Legal

Privacy policy.

How we handle personal information collected through www.ocint.com.

Effective October 26, 2026.

Who we are

This website is operated by Blockchain Unmasked LLC ("OCINT", "we", "us"), 2 N. Central Ave, Suite 1800, Phoenix, AZ 85004. Questions about this policy or your information go to [email protected].

What this policy covers

This policy covers www.ocint.com: the pages you read and the three forms on it, for demo requests, general contact and active incident reports. It doesn't cover:

  • The OCINT platform at app.ocint.com. Information that customers and their authorized users handle there is governed by our agreements with those customers.
  • BlockchainUnmasked, which runs victim scam reporting and managed investigative services under its own privacy policy. Individual scam reports are made on its site, not this one; our victims page links there.
  • Other websites we link to, such as LinkedIn, X and YouTube, which have their own policies.

What we collect

What you send us. When you use a form, we receive what you enter:

  • Demo request: your name, work email, organization, role, team, approximate cases per month, and what you'd like to see.
  • Contact: your name, work email, organization, reason for contact, and your message.
  • Incident report: your name, work email, organization, a phone number if you give one, your organization type, when the incident started, the chains, assets and approximate amount involved, transaction hashes, wallet addresses, and a description of what happened. The form also sends your browser's time zone, so we read the start time correctly, and a reference number it shows you.

The incident report asks for transaction and wallet details so we can assess the incident. Please don't send case evidence or victim details through the demo or contact forms, and never send a private key, seed phrase or password through any form.

What your browser sends. Like any website, ours receives technical information when you visit: your IP address, browser and device type, the pages you request and when. Our hosting and security providers process this to deliver the site and protect it from abuse.

What we don't do. We don't run analytics or advertising trackers on this website, and we don't build profiles of visitors.

How we use it

  • To reply to your message, arrange a demonstration you asked for, or assess and respond to an incident you reported.
  • To follow up about that request and keep a record of our business communications.
  • To keep the site and its forms working and protect them from spam and abuse.
  • To meet legal obligations.

We don't sell your personal information or share it for advertising.

If you're in the European Economic Area or the United Kingdom, we rely on our legitimate interests in responding to inquiries and incident reports and keeping the site secure, and on taking steps you ask for before entering into a contract.

Who processes it

We use the service providers below. Web3Forms, DigitalOcean and Google Workspace process information on our behalf to provide their service. hCaptcha, Cloudflare and YouTube also use the information they receive for their own purposes, such as detecting bots and attacks or running and improving their services, under their own privacy policies.

ProviderWhat it doesWhat it receivesPrivacy policy
Web3FormsDelivers form submissions to our inboxWhat you enter in a formweb3forms.com/privacy
hCaptchaChecks that a form is sent by a person, not a bot (form pages only)Browser and interaction data used to tell people from botshcaptcha.com/privacy
CloudflareDelivers the site and protects it from attacksIP address, browser data, pages requestedcloudflare.com/privacypolicy
DigitalOceanHosts the siteIP address and request logsdigitalocean.com/legal/privacy-policy
Google WorkspaceOur email, where form submissions and replies are keptYour messages and our repliespolicies.google.com/privacy
YouTube (Google)Shows the thumbnails for the videos on our News page (that page only)IP address and browser datapolicies.google.com/privacy

Cookies

This site doesn't set cookies of its own. Cloudflare sets a short-lived security cookie (__cf_bm, which expires after about 30 minutes) to tell people from automated traffic. On pages with a form, hCaptcha may set cookies for the same purpose. We don't use analytics or advertising cookies.

How long we keep it

We keep demo requests, contact messages and incident reports, and our correspondence about them, for 24 months after our last exchange, unless they become part of a customer relationship or an engagement, in which case that agreement applies. Our providers keep technical logs for the periods in their own terms.

Your choices and rights

You can ask us to tell you what information we hold about you, correct it, delete it, or stop using it. Email [email protected] and we'll respond within 30 days. We may need to confirm your identity first. Depending on where you live, you may also have the right to complain to a data protection authority.

Security

The site is served over encrypted connections (HTTPS), and form submissions are delivered to a company email inbox that only authorized members of our team can read. No system is perfectly secure, so please don't send more sensitive case material through the website than the forms ask for.

International transfers

Our providers process information in the United States and other countries. Where the law requires it, transfers rely on the providers' standard contractual safeguards.

Children

This website is meant for professionals and isn't directed at children under 16. We don't knowingly collect their information.

Changes to this policy

If we change this policy, we'll post the new version here with a new effective date.

Contact

Blockchain Unmasked LLC, 2 N. Central Ave, Suite 1800, Phoenix, AZ 85004. Email [email protected].