Privacy

What we record about a visit

Enough to know which pages are useful and whether the site works. Specifically: which page was opened, whether an address was submitted, whether a result was shown, and whether someone clicked through to Telegram. Alongside each of those we store the referring website (the host only, never the full link), your browser family (“Chrome”, not the full user-agent string), and a two-letter country code.

How visits are counted without identifying you

Instead of a cookie or a stored IP, each visit gets a one-way fingerprint: a SHA-256 hash of a secret salt, your IP, your browser string and today's date. The IP itself is never written to disk.

Because the date is part of the hash, it changes every day. The same visitor tomorrow is a different, unlinkable value. There is no durable identifier, which is precisely why this site needs no cookie banner — a stored visitor ID would need one, so we do not use one.

The salt matters and is not decoration: an unsalted hash of an IPv4 address can be brute-forced across the whole address space in seconds, which would make the column a list of IPs in disguise. If the salt is not configured, the site stores nothing at all.

How long it is kept

Raw visit records are deleted after 90 days by an automatic job. Only aggregate counts survive beyond that.

Addresses you check

A wallet address you paste is public blockchain data. We use it to run the check, cache the result briefly so a repeat lookup is fast, and record that an address was checked so we can see which pages lead to real use. We do not link it to you: the only identifier attached is the daily hash described above.

We never ask for a private key, a seed phrase or a wallet connection, and there is nothing on this site that could accept one.

Who else sees it

Nobody. There is no analytics provider, no advertising network and no tracking pixel. The only third parties involved in serving this page are Google Fonts, which serves the typefaces, and the blockchain data providers we query to answer your check — those receive the address, not anything about you.

If you use the Telegram bot, Telegram's own privacy terms apply to that conversation.

Who operates this

OmniTrace is run by an independent developer, not a registered company. To ask what is held about you, or to have something removed, message @OmniTraceSupportBot. Because visit records carry no identifier that survives a day, there is usually nothing to find.