Privacy · Last updated 1 November 2026

Privacy notice

We collect as little as possible. We never ask for, and you should never send, private keys, seed phrases, passwords or devices.

01Who we are

GhostYield Estate (“we”, “us”) provides read-only cryptoasset inventory and date-of-death valuation reports to probate solicitors, executors’ advisers and crypto accountants in the UK and US. For the purposes of UK GDPR we act as controller for enquiry and contact data, and generally as processor for estate data you send us on behalf of your client.

02What we collect

Enquiry data: your name, work email, firm, and the approximate number of wallets, submitted through our forms.

Matter data: public blockchain addresses, the date of death, and any reference you give us. Public addresses are pseudonymous but can relate to an identifiable deceased person or beneficiaries, so we treat them as confidential.

Technical data: standard server logs from our hosting provider (such as IP address and browser type) kept for security. We do not use advertising cookies or cross-site tracking.

03What we never collect

We never request or accept private keys, seed or recovery phrases, exchange passwords, hardware wallets or device access. Our analysis reads public blockchain data only. If you send any of these by mistake, we will delete them and tell you.

04How we use it

To reply to your enquiry, prepare and deliver the report you request, send the checklist you ask for and occasional practice notes (you can unsubscribe at any time), keep business records, and protect the service from abuse.

Lawful bases: performance of a contract or steps before one, our legitimate interests in running and securing the service, consent for optional marketing emails, and compliance with legal obligations.

05Who we share it with

Service providers acting for us: website hosting (Vercel), form handling (Formspree), email, and blockchain data and pricing providers. Address queries to blockchain data providers contain public addresses only, never names. We do not sell personal data.

Some providers are located outside the UK or EEA; where they are, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

06How long we keep it

Enquiries that do not become matters: up to 12 months. Matter data and reports: for the period agreed with your firm, by default 6 years to support later queries from HMRC or the IRS, then deleted. You may ask us to delete matter data earlier, subject to our legal obligations.

07Your rights

Depending on where you are, you may have rights to access, correct, delete, restrict or object to the use of your personal data, to data portability, and to withdraw consent. UK residents may complain to the Information Commissioner’s Office (ico.org.uk). Contact us using the pilot form on our homepage and we will respond within one month.

08Security

Access to matter data is limited to the people preparing the report, data is encrypted in transit, and reports are delivered to the requesting professional only.

09Changes

We will update this notice when our practices change and revise the date at the top of the page.