Privacy & GDPR

Last updated: 2 June 2026

1. Who we are

CrossTrace is operated by Rondanini Publishing Ltd ("CrossTrace", "we", "us"), the data controller for personal data processed through this site and service. For any privacy matter, contact us at crosstrace@berta.one or our support desk at crosstrace.support@berta.one.

2. The data we collect

• Contact & account data — your email address and, optionally, your name, when you subscribe, enquire, or create a subscription.
• Wallet data you submit — the public blockchain addresses and labels you choose to monitor. These are public on-chain identifiers; we use them only to produce the intelligence you requested.
• Payment data — processed by Stripe. We do not see or store full card details; we retain only the customer/subscription references needed to manage your plan.
• Usage & analytics data — standard analytics (e.g. pages viewed, approximate location, device) collected via Google Analytics 4 cookies.
• Communications — emails we send (e.g. daily wallet-status digests) are delivered via Brevo.

3. How and why we use it (lawful bases)

• To provide the service (reports, monitoring, daily digests) — performance of a contract.
• To send the daily wallet-status emails — your consent, which you can withdraw at any time via the one-click unsubscribe link in every email.
• To secure and improve the site (analytics, fraud/abuse prevention) — our legitimate interests.
• To meet legal and accounting obligations — compliance with law.

4. Cookies & analytics

We use Google Analytics 4, which sets cookies to measure site usage. You can decline non-essential cookies through your browser settings or a browser opt-out, and you can use the site without them.

5. Who we share data with

We share personal data only with processors that help us run the service: Stripe (payments), Brevo (email delivery), Google Analytics (usage measurement), and our hosting providers (Render and Vercel). We do not sell personal data.

6. International transfers

Some processors operate outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

7. Retention

We keep personal data only as long as needed to provide the service and meet legal obligations. If you unsubscribe or close your account, we delete or anonymise data we no longer need, subject to legal retention requirements (e.g. for accounting).

8. Your rights under the UK GDPR

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any right, email crosstrace@berta.one. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. A note on public blockchain data

CrossTrace analyses public blockchain data only. On-chain records are inherently public and are not personal data under our control; we read them, but we cannot alter or erase them. Dormancy is an observation of on-chain inactivity and is not proof of abandonment, loss, or legal ownership.

10. Changes & contact

We may update this policy from time to time; the "last updated" date above reflects the latest version. Questions? Contact crosstrace@berta.one.