Last Updated: 12 December 2025
Version: 1.4
This Privacy Policy explains how Tastenkunst GmbH ("we," "us," or "our") collects, uses, and protects personal data when you use:
The responsible party (Controller) for data processing under the General Data Protection Regulation (GDPR) is:
Tastenkunst GmbH
Hainstraße 11
04109 Leipzig
Germany
Email: info@tastenkunst.io
Eternl is a self-custody wallet.
Most data generated by your use of the Software is stored locally on your device or on the respective blockchain network. We do not maintain a central database of user profiles.
The Eternl Software stores data (e.g., encrypted private keys, settings, address books) locally in the storage of your end device (Local Storage, IndexedDB, Keychain). This storage is absolutely necessary for the provision of the telemedia service explicitly requested by you (the Wallet functionality).
Legal Basis: § 25 Para. 2 No. 2 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz). No consent (Cookie Banner) is required for this strictly necessary functional storage.
To provide our services, we use third-party infrastructure providers.
Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest). This processing is strictly necessary to maintain the availability, speed, and security of our services.
To display your balance and broadcast transactions, the Software communicates with blockchain nodes.
Legal Basis: Art. 6(1)(b) GDPR (Performance of Contract) and Art. 6(1)(f) GDPR (Legitimate Interest in network integrity).
Warning regarding Public Blockchains:
For most networks supported by the Software (e.g., Cardano), transactions you sign are broadcast to a public ledger.
Note regarding Privacy-Preserving Networks (e.g., Midnight):
If the Software supports privacy-focused partner chains (such as Midnight), different rules regarding visibility apply:
If you contact us via email, social platforms, or mail (whether for user support, business inquiries, job applications, or general contact):
Legal Basis:
If we introduce optional push notifications (e.g., transaction alerts), we will process a device token (e.g., an Apple Push Notification Service (APNs) token or Firebase Cloud Messaging (FCM) token) and the notification content needed to deliver the notification. The legal basis will generally be your consent (Art. 6(1)(a) GDPR) and, where applicable, § 25 TDDDG for storing/accessing information on your device. You can withdraw consent at any time in the app settings or in your device settings.
We will use push notification providers only as processors under Art. 28 GDPR and only to transmit the notification to your device.
If we introduce an optional messaging system that allows DReps and stake pool operators (SPOs) to send messages to their delegates, we expect messages to be published on the Cardano blockchain as transaction metadata (i.e., public, immutable ledger data). In that case, Tastenkunst processes this data to display, filter, and search messages in the app and (where applicable) to route message-related requests through our backend.
Please note:
If we introduce additional off-chain features (e.g., message delivery preferences, opt-outs, or push alerts), we will update this Privacy Policy and, where required, request your consent.
Features linking to third parties (e.g., Transak, Guardarian, Mercuryo) involve a direct relationship between you and the provider. We do not receive sensitive financial data or KYC documents. We may view pseudonymized transaction summaries for commission purposes.
If you use the Swap feature, the app uses third-party DEX aggregators. Your device sends quote and transaction-build requests to our backend service, and our backend forwards requests to the integrated aggregator APIs. This means the aggregators generally see the IP address of our server (not your personal IP address).
Data Shared: Depending on the swap and the aggregator, we forward technical trade parameters (e.g., assets, amounts, slippage settings) and your public wallet address (required for transaction construction). The selected aggregator returns an unsigned transaction (or transaction data), which is relayed back to your device for your review and signature.
Roles: The third-party aggregators and underlying DEX protocols act as independent controllers for their own processing. Tastenkunst acts as a controller for the relay/selection processing performed by our backend (e.g., selecting the best quote and relaying the unsigned transaction).
Clicking affiliate links (e.g., Ledger, Trezor) redirects you to the vendor. We do not receive personal purchase details, only aggregated commission statistics.
Where you obtain or use the Software via a platform provider (such as Apple App Store, Google Play, Microsoft Store, browser extension stores, or a mobile/desktop operating system), the platform provider may process certain information independently under its own privacy policy. Examples can include device identifiers, installation and update information, store diagnostics, and billing or subscription records for in-app purchases.
Tastenkunst does not control such processing by platform providers. Depending on the platform and your settings, Tastenkunst may receive limited information (for example, a purchase confirmation, refund status, or aggregated download metrics) to operate paid features and provide customer support.
You can consult the relevant platform provider’s privacy documentation and, where offered, adjust platform privacy/diagnostics settings; however, we cannot opt you out of processing that the platform provider performs as an independent controller.
If you delegate to our TITAN stake pools, your stake address and delegation amount are publicly visible on the blockchain. We do not process this data off-chain to identify natural persons unless you voluntarily disclose your identity.
We maintain profiles on social media platforms such as X (Twitter), Discord, and Telegram to communicate with the community.
When you visit or interact with our social media profiles, the respective platform provider processes personal data under its own responsibility and according to its own privacy rules (independent controller). We have limited influence over the platform’s processing (e.g., tracking, analytics, or advertising).
For certain platform features (for example, analytics/insights tools provided by the platform operator), the platform operator and we may be considered joint controllers within the meaning of Art. 26 GDPR for those specific processing operations. Where such joint controllership applies, the platform operator typically provides the primary information about data processing and offers the relevant rights mechanisms. In such cases, you may exercise your rights either with us or with the platform operator.
If you contact us via social media (e.g., direct message, mention), we process the content of your message and your publicly visible profile information to respond and for documentation purposes. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (legitimate interests in communication and support).
Some of our providers (Heroku, Cloudflare) are US-based.
You have the following rights:
To exercise these rights, please contact: info@tastenkunst.io
Right to Lodge a Complaint:
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence. The supervisory authority responsible for us is:
Sächsischer Datenschutzbeauftragter (Saxon Data Protection Commissioner), Dresden, Germany.
Although we are a German company, for users in the United States, the following applies:
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We collect data solely for the functionality of the Software (Business Purpose). You have the right to request access to or deletion of your specific personal information, subject to the technical limitations of the blockchain.
We implement technical and organizational measures (TOMs), including:
We may update this Privacy Policy to reflect changes in our processing, the Software, or legal requirements. The current version will always be available on our website and, where appropriate, in the Software.
If we make material changes (e.g., introducing new categories of processing such as push notifications or messaging features), we will provide an appropriate notice before the changes take effect and, where required by law, obtain your consent.