Privacy Policy
Last updated — data minimization by design
Nocturne is built on a simple idea: the safest data is the data we never collect. This policy explains the little we do handle and why.
1. What we collect
- A funding reference — the on-chain transaction used to load a card.
- A contact, if you give one — an email or messaging handle, only so we can send your invite or receipts.
- Minimal technical logs — coarse, short-lived records needed to keep the service running and to prevent abuse.
2. What we never collect
We do not ask for, and do not store:
- Your legal name
- Government ID, passport, or document scans
- A selfie or biometric data
- Proof of address
- Source-of-funds paperwork
3. How we use what little we have
- To provide, secure, and support the card service
- To send invites and the messages you ask for
- To detect and prevent fraud and abuse
4. Analytics
To see roughly how many people visit and which pages they read, we use Google Analytics. It sets a cookie and shares that aggregate usage data with Google. We keep it to high-level traffic counts — your account, card, and funding details are never sent to it.
5. Sharing
We share data only with the processors and issuing institutions strictly necessary to operate the cards, and when required by valid legal process. We do not sell your data — we cannot sell what we never collected.
6. Retention
We keep operational data only as long as needed for the purposes above or as required by applicable law, then delete or anonymize it. Deleting your account destroys its credentials immediately and permanently — sign-in, recovery and every session end at that moment. Records of transactions and balances are retained for as long as financial regulation and valid legal process require, and are then disposed of on the same terms as everything else.
7. Security
Sensitive details are shown once and protected in transit. Because there is no identity dossier on file, there is far less to compromise.
8. Your choices
You can unsubscribe from messages at any time, and you can request deletion of any contact details you shared by emailing us.
9. International
Nocturne is operated by Nocturne Labs Limited from Hong Kong. By using the service you understand your information may be processed there and in other locations where our providers operate.
10. Changes
We may update this policy; material changes will be reflected here.
11. Contact
Privacy questions or deletion requests: [email protected].