Last revised: May 27, 2026

1. Introduction

Bubblemaps ("Bubblemaps", "we", "us", or "our") is committed to protecting and respecting the privacy of the natural persons interacting with its services ("Users", "you", or "your"). The legal entity responsible for the processing of personal data described in this Privacy Policy is identified in the General Terms.

This Privacy Policy ("Privacy Policy") explains how Bubblemaps collects, uses, shares, retains, and protects your personal information ("Personal Data") when you visit the website at https://bubblemaps.io/ (the "Website"), use the application at https://app.bubblemaps.io/ (the "Application"), or otherwise interact with Bubblemaps' services (collectively, the "Services").

Bubblemaps provides an analytical tool for digital ecosystems, transforming blockchain data into an engaging, visually interactive experience. This Privacy Policy describes why and how we may collect and process Personal Data, and the rights you have in relation to your Personal Data.

This Privacy Policy supplements, and is to be read together with, the Bubblemaps General Terms and Conditions and any dedicated terms applicable to specific features of the Services.

2. Purpose of this Privacy Policy

The purpose of this Privacy Policy is to set out, in a transparent and accountable manner, how Bubblemaps collects and processes Personal Data. Bubblemaps complies with Regulation (EU) 2016/679 (the "GDPR"), the Estonian Personal Data Protection Act, and any other applicable data protection law.

3. Eligibility

Bubblemaps does not allow persons under the age of 18 to use the Services and does not knowingly collect Personal Data from minors. If you become aware that a minor has provided Personal Data to Bubblemaps, please contact us at [email protected] so that we may take appropriate action.

4. Personal Data Collected, Purposes, and Legal Bases

Personal Data is any information relating to an identified or identifiable natural person. The categories of Personal Data that Bubblemaps may process, the purposes of such processing, and the corresponding legal bases under Article 6 of the GDPR are set out below.

Personal Data collected Purpose of processing Legal basis
Email address; non-custodial Wallet connection (e.g., Metamask). Service delivery. To provide and manage access to the Services, process your purchases (including paid features), manage your User Account, and communicate with you about the Services. Performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR) where applicable.
Email address; first and last name; nationality; date of birth; content of messages sent to Bubblemaps (e.g., feedback, questions, job applications). Communication. To respond to your enquiries, process job applications, and communicate with you regarding the Services or Bubblemaps. Performance of a contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)); consent (Art. 6(1)(a)) where applicable.
Email address (where you subscribe to communications, e.g., via the "Let's be friends" banner). Marketing. To send you newsletters, product updates, and information about the Services. Consent (Art. 6(1)(a)), which you may withdraw at any time.
IP address; technical and audience measurements (e.g., feature interactions, error logs, settings preferences); browser version; time zone. Service operation and improvement. To provide, troubleshoot, secure, and improve the Services, prevent fraud and abuse, and ensure the security of Users. Legitimate interest (Art. 6(1)(f)) of Bubblemaps and its Users in operating, securing, and improving the Services.
Identification, contact, and transaction data, where required by applicable AML, CTF, or sanctions screening obligations. Legal and regulatory compliance. To comply with anti-money laundering, counter-terrorism financing, sanctions screening, and other legal obligations applicable to Bubblemaps. Legal obligation (Art. 6(1)(c)); legitimate interest (Art. 6(1)(f)) in detecting and preventing unlawful activity.

4.1. Blockchain-related processing

You acknowledge that blockchains, by design, provide a high level of transparency into transactions and that Bubblemaps is not responsible for preventing or controlling information broadcast on a blockchain.

Where the use of the Services involves interaction with one or more blockchains, certain data — including data that may qualify as Personal Data under the GDPR — may be processed and recorded on such blockchains. Bubblemaps does not operate, manage, or control these blockchains, and therefore has no power to determine the means or purposes of such processing, nor to modify, erase, or restrict such data once recorded. The exercise of your rights under Section 7 is necessarily limited with respect to data recorded on blockchains.

5. Third-Party Service Providers

Bubblemaps may engage third-party service providers ("Subcontractors") to assist in operating the Services and processing Personal Data on its behalf. Categories of Subcontractors include, without limitation: