Privacy Policy

The types of Personal Data that we collect directly from you or from third parties depend on the circumstances of collection and on the nature of the service requested. It may include (but is not limited to):

• (a) personal information that links back to an individual, e.g., name, date of birth, and personal identification numbers;
• (b) contact information, e.g., address, phone number and email address;
• (c) technical information, e.g., IP address, browser type, device type, operating system, log data, API access logs, and metadata related to interactions with our services;
• (d) usage and behavioural data, e.g., browsing activity on our platform, search queries, access times, referral sources, and interactions with blockchain explorer features;
• (e) statistical data, e.g., aggregated, anonymized insights derived from website traffic, user behaviour, and engagement metrics.

(collectively, “Personal Data”).

By continuing to access our Site, you warrant that you are at least 18 years of age and expressly consent to our collection, storage, use and disclosure of your Personal Data as described in this Privacy Policy. We will not process any Personal Data of minors under 18 years of age.

This Privacy Policy covers any Personal Data provided to us:

• when you engage with our products and services;
• when you create an account with us; or
• under any other contractual agreement or arrangement.

Some of the other ways we may collect Personal Data include (but are not limited to):

• communications with you via email;
• when you visit our Site;
• when you contact us in person;
• when we collect information about you from third parties and other channels including our support helpdesk.

We process your personal data for the following purposes:

• Providing and improving services (analytics, debugging, feature enhancement)
• Customer interaction and support (responding to emails, updates, events)
• Security and fraud prevention
• Legal compliance

For required data (e.g., contact information for support), the legal basis is contract or your consent. For technical data (e.g., IP, cookies), we rely on legitimate interests to maintain and improve our services. We comply with GDPR transparency requirements.

Midnight Explorer only reads blockchain data (transactions, blocks, pools, contracts, etc.) from public nodes or APIs and displays it. We do not treat this as personal data, as it is publicly available by design. We do not associate this data with individuals beyond displaying publicly available information.

We use cookies (e.g., to store theme or language preferences) and may use analytics tools such as Google Analytics. Cookies help recognize returning users, store preferences, and measure traffic.

Essential cookies are enabled by default, while analytics/marketing cookies may require consent. You can disable cookies anytime via your browser settings.

• Analytics: Google Analytics
• Advertising networks: Google AdSense (if applicable)
• CDN and hosting: e.g., Cloudflare (for performance and DDoS protection)
• Midnight node providers: e.g., Blockfrost, Project Midnight API

We only share necessary data with partners for specific purposes. We do not sell personal data. Third-party cookies are governed by their respective policies.

• Cookies: up to 1 year
• Access logs: ~6 months
• Analytics data: 12–24 months
• Account data: until deletion request or account termination (whichever comes first)

We follow data minimization principles and retain only necessary data.

Your personal data may be stored and processed in other countries (e.g., Singapore, United States). We comply with applicable data transfer laws:

• For EU users: Standard Contractual Clauses (SCCs)
• For Vietnam: compliance with PDPL regulations

• Access: Request a copy of your data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion under certain conditions
• Restriction: Request limitation of processing
• Portability: Request data in a transferable format
• Opt-out: For California users, opt out of data sale/sharing
• Withdraw consent: At any time
• Non-discrimination: No penalty for exercising your rights

We will respond within legal timeframes (GDPR: 1 month; CCPA: 45 days).

We implement technical and organizational safeguards, including:

• Encryption of sensitive data
• Multi-factor authentication
• Access control
• Regular updates and backups

Users are responsible for maintaining account security.

We do not knowingly collect data from children under 13 (or under 7 under Vietnamese law without parental consent). If such data is identified, it will be deleted promptly upon notification.

Midnight Explorer does not use personal data for automated decision-making or profiling with legal effects. Any displayed analytics are informational only and not financial advice.

We may update this Privacy Policy as required. Changes will be posted on the website and, where appropriate, notified via email. Continued use constitutes acceptance of updates.

• Email: contact@midnightexplorer.com
• Address: Hanoi, Vietnam

We aim to respond within 30 days.

This Privacy Policy is governed by the laws of Vietnam. Disputes will first be resolved through negotiation; failing that, they will be handled by competent courts in the applicable jurisdiction.