We work from public blockchain data only. We will never ask for your seed phrase, private keys, wallet passwords, or exchange logins, and you should never send them to us or to anyone claiming to be us. If you have already shared them with someone, move any remaining funds to a new wallet first.

When you submit the case intake form, we store:

• your name and email address;
• the type of incident you select;
• the approximate loss, assets and chains, and transaction hashes or wallet addresses you choose to provide;
• whether you have already contacted a “recovery” service;
• the date and time of the submission.

If you email us directly, we receive your message, your email address, and any attachments you send.

We use Vercel Web Analytics and Speed Insights to measure page visits and site performance. They do not use cookies and do not identify individual visitors. We do not use advertising or cross-site tracking.

We use your intake only to assess your case, reply to you, and, if you engage us, carry out the work. We send you one confirmation email when you submit the form. We do not sell your information or use it for marketing.

Your information is handled by service providers acting on our behalf:

• Vercel: website hosting and analytics;
• Prisma (Prisma Postgres): the database for intakes;
• Resend: sending and receiving email.

These providers may store data outside your country, including in the United States. Information is encrypted in transit between your browser and our site.

We keep intake submissions and related emails until you ask us to delete them. We do not delete them automatically after a set period.

To have your submission deleted, or to see or correct what we hold about you, email intake@tracewright.io from the address you used on the form. We will confirm once it is done. Depending on where you live, you may also have the right to object to or restrict how we use your information, and to complain to your data protection authority.

Questions about this notice: intake@tracewright.io.