Privacy

Fundsheet by Mintward builds wallet statements from public blockchain data. We collect as little as we can and delete it on a fixed schedule.

What happens where

• In your browser: your browser reads the history of the addresses you enter from public explorers (Blockscout instances for Ethereum, Base, Arbitrum, OP Mainnet and Polygon; mempool.space for Bitcoin). Those services see your IP address and the addresses you look up, as with any explorer visit. Exchange CSV files are parsed on your device and are never uploaded; only the normalized rows (date, type, asset, amount, fiat value if present) are sent to build the report.
• On our server (Cloudflare Workers, EU and worldwide edge): the report data you submit (addresses, transfers, optional name to print, optional exchange rows, optional signatures), our cross-checks, the generated PDF, and an order record (amount, status, payment transaction).

Retention

• Unpaid reports: deleted completely 24 hours after creation.
• Paid reports: the content (data and PDF) is deleted 7 days after payment.
• After that we keep a minimal record for 400 days so a bank can verify a PDF: report ID, addresses, currency, amount paid, payment transaction, issue date and the SHA-256 hashes. The verification page shows shortened addresses only.

What we do not do

• No accounts, no email collection, no cookies, no analytics, no tracking pixels, no third-party scripts.
• We do not store IP addresses. Cloudflare processes connection data to deliver the site and to rate-limit abuse.
• We never ask for a seed phrase or private key. Signing a message gives no access to funds.
• We do not sell or share report data.

Your rights (GDPR)

You can ask for access to or deletion of a report before its scheduled deletion: write to hello@mintward.xyz with the report ID. Because we hold no account or contact details, the report ID (and, if needed, a signature from one of its addresses) is how we identify the request. Legal basis: performance of the service you request (Art. 6(1)(b) GDPR) and, for the 400-day verification record, our legitimate interest in letting third parties verify reports we issued (Art. 6(1)(f)).

Public blockchain data is public by design; we cannot change or delete it.

Controller: Mintward, hello@mintward.xyz. Last updated 2026-11-07.