under 18 has submitted data to us, we will immediately delete such information.

11. Amendments to this Privacy Policy

We reserve the right to revise this Privacy Policy periodically to accommodate evolving technological standards, newly added blockchain networks, or regulatory frameworks. Any updates will be published on this page with an updated timestamp. Continued use of the Platform signifies your acceptance of any revisions.

Privacy & Compliance Inquiries:
If you have questions, feedback, or concerns regarding our privacy practices or data handling, reach out to our team via our official public portal at https://giwamaps.com.