Privacy
The operator of this site (unmaskcrypto.io) is Unmask, an independent project. This page says what the site keeps about its visitors, which is very little, and where it is kept.
No accounts
There is nothing to sign up for. The site has no accounts, no passwords and no mailing list, and asks for no name or email address.
No cookies of ours, with one exception
The site sets no cookie to track you. The one cookie of ours a visitor can receive, unmask_endpoint, is set only if you choose a set of public nodes on the Chain tab; it holds the name of that choice, nothing else, and lasts for the browser session. A second cookie, unmask_swap_owner, exists only in the operator's own browser, to test the swap panel; no visitor receives it.
Your browser keeps your own settings
The site stores your own settings in your browser's local storage: the theme, whether the data panel is folded, the chart's settings, the personal labels and followed wallets you set on the Profiles pages, and whether you have accepted the swap panel's terms. This stays on your device; it is never sent to us and we cannot see it. Export and Import on the Profiles pages move it as a file that you keep. Clearing the site's data in your browser removes it.
Cloudflare
The site is delivered through Cloudflare, which sees every request (your IP address and your browser's headers) and keeps its own logs under its privacy policy. Cloudflare may set its own security cookies when it challenges a visitor; on an ordinary visit it sets none (checked on 8 October 2026).
Our server
Our server writes one line per request: the time, the path asked for, the answer's status and how long it took. The visitor is written as a hash of the IP address with a secret that changes every time the service restarts; the address itself is never written to disk. The server also keeps, in memory only, a per-visitor count of requests keyed on the IP address, to limit how fast one visitor can ask; it is forgotten an hour after the last request and whenever the service restarts. The request lines are kept for 30 days and then deleted. We do not sell or share them.
Profiles you look up
When you look up an address, the server renders that address's profile and keeps a dated copy of the page (for the "saved at" link and to compare later). The copy holds the address's public data, not who asked for it. The copies are kept bounded in number and size; the oldest go first.
The swap panel
The swap panel on the Chart page, where it is offered to you, works with the wallet extension in your own browser. It asks the wallet for your public address only when you press Connect. We never see your keys or your seed phrase, and the page talks to no site but this one.
To quote and build a swap, the page sends our server your wallet's public address, whether you buy or sell, the amount and the slippage. Like every request, this passes through Cloudflare. Our server passes the address and those figures on to the Uniswap Labs API, which handles them under its own privacy policy, and to public Base nodes, to read the address's balance and approvals and to simulate the transaction. They see our server's address on the network, not yours.
Our server does not keep your address, your quotes or your transactions. An answer is held in its memory for a short time (an identical quote is reused for 10 seconds) and is never written to disk; the request line in its log holds the path, never what was sent. It keeps daily counts of how many quotes and transactions were asked for, with no address in them.
A swap is a public transaction on Base. Your address, the amounts and the fee paid to our wallet are public records of that network, and our index reads them as it reads every trade in the pool; the transfers our fee wallet receives are kept as part of it.
We may refuse an address in the panel, when the law or the terms of the Uniswap Labs API require it; that list holds addresses and nothing else. Uniswap Labs is a trademark of Uniswap Labs.
If you write to us we keep the correspondence for as long as it takes to deal with it.
Your rights
Under the UK's data protection law you can ask what we hold about you and ask for it to be corrected or deleted. For most visitors the answer is that we hold nothing that identifies you. The controller is the operator of Unmask, reachable at the contact address below.
Changes
We may change this page; the version in force is the one published here, with its date above.
Contact: [email protected].