Privacy Policy

Blockshard GmbH, Bahnhofstrasse 7, 6300 Zug, Switzerland, CHE-140.033.377 ("Blockshard", "we", "us"), is responsible for the personal data processing described in this notice for blockshard.io. Contact: hello@blockshard.io. This notice explains data processing; visiting this website does not constitute blanket consent to processing or international transfers. People and roles: Website Users generate technical requests when visiting the site. People contacting Blockshard provide contact details and correspondence. Neither activity alone establishes a direct service agreement. Protocol Participants use public blockchain and staking protocols. Vault Participants interact with StakeWise vaults through their own wallets and smart contracts. Lido SDVT stakers participate through Lido infrastructure, without thereby entering a direct agreement with Blockshard. Infrastructure Operators, including SSV operators in a cluster, are technical collaborators rather than automatically customers. A Direct Customer is a person or entity with a separately agreed individual service relationship; no such relationship is inferred from protocol participation. Blockshard generally does not know permissionless participants’ identities, residence, nationality or jurisdiction. We do not register these participants, maintain accounts for them or conduct KYC on them. We generally do not link public wallet or validator information to identified individuals or build customer profiles or a customer database from it. Participation by people in the EU cannot be excluded or confirmed from the information we collect. Public or pseudonymous blockchain information may nevertheless be personal data where a person is identifiable. Information voluntarily supplied in an enquiry is processed separately as described below. Applicable privacy laws depend on their legal scope and the actual processing, not an assumption about every staker’s location. Information We Collect Website delivery and security: Your browser sends technical data such as its IP address, requested URL, request time, browser information and, where supplied, the referring page to our hosting provider Vercel. These data are used to deliver the website, handle requests and protect and troubleshoot the service. Contact form and email: The contact form sends your name, email address, selected subject and message, together with technical request data, to Formspree, Inc. Formspree processes submissions using AWS infrastructure in the United States and forwards them by email. Hostpoint AG in Switzerland handles receipt and forwarding of email addressed to hello@blockshard.io. Messages are forwarded to Proton Mail, provided by Proton AG, for receipt, storage and handling of business correspondence. Both email providers process messages and communication metadata. We use your message and any attachments to respond and handle the enquiry. Do not send wallet recovery phrases, private keys or sensitive personal information through the form or email. Blockshard does not operate user registration, website accounts, newsletters, mailing lists or marketing automation. Contact retention: Our Formspree free plan provides 30 days of submission history in its dashboard. This period does not apply to email copies forwarded to and stored in Proton Mail, or establish the retention of all technical logs and backups. We retain business correspondence according to its continuing business purpose, applicable legal obligations and account settings; no single fixed deletion period has been established for all correspondence. Formspree dashboard history and email retention are separate. Analytics: We use the paid Plausible Analytics Cloud service from Plausible Insights OÜ, Estonia, to measure aggregate website usage. According to Plausible, its service uses page and referral information, browser and device information and approximate location, without analytics cookies, retained raw IP addresses or persistent visitor profiles. Requests still transmit technical connection data. The daily salt used for visitor counting is deleted after 24 hours; this is not the retention period for aggregate statistics. Aggregate statistics are stored in the European Union. We have not configured a shorter retention period: statistics remain available during the active account and are removed when the account or website statistics are deleted. Plausible's data processing agreement applies to Cloud customers through use of the service without a separate signature. External resources and statistics: The browser loads fonts from Google Fonts and a provider badge image from Google Cloud Storage. These requests disclose technical connection data, including the IP address, to the resource provider. Your browser also requests aggregate staking and validator statistics directly from Amazon Web Services API endpoints in the Zurich region. These statistics aggregate public blockchain information and contain no identifiable personal data. They are not website-visitor profiles, contact-form records or registration data. Separately, the HTTP requests can involve processing of IP addresses, timestamps and browser information for technical operation and security. The endpoint's region does not establish that all processing or support access takes place in Switzerland. Cookies and browser storage: The website's standard analytics integration does not require an analytics cookie. Hosting security measures or services visited through external links may use their own cookies or storage. Browser controls can restrict cookies and third-party requests, although this may affect functionality. External services and public blockchains: StakeWise, SSV, explorers and social platforms are external destinations with their own data processing. Opening their links sends a request to the destination; it is not the same as submitting a form to Blockshard. Unlike the aggregate statistics described above, individual public wallet addresses and on-chain transactions may be associated with a person. Blockshard cannot erase records from public blockchains. Legal requests and security: Personal data may also be processed where needed to comply with applicable law or establish, exercise or defend legal claims. Internet and email transmission cannot be guaranteed to be secure. Applicable data-security and breach-notification obligations remain in force. Changes to This Privacy Policy We update this notice when relevant processing changes and show the revision date below. Publishing a revised notice does not replace any separate notice or consent required by applicable law. Your Rights Subject to the applicable statutory conditions, you may request information about your personal data, correction of inaccurate data, deletion or restriction of unlawful processing, and data delivery or transfer. You may withdraw consent where processing relies on it. Legal retention duties and other statutory exceptions may limit a request. Contact hello@blockshard.io; proportionate verification of your identity may be necessary. You may also contact the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB) or another competent supervisory authority. Additional rights under the GDPR apply where that law applies. International Transfers Blockshard is based in Switzerland. Hostpoint handles email receipt and forwarding in Switzerland. Proton states that its mail servers are located in Switzerland, Germany and Norway. Vercel, Formspree and Google services involve providers in the United States and may use international infrastructure and support. Formspree uses AWS infrastructure in the United States; this is separate from our statistics endpoints in the Zurich region. Plausible states that its analytics data are processed in the European Union. The statutory requirements for international transfers apply independently of this notice; using the website is not consent to an otherwise impermissible transfer. Contact hello@blockshard.io for information about recipients, processing countries and the safeguards applicable to your data. Children's Privacy Our Site and Services are not intended for children under the age of 18. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child under the age of 18 has provided us with personal information, we will take steps to delete such information. Contact Information If you have any questions or concerns about this Privacy Policy, please contact us at: Blockshard GmbH Bahnhofstrasse 7 6300 Zug Switzerland Email: hello@blockshard.io This Privacy Policy was last updated on 13 September 2026.