Privacy Policy

1. What Information Do We Collect?

We may collect information you provide directly, such as name, email address, company name, role, support messages, legal notices, security reports, screenshots, newsletter preferences, and any other information you choose to send.

When you connect a wallet, we may process public wallet address, wallet provider, active chain, connection state, signature status, displayed balances, token metadata, transaction request metadata, and other information needed to provide the requested wallet interface.

We may automatically collect technical information such as IP address, browser type, device type, operating system, referring page, pages viewed, approximate region, timestamps, performance data, error logs, and security signals.

• We do not need your seed phrase, private key, wallet password, hardware wallet PIN, or two-factor authentication code.
• We do not intentionally collect sensitive personal information unless you choose to provide it in a support or legal request.
• Payment processors may collect billing information if paid features are offered.

2. How Do We Process Your Information?

We process information to provide, secure, maintain, improve, and understand the services. This includes wallet connection flows, support responses, content delivery, diagnostics, fraud prevention, legal compliance, and security investigations.

We may also use contact information to send service messages, respond to requests, provide product updates, or send marketing communications where permitted. You can opt out of marketing emails by using unsubscribe instructions or contacting us.

• Provide and maintain website and wallet access features.
• Authenticate sessions and display wallet-related state.
• Respond to support, legal, security, and privacy requests.
• Improve page performance, product usability, and resource quality.
• Detect abuse, phishing, fraud, malware, and unauthorized access.
• Comply with legal obligations and enforce our terms.

3. What Legal Bases Do We Rely On?

Where data protection laws require a legal basis, we rely on the basis that fits the processing activity. This may include your consent, performance of a contract, compliance with legal obligations, protection of vital interests, legitimate interests, or another basis allowed by applicable law.

For users in the European Economic Area or the United Kingdom, legitimate interests may include operating the website, improving services, preventing abuse, securing wallet access flows, responding to requests, and understanding aggregate usage. You may have the right to object to certain processing.

For users in Canada and other jurisdictions with consent-based privacy laws, we rely on express or implied consent and applicable legal exceptions where available.

4. When and With Whom Do We Share Your Information?

We may share information with vendors and contractors who help us operate the services, including cloud hosting, analytics, security monitoring, email delivery, customer support, payment processing, infrastructure, and professional advisors.

We may share information if required for legal compliance, to enforce our terms, to protect users or systems, to investigate abuse, or in connection with a business transfer such as a merger, acquisition, financing, restructuring, or sale of assets.

We do not sell your seed phrase, private keys, or wallet secrets because we do not need them and you should never provide them.

• Service providers and contractors.
• Security, fraud prevention, and abuse investigation partners.
• Payment processors if paid features are used.
• Legal, tax, accounting, and compliance advisors.
• Authorities or third parties where disclosure is required or permitted by law.

5. Do We Use Cookies and Tracking Technologies?

We may use cookies, local storage, pixels, logs, analytics tools, and similar technologies to operate the website, remember preferences, measure performance, understand page usage, improve content, and detect technical or security issues.

You can usually control cookies through your browser settings. Blocking cookies may affect features such as preferences, session continuity, analytics opt-outs, and parts of the wallet connection experience.

6. How Do We Handle Wallet Connections and Social Logins?

Wallet connections are used to request access to public wallet information and to present signing or transaction prompts through your wallet provider. A wallet connection does not give us your private key or seed phrase.

If we offer social login or account login through providers such as Google, GitHub, or similar services, we may receive profile information such as name, email address, avatar, provider ID, and authentication status. Those providers control their own privacy settings and policies.

7. How Long Do We Keep Your Information?

We keep information for as long as reasonably needed to provide the services, respond to requests, maintain security, comply with legal obligations, resolve disputes, enforce agreements, and keep appropriate business records.

When information is no longer needed, we may delete, anonymize, aggregate, or archive it according to our retention practices and legal obligations. Public blockchain data may remain available onchain even if we delete information from our own systems.

8. How Do We Keep Your Information Safe?

We use administrative, technical, and organizational safeguards designed to protect information, including access controls, encryption in transit where appropriate, monitoring, vendor review, and internal handling restrictions.

No website, wallet connection flow, cloud service, blockchain network, or transmission method is completely secure. You are responsible for securing your own device, wallet, browser, recovery phrase, and signing behavior.

9. Do We Collect Information From Minors?

The services are not intended for individuals under 18 years old. We do not knowingly collect personal information from minors. If you believe a minor has provided information to us, contact privacy@scroll.network so we can review and take appropriate action.

10. What Are Your Privacy Rights?

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent or opt out of certain marketing communications.

To exercise privacy rights, email privacy@scroll.network. We may need to verify your identity and location before completing a request. Do not send wallet secrets as part of a privacy request.

• Request access to personal information we maintain about you.
• Ask us to correct inaccurate information.
• Ask us to delete information where required by law.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Opt out of marketing communications.

11. Controls for Do-Not-Track and Global Privacy Signals

Some browsers offer Do-Not-Track or global privacy signals. Because industry standards continue to vary, we may not respond to every signal in the same way. Where a legally recognized opt-out signal applies, we will handle it as required by applicable law.

12. Do California Residents Have Specific Rights?

California residents may have rights under the California Consumer Privacy Act and related laws, including rights to know, access, correct, delete, and opt out of certain sharing or sale of personal information. We do not sell private wallet secrets, and you should never provide them.

To submit a California privacy request, email privacy@scroll.network or legal@scroll.network. We may ask for information needed to verify and process the request.

13. International Transfers

We are based in the United States and may use vendors or infrastructure in the United States and other countries. Your information may be processed in jurisdictions that have data protection laws different from those in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual commitments, vendor diligence, and other measures permitted by applicable law.

14. Do We Make Updates to This Notice?

Yes. We may update this Privacy Notice to reflect changes in our services, technology, vendors, laws, or data practices. The last updated date will change when we post a revised version.

If a change is material, we may provide additional notice through the site or by other reasonable means where required.

15. How Can You Contact Us About This Notice?

You may contact Scroll Wallet Research Desk at 548 Market Street, Suite 88474, San Francisco, CA 94104, United States.

Privacy requests: privacy@scroll.network. General support: contact@scroll.network. Legal notices: legal@scroll.network. Security reports: security@scroll.network.

16. How Can You Review, Update, or Delete Your Data?

Submit a request to privacy@scroll.network and describe what you want to review, update, or delete. We will respond in accordance with applicable privacy laws and may ask for verification before changing or disclosing information.

Some information may be retained where required for security, legal compliance, dispute resolution, fraud prevention, backup integrity, or legitimate business records. Public blockchain information cannot be deleted by Scroll Wallet from decentralized networks.