Privacy Policy

Last updated: May 23, 2026

What we collect

To operate the Service, we collect and store:

  • Your email address and account password (hashed) for authentication.
  • The public validator pubkeys you register for monitoring.
  • Optional alert-channel destinations you connect (e.g. Telegram chat ID, Discord webhook URL).
  • Billing identifiers from Stripe (customer ID, subscription ID — never your card number).
  • Usage logs and error events needed to operate and debug the Service.

What we do not collect

We never collect, store, or request your validator signing keys, withdrawal keys, mnemonics, or any other private cryptographic material. Eyrium operates entirely from public on-chain data and the channel destinations you provide.

How we use your data

We use your data to:

  • Run the Service: poll the chain for events affecting your validators and deliver alerts.
  • Operate your account and billing.
  • Send transactional email (account confirmation, billing receipts, password reset).
  • Debug and improve the Service.

We do not sell your data. We do not use your data for advertising.

Third-party processors

We share data with the following processors only as needed to run the Service:

  • Supabase — managed Postgres + authentication.
  • Cloudflare — hosting (Workers + Pages) and DNS.
  • Stripe — payment processing.
  • Resend — transactional and alert email delivery.
  • Alchemy — Ethereum beacon chain RPC.
  • Telegram / Discord / push providers — only when you enable those alert channels.

Mobile app data

The Eyrium mobile app (iOS and Android) collects:

  • Push notification token — an opaque identifier issued by Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android). Used solely to deliver alert notifications to your device. Stored only while the device is registered; removed when you uninstall the app or remove the device from Settings.
  • Device name and app version — used to label the device in the Settings > Devices list and to help us debug version-specific issues. Never used for advertising or analytics.

The Eyrium mobile app does not include any third-party analytics SDKs, advertising SDKs, or tracking pixels. We do not request access to your contacts, location, photos, microphone, camera, or clipboard.

Data retention

We retain account data for as long as your account is active. Attestation and event history is retained for the duration of your subscription and deleted shortly after account closure. Billing records may be retained longer as required by tax and accounting law.

Your rights

You may access, correct, export, or delete your account data at any time. To request deletion or export, contact [email protected]. Account deletion removes your validators, channel connections, and personal data, subject to legal retention requirements for billing records.

Cookies

We use a small number of strictly necessary cookies and local storage entries for authentication and theme preference. We do not use third-party advertising or tracking cookies.

Contact

Privacy questions: [email protected].