Ctrl+ArcZ is a non-custodial app for protected USDC transfers on the Arc network. We built it to move money safely, not to profile you. We collect no personal identity, hold no keys, and keep the data we do touch to the minimum the service needs.
Non-custodial · no accounts · no personal identity collectedThis policy explains how the Ctrl+ArcZ mobile app and website (together, the “Service”) handle information. Ctrl+ArcZ is a self-custodial tool: you connect your own wallet (such as MetaMask or Rabby) and it, not us, holds your keys and authorizes every transaction. The Service currently operates on the Arc test network, using test assets that hold no monetary value.
To provide the Service, we process a small amount of technical data:
| Data | Why | Where it lives |
|---|---|---|
| Public wallet address | To run the address-poisoning firewall against public on-chain history, prepare transfers, and show your activity. | In your browser/device and, transiently, on our backend during a request. |
| Transaction details (amounts, recipient addresses) | To create, escrow, claim, and settle protected transfers you initiate. | Recorded on the public blockchain (permanent and public by design). |
| Push notification token (only if you enable notifications) | To alert you when a payment involves your address. | Stored on our backend, linked to your address, until you turn it off or uninstall. |
| Camera (only when you scan a QR code) | To read a recipient address so the firewall can check it before you send. | Processed on-device in real time; images are not stored or transmitted. |
| Basic technical logs (e.g. IP address for rate limiting) | Security and abuse prevention on our backend. | Kept briefly on our server, then discarded. |
We use the data above solely to operate and secure the Service: checking recipients with the firewall, relaying and settling transfers you request, and: if you opt in: delivering notifications. We do not use your data for advertising, profiling, or resale, and we do not build a personal profile of you.
Transactions you make are written to a public blockchain. That data, your wallet address, amounts, and transfer history, is visible to anyone, permanent, and outside our control. We cannot edit or delete on-chain records. This is inherent to how blockchains work, not a choice we make.
The Service relies on a few infrastructure providers. When you use the relevant feature, limited technical data (such as your wallet address or a signed request) is shared with them to make it work. Each has its own privacy policy:
The Service is not directed to children and is not intended for anyone under 18. We do not knowingly process data from minors.
We may update this policy as the Service evolves. Material changes will be reflected by the “Last updated” date at the top of this page. Continued use after an update means you accept the revised policy.
Questions or requests about this policy or your data? Reach us at privacy@ctrlarcz.xyz.