Privacy Policy

بسم الله الرحمن الرحيم — In the name of Allah, the Most Gracious, the Most Merciful.

Blockchainology ("we", "us", "our") is the data controller for personal data collected through the Ijma Wallet website at ijmawallet.com.

Data controller contact: ijma@blockchainology.co.uk

This Policy applies to the Website and to the Ijma Wallet Progressive Web App ("the App"). It explains what data we collect, why, how long we keep it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

The Ijma Wallet App is designed with privacy as a fundamental requirement, not an afterthought. Here is a complete and honest account of what the App does with data:

Third-party data exposure: When the App queries a block explorer for your address balance or transaction history, your Bitcoin address and IP address are visible to that block explorer operator. By default, this is Mempool.space. You can change this to a self-hosted explorer in Advanced Settings, or enable Tor routing to hide your IP address. We cannot control what third-party services do with your data — consult their privacy policies.

When the App fetches a Bitcoin price, your IP address is visible to the price feed provider (by default, CoinGecko). You can disable price feeds entirely in Advanced Settings.

When you use Nostr features, your public key and any events you sign (notes, Zaps, profile) are broadcast to public Nostr relays and are permanently public. Your Nostr private key never leaves your device.

The Website at ijmawallet.com is a static HTML/CSS/JS site with no server-side code, no databases, and no user accounts.

Server access logs. Our web host (Hostinger) automatically records server access logs containing: IP address, browser type, operating system, pages visited, referring URL, and timestamp. These logs exist for security and infrastructure purposes only. We do not use them for marketing or profiling. They are deleted within 30 days. This processing is based on our legitimate interest in maintaining the security and integrity of the Website.

No cookies. The Website does not use cookies. There is no cookie banner because there are no cookies to consent to.

No analytics. We do not use Google Analytics, Plausible, Fathom, Matomo, or any other analytics service on the Website.

No tracking pixels. We do not use Facebook Pixel, Twitter Pixel, LinkedIn Insight, or any advertising or tracking technology.

Google Fonts. The Website loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). When your browser requests these fonts, your IP address is visible to Google. Google's privacy policy applies to this request. We are considering self-hosting these fonts in a future update to eliminate this.

If you contact us by email (at any @blockchainology.co.uk address), we will retain your email address and the content of the communication for as long as necessary to respond to your query and for a reasonable period thereafter (typically 12 months) in case of follow-up. This is based on our legitimate interest in managing communications.

We do not add you to any mailing list without your explicit consent. We do not sell, rent, or share email addresses with any third party.

We process personal data on the following legal bases:

• Legitimate interests (Article 6(1)(f)): Server access logs for security monitoring; email retention for query management.
• Legal obligation (Article 6(1)(c)): We may be required to retain or disclose data to comply with applicable law, including court orders or regulatory requirements. We will notify you of any such disclosure unless legally prohibited from doing so.

We do not process personal data based on consent (we ask for none, except in the event that we introduce a newsletter or mailing list in the future, at which point consent will be sought explicitly and separately). We do not process special category data.

• Server access logs: 30 days, then automatically deleted
• Email correspondence: 12 months from last communication, then deleted
• Security incident records: Up to 3 years, if relevant to a legal matter
• App data (on your device): You control this entirely — delete the App to remove all local data

You have the following rights regarding personal data we hold about you:

• Right of access: You may request a copy of personal data we hold about you.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention requirements.
• Right to restriction: You may request that we restrict processing of your data in certain circumstances.
• Right to object: You may object to processing based on legitimate interests.
• Right to data portability: Where processing is automated and based on consent or contract, you may request your data in a portable format.

Given the minimal data we hold, most of these rights will be satisfied quickly and straightforwardly. To exercise any right, email ijma@blockchainology.co.uk. We will respond within one month.

If you are unsatisfied with our handling of a data protection matter, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

The Website is hosted on servers within the European Economic Area via our hosting provider. Server access logs are processed within the EEA. Email is processed via standard email providers which may transfer data internationally. Where data is transferred outside the UK/EEA, appropriate safeguards (standard contractual clauses or adequacy decisions) apply.

We do not intentionally transfer personal data to countries without adequate data protection. If you use third-party services through the App (such as Nostr relays operated in various jurisdictions), those transfers are governed by those services' privacy policies.

Ijma Wallet is not directed at children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Users under 18 should not use financial software without parental supervision and guidance. The risks associated with self-custody Bitcoin wallets are significant and require maturity to manage responsibly.

We may update this Privacy Policy from time to time. The most current version will always be at ijmawallet.com/privacy. Material changes will be announced on the Website and in the GitHub repository. The date at the top of this page reflects the last update.

For privacy-related enquiries:
ijma@blockchainology.co.uk

For general enquiries:
hello@blockchainology.co.uk