Privacy

CoinShadow watches public blockchain addresses and sends you a message when they move. It needs very little about you to do that, and it asks for nothing it does not need.

Last updated 5 September 2026.

What is stored

Everything below is held in one database. There is no separate profile, no marketing list, and no advertising identifier.

Your Telegram user id, which is a number. It is how the bot knows which chat to reply to.
The addresses you watch, any name you give them, whether you have paused their alerts, and the minimum dollar value you set for each.
Alert history — which transaction was sent to you and when. Kept for 30 days, then deleted automatically. It exists to stop the same transaction being announced twice.
Payment records — the address you said you pay from, the transaction hash, the amount, the status, and the dates.
Support messages — what you typed, and your Telegram id so the reply reaches you.
A half-finished question, while the bot is waiting for your answer. It expires after ten minutes.

What is not stored

No email address. No phone number. No password. No wallet connection and no private key at any point: watching an address is reading something already public, and this system has no way to move anything.

Your Telegram display name is not kept. The bot sees it on each message and uses it in the moment, but the only identifier written down is the numeric id.

This site sets no cookies and carries no analytics. It runs one script, which copies an address to your clipboard when you press Copy.

Where it runs

These companies process data on CoinShadow's behalf:

Cloudflare — serves this site and runs the code behind the bot.
Supabase — the database, hosted in the European Union, in the eu-central-1 region, which is Frankfurt.
Alchemy — reads the Base blockchain and tells CoinShadow when a watched address moves. It is given the addresses being watched. It is not given your Telegram id or anything else about you.
Telegram — delivers every message. Your conversation with the bot is a Telegram conversation and Telegram's own terms apply to it.

The public pages also use aggregated activity data from Dune Analytics. That is chain-wide information about addresses; it contains nothing about CoinShadow users.

The public pages

The wallet and token pages on this site show only what is already public on the Base blockchain: addresses, transfers, amounts and timing. They are not built from anything users tell us, and watching an address in the bot does not publish it here.

Payments

Payment is made in USDC on the Base network, sent from your own wallet to a receiving address. CoinShadow never holds your funds and has no key that can move them. The transaction itself is public on Base, as every transaction on that chain is.

Deleting everything

Send /delete to the bot, or open My plan and choose Delete my data. It asks once, then removes your account, the addresses you watch, their names and thresholds, your alert history, and your support messages.

Payment records are kept, with your account id removed so they no longer point at you. They are needed to account for money that actually moved. Everything else goes.

There is nothing to wait for and nobody to email: the deletion happens when you press the button.

The free and paid plans

The free plan watches 3 addresses. The paid plan watches 25. Neither changes what is stored about you, only how much of it there is.

Asking about this

Use the Support button in the bot. That is the only contact route, and it reaches the person who runs the service.