Privacy Policy

1. Who we are

Floatless provides software for viewing and moving digital assets and related account experiences. For privacy questions, contact hello@floatless.app.

2. Information we collect

Account and identity information: email address, authentication identifiers from our login providers, and account metadata needed to create and secure your session.

Wallet and transaction information: public wallet addresses, wallet provider identifiers (such as a wallet ID), asset balances and portfolio data retrieved from blockchain data providers, and records of transfers you initiate through the Services.

Device and usage information: device type, operating system, app version, crash and diagnostic logs, approximate network information, and interaction events needed to operate, secure, and improve the Services.

Support communications: messages you send to us, including any information you choose to include.

We do not ask for government ID by default. If compliance or onboarding features are enabled in the future, we will disclose any additional collection at the point of collection.

3. Information we do not collect

We do not store raw private keys or seed phrases in our databases. Depending on your authentication path, cryptographic material may be managed by a licensed wallet infrastructure partner or derived on your device using passkeys. Blockchain transactions you broadcast are public by nature of the networks you use.

4. How we use information

We use information to create and authenticate accounts; provision and operate wallets; display balances and activity; prepare, sponsor, and submit transactions you request; provide customer support; detect fraud and abuse; comply with law; and improve reliability, security, and product quality.

We may use aggregated or de-identified information that cannot reasonably identify you for analytics and product planning.

5. How we share information

Service providers: authentication, wallet infrastructure, cloud hosting, analytics, customer support, and blockchain data or gas sponsorship providers that process data on our behalf under contractual obligations.

Blockchain networks: when you submit a transaction, the public payload (including addresses and amounts) is broadcast to the network and may be permanently visible.

Legal and safety: when required by law, legal process, or to protect the rights, safety, and security of Floatless, our users, or the public.

Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate protections.

We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

6. Cookies and similar technologies

Our website may use essential cookies and similar technologies for security, preferences, and basic analytics. Mobile applications may use local storage and secure device storage for session and credential metadata. You can control cookies through your browser settings, recognizing that some features may not function without essential cookies.

7. Data retention

We retain personal information for as long as needed to provide the Services, meet legal and accounting obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type. You may request deletion as described below, subject to legal retention requirements and on-chain permanence.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transit, access controls, and secure storage for sensitive credentials where applicable. No method of transmission or storage is 100% secure. You are responsible for protecting your devices, passkeys, and email inbox.

9. International transfers

We may process information in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or export personal information; to object to or restrict certain processing; and to appeal a denied request. To exercise rights, email hello@floatless.app with “Privacy Request” in the subject line. We may verify your identity before fulfilling a request.

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, and to not be discriminated against for exercising privacy rights. We do not sell or share personal information as defined by the CCPA/CPRA.

EEA/UK residents may have GDPR rights, including access, rectification, erasure, portability, and the right to lodge a complaint with a supervisory authority. Where GDPR applies, our processing is typically based on contract performance, legitimate interests (security and improvement), consent where required, or legal obligation.

11. Children’s privacy

The Services are not intended for children under 13 (or under 16 where required by local law). We do not knowingly collect personal information from children. If you believe a child has provided information, contact hello@floatless.app and we will take appropriate steps to delete it.

12. Third-party links and SDKs

The Services may link to third-party sites or integrate third-party SDKs. Their privacy practices are governed by their own policies. Review those policies before providing information to third parties.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated Policy with a revised effective date and, when appropriate, provide additional notice in the app or by email. Continued use after the effective date means you acknowledge the updated Policy.

14. Contact

Privacy requests and questions: hello@floatless.app. Website: https://floatless.xyz. Social: https://x.com/UseFloatless.