Privacy policy
This policy explains what personal data FIVE TECH SOLUTIONS LLC ("Phantom", "we") processes when you use the Phantom mobile application and this website, why we process it, and what rights you have. It is written to meet the requirements of Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The controller for the processing described here is:
FIVE TECH SOLUTIONS LLC
34745 56th Ave S
Auburn, WA 98001-5003, United States
Email: support@phantomapp.io
2. What we do not have
- We do not have your recovery phrase or private keys. They are generated on your device and are never transmitted to us.
- We cannot move, freeze or restore your funds.
- We do not have your device passcode or biometric data. Biometric unlock is handled entirely by your operating system and never leaves your device.
- The app requires no account, no email address and no identity verification. We do not know who you are.
3. What we process
In the app
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Wallet addresses you view | Fetching balances and transaction history from public blockchains via node infrastructure providers | Art. 6(1)(b) — performance of contract | Processed transiently; not stored on our servers |
| Device model, OS version, app version | Crash reporting and compatibility | Art. 6(1)(f) — legitimate interest in a working app | 90 days |
| Email address and message content | Only if you contact support yourself | Art. 6(1)(b) — handling your request | 12 months after the ticket is closed |
The app contains no advertising SDKs and no third-party behavioural analytics.
IP addresses
When the app queries blockchain data, your IP address is technically visible to the node infrastructure it connects to. This is unavoidable for any wallet that reads chain state. We do not log these IP addresses on our own systems; the infrastructure providers process them under their own privacy policies.
4. Website
This website is hosted by Netlify, Inc., San Francisco, USA. Netlify processes standard server logs (IP address, requested page, timestamp, user agent) for up to 30 days for security and operations, on the basis of Art. 6(1)(f).
The site's fonts are loaded from Google Fonts (Google LLC, USA). When a page loads, your IP address is transmitted to Google to deliver the font files. If you object to this, most browsers can block third-party font requests; the site remains readable with system fonts.
Cookies
This website sets no cookies and runs no analytics. There is nothing to consent to, which is why you see no cookie banner.
Newsletter
If you sign up for product updates, your email address is processed by Netlify Forms on our behalf and used solely to send you the updates you requested, on the basis of your consent (Art. 6(1)(a)). You can withdraw at any time via the unsubscribe link in any email or by writing to us; your address is then deleted.
5. Who receives data
| Recipient | Function | Location |
|---|---|---|
| Apple Inc. / Google LLC | App distribution (App Store, Google Play) | USA |
| Netlify, Inc. | Website hosting, newsletter form | USA |
| Google LLC | Font delivery on this website | USA |
| Blockchain node infrastructure providers | Reading public chain data, broadcasting transactions | Various |
Transfers outside the EEA
We are a US company and the providers above process data in the United States. Where GDPR applies, these transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses as implemented by the respective provider.
6. Public blockchains
Transactions you broadcast are written to a public ledger. They are permanent, visible to anyone, and cannot be deleted or corrected — by us or by you. Where a blockchain address can be linked to you, that record is outside the reach of the erasure and rectification rights described below. Consider this before transacting.
7. Your rights
Under the GDPR you may request access to your data (Art. 15), correction (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), portability (Art. 20), and you may object to processing based on legitimate interest (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.
To exercise any of these, write to support@phantomapp.io. We respond within one month. You also have the right to complain to the data protection supervisory authority of your place of residence.
8. Security
All communication between the app, this website and our infrastructure is encrypted in transit (TLS). Key material is generated and stored exclusively on your device and is never part of any transmission to us. Access to support correspondence is limited to the people who handle it.
9. Children
Phantom is not directed at people under 16 and we do not knowingly process their data.
10. Changes
We update this policy when our processing changes. The date at the top always reflects the current text; material changes are announced in the app before they take effect.