For foundations For delegates About Contributions Github Blog

Privacy Policy

Effective date: 9th of January, 2026

Blockful ("Blockful", "we", "us", or "our") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect information when you access or use our website https://www.blockful.io (the "Website").

This Policy is designed to comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the Brazilian General Data Protection Law (LGPD).

1. Data Controller

Blockful is the data controller responsible for the processing of personal data described in this Policy.

For any privacy-related questions, contact us at:
Email: contact@blockful.io

2. Information We Collect

We collect limited data, and only what is necessary to operate, analyze, and improve the Website.

2.1 Information You Voluntarily Provide

You may choose to provide personal data when you:

  • Contact us via forms or email
  • Subscribe to updates or newsletters

This may include:

  • Name
  • Email address
  • Organization or role
  • Message content

We do not collect sensitive personal data.

2.2 Website Analytics Data

We use two analytics tools, each with different privacy characteristics.

a) Umami Analytics (Always Active)

We use Umami, a privacy-focused analytics tool, to understand general Website usage.

  • Umami does not use cookies
  • Umami does not collect personally identifiable information
  • IP addresses are anonymized
  • No cross-site tracking
  • No user profiling

Data collected by Umami includes:

  • Page views
  • Referring URLs
  • Browser and device type (aggregated)

This processing is based on our legitimate interest in understanding Website performance, in accordance with GDPR Article 6(1)(f) and LGPD Article 7(IX).

b) PostHog Analytics (Consent-Based)

We use PostHog to collect more detailed analytics and interaction events only after you explicitly accept analytics cookies via our cookie banner.

PostHog may collect:

  • Interaction events (e.g., button clicks, page navigation)
  • Session duration
  • Device and browser information
  • Anonymized or pseudonymized identifiers

PostHog is disabled by default and is activated only after consent.

The legal basis for this processing is your consent (GDPR Article 6(1)(a), LGPD Article 7(I)).

You may withdraw your consent at any time via our cookie settings.

3. Cookies and Similar Technologies

  • Essential cookies may be used for basic Website functionality.
  • Analytics cookies (PostHog) are used only after consent.
  • Umami does not use cookies.

You can manage or revoke consent through your browser settings or our cookie banner at any time.

4. Sharing of Your Information

We may share information with:

  • Service Providers: Third-party vendors that help with analytics, email delivery, hosting, and other services.
  • Legal Compliance: If required by law, regulation, or legal process.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (with protection of your data).

We do not sell personal information to third parties.

5. How We Use Your Data

We use collected data to:

  • Respond to inquiries
  • Send requested updates or content
  • Ensure readability and performance
  • Respond to inquiries and support
  • Improve content and user experience
  • Ensure security and prevent abuse

We do not sell or rent personal data.

6. Data Sharing and Processors

We may share data with trusted service providers, including:

  • Analytics providers (Umami, PostHog)
  • Hosting and infrastructure providers
  • Email communication platforms (if applicable)

All services providers are bound under strict contractual data processing agreements (DPAs) and confidentiality obligations.

7. International Data Transfers

Some services providers may process data outside your country of residence. Where these transfers occur, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses (SCCs)
  • Adequate data protection frameworks

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law.

Analytics data is retained in aggregated or anonymized form to prevent identification.

9. Your Rights

Depending on your location, you have the right to:

  • Access your data
  • Correct inaccurate data
  • Request deletion
  • Withdraw consent
  • Object to processing
  • Data portability

To exercise your rights, contact us at:
Email: contact@blockful.io

10. Children's Data

This Website is not intended for children under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be published on this page with a revised "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

Email: contact@blockful.io
Website: https://blockful.io