Privacy policy

Effective from 20 October 2026.

Who handles your data

The data controller is MB Codearmory, company code 306047013, registered at Šumsko g. 166, LT-02196 Vilnius, Lithuania. Trail Forensics is a service provided by MB Codearmory. Privacy contact: contact@trailforensics.com.

What data we handle

• Contact details: your name, email address and, if you give it, your phone number.
• Case information you provide yourself: what happened, transaction numbers, wallet addresses, screenshots of conversations and other documents.
• Public blockchain data about the addresses and transfers you name. Anyone can see it, but combined with your information it can become personal data.
• Billing data: invoices and payment information (payment status and the Stripe payment reference; we never receive card details).

We never ask for passwords, seed phrases or access to your wallet.

Why, and on what legal basis

• To answer your enquiry and make an offer: steps at your request before a contract (GDPR Art. 6(1)(b)).
• To provide the service, tracing the money and preparing the report and requests: performance of a contract (Art. 6(1)(b)).
• To keep accounting records: legal obligation (Art. 6(1)(c)).
• To defend legal claims if a dispute arises: legitimate interest (Art. 6(1)(f)).

Who receives the data

• Our server hosting provider, with servers in the European Union.
• The payment provider Stripe Payments Europe, Ltd. (Ireland), when you pay for the initial assessment. Only Stripe handles card details; we never see them.
• Email providers. Mail sent to contact@trailforensics.com is forwarded to a Google (Gmail) mailbox. Google may process data outside the EU under the EU–US Data Privacy Framework and standard contractual clauses.
• Exchanges, token issuers (for example Tether), the police or your lawyer – only at your request or with your consent. We usually prepare the requests for you, and you send them.
• Public authorities – when the law requires it.

We do not sell data and do not use it for advertising.

How long we keep it

• Enquiries that do not lead to a contract: 12 months.
• Case files: for the duration of the service and 10 years after, the general limitation period in Lithuania. We delete earlier on request where the data is not needed for legal obligations.
• Accounting records: as long as Lithuanian law requires.

Website, cookies and analytics

The website uses no cookies, analytics or advertising tracking. Your language choice is remembered only in your browser. What you enter in the case form is sent over an encrypted connection to our server in the EU and kept as your case material. To pay, you are taken to the Stripe payment page, which uses its own cookies under the Stripe privacy policy.

Your rights

You may access, correct, erase, restrict and port your data, and object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time. Write to contact@trailforensics.com; we answer within one month.

If you believe your data is processed unlawfully, you may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).

Security

Data travels over encrypted connections. Case files are kept on access-restricted servers, and only the people working on a case can open them.

Changes

When our data handling changes, we update this policy and the date at the top.