kor.space
kor.space

KOR.SPACE — PRIVACY POLICY

Last Updated: January 13, 2025

Overview

This Privacy Policy explains how Unspendable Labs Inc. ("Unspendable Labs," "Company," "we," or "us") collects, uses, and shares information when you use kor.space (the "Platform"), a blockchain explorer for Bitcoin with Kontor protocol extensions.

By using the Platform, you agree to the terms of this Privacy Policy.

Information We Collect

Automatically Collected Information

When you use the Platform, we automatically collect certain technical information:

  • IP addresses for rate limiting, abuse prevention, and server logs
  • Browser type and version for compatibility and analytics
  • Operating system and device information
  • Page views and navigation patterns
  • Search queries entered into the Platform
  • Referral URLs showing how you arrived at the Platform
  • Request IDs for debugging and error tracking
  • Usage analytics via Usermaven, including interactions, clicks, and feature usage

Browser Storage (Client-Side Only)

The Platform uses your browser's localStorage to store preferences locally on your device:

  • Theme preference (light mode or dark mode)
  • Network selection (mainnet, testnet, signet, or regtest)
  • Wallet connection preferences, including:
    • Which wallet provider you selected (Xverse or Leather)
    • Previously connected wallet addresses
    • Connection status

Important: We NEVER store in localStorage or anywhere else:

  • Private keys
  • Passwords
  • Signing credentials
  • Seed phrases
  • Any sensitive wallet data

All wallet connections occur entirely in your browser through communication with browser extension wallets. We never receive or have access to your private keys or signing authority.

Information We Do NOT Collect

The Platform does not collect or require:

  • Email addresses
  • User account registration
  • Names or personal identifiers
  • Payment information
  • Uploaded content or user-generated content
  • Profile data

How We Use Information

We use the information we collect to:

  • Operate and maintain the Platform and provide blockchain explorer functionality
  • Analyze usage patterns to understand how users interact with the Platform
  • Prevent abuse and ensure security through rate limiting and monitoring for malicious activity
  • Debug and track errors using request IDs and logs
  • Improve user experience by understanding which features are used and how to enhance them
  • Comply with legal obligations if required by law

Analytics Tracking

All users are automatically tracked via Usermaven analytics. This tracking includes:

  • Page views and navigation paths
  • Feature interactions and clicks
  • Search queries and viewed blockchain data
  • Time spent on pages
  • Referral sources

There is no opt-out mechanism for analytics tracking. If you do not wish to be tracked, you should not use the Platform.

How We Share Information

We share information with third-party service providers necessary to operate the Platform:

Service Providers

  • Vercel (hosting and deployment infrastructure)
  • Usermaven (analytics and usage tracking)
  • Adobe Typekit (font delivery only; no user data transmitted)

These service providers are contractually obligated to protect your information and may only use it to provide services to us.

Upstream Data Sources

When you use the Platform, your queries are sent to upstream blockchain data sources:

  • Bitcoin Core RPC (for blockchain data)
  • Esplora API (for transaction and address data)
  • Mempool.space API (for mempool and fee estimation data)
  • Kontor indexer API (for smart contract and token data)

These upstream services may log your queries (including searched addresses, transactions, or contract names) according to their own privacy policies. We do not control these third-party services.

Law Enforcement

We may disclose information if required by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to:

  • Comply with legal obligations
  • Protect the rights, property, or safety of Unspendable Labs, our users, or the public
  • Prevent fraud or abuse
  • Enforce these terms

No Selling of Data

We do not sell, rent, or share your personal information for marketing purposes. We do not provide your information to data brokers or advertisers.

Wallet Connections (Client-Side Only)

When you connect a cryptocurrency wallet to the Platform:

  • Wallet connections occur entirely in your browser through communication with browser extension wallets (Xverse or Leather)
  • We never receive private keys or signing authority
  • Wallet addresses are stored in browser localStorage only, not on our servers
  • We cannot access your wallet or sign transactions on your behalf

However, be aware that:

  • If you use your wallet address in a search query or API request, that address may appear in our server logs or analytics
  • We do not intentionally link wallet addresses to user identities, but usage patterns could potentially be correlated
  • Wallet connections are at your own risk; ensure you are using legitimate, secure wallet extensions

Blockchain Data and Privacy

Public Nature of Blockchain Data

All blockchain data is inherently public and permanent. This includes:

  • All Bitcoin transactions
  • All Kontor smart contract interactions
  • All token transfers
  • All addresses and their balances

The Platform displays this public blockchain data. We make no ownership claims to blockchain data and have no ability to modify, delete, or hide blockchain transactions.

Search Privacy

When you search for or view blockchain data on the Platform:

  • Your search queries are logged in server logs and analytics
  • The addresses, transactions, or contracts you view may be recorded
  • This activity could potentially be correlated with your IP address

If you wish to maintain privacy when viewing blockchain data, consider using privacy tools such as VPNs or Tor (subject to our sanctions compliance requirements).

On-Chain Correlation Risk

Connecting a wallet to the Platform and broadcasting transactions creates permanent on-chain records that link your wallet address to the Platform usage. This blockchain activity is public and permanent.

Location of Processing

We process and store information primarily in the United States through our hosting provider Vercel. Third-party service providers (Usermaven, Adobe, upstream blockchain APIs) may process data in various locations worldwide.

These jurisdictions may have privacy laws that differ from those in your country of residence. By using the Platform, you consent to the transfer of your information to the United States and other countries where we or our service providers operate.

Data Retention and Security

Retention Periods

  • Server logs: Subject to our standard log retention policies
  • Analytics data: Retained by Usermaven according to their privacy policy
  • Browser localStorage: Persists on your device until you manually clear it
  • Blockchain data: Public blockchain data is permanent and cannot be deleted

We do not maintain long-term storage of personally identifiable information.

Security Measures

We implement reasonable technical and organizational security measures to protect information under our control, including:

  • HTTPS encryption for all communications
  • Content Security Policy headers
  • Secure server configuration
  • Regular security updates

However, no internet transmission or electronic storage is completely secure. We cannot guarantee absolute security. You use the Platform at your own risk.

Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, port, object to, or restrict certain processing, and to withdraw consent where applicable.

To exercise any rights or ask questions about your information, contact contact@kor.space.

Communications

We do not collect email addresses and therefore do not send email communications, newsletters, or marketing messages.

Platform updates, policy changes, or important notices will be communicated through the Platform website itself.

Security Incidents

If we become aware of a data breach affecting personal information, we will:

  • Investigate the incident promptly
  • Take steps to mitigate harm
  • Comply with applicable data breach notification laws
  • Provide notice through the Platform, our website, or other lawful means as required

However, given the minimal personal data we collect, the risk of significant data breaches is reduced compared to services that store extensive user data.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

  • We will update the "Last Updated" date at the top of this policy
  • Material changes will be prominently posted on the Platform
  • Continued use of the Platform after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

Children's Privacy

The Platform is intended for individuals 18 years of age or older. We do not knowingly collect personal information from minors under 18.

If we become aware that we have collected personal information from a minor without parental consent, we will take steps to delete such information promptly.

If you believe a minor has provided information to us, please contact us at contact@kor.space and we will delete it.

Contact

If you have any questions about this Privacy Policy or our data practices, contact us at:

contact@kor.space