Privacy notice

Last updated: 9 October 2026

1. Who we are

Latch is an early-access service that puts part of a winning trade away in a commitment you can't easily spend. This notice covers latch.finance, the waitlist at latch.finance/waitlist and the app at app.latch.finance. Latch is operated from the United Kingdom and is the controller of the personal data described here.

For questions about this notice or your data, send a direct message to @latchfinance on X.

2. The short version

  • Wallet addresses and their transactions are public blockchain data. We read them; we never get access to your funds.
  • Signing to claim a waitlist spot is a free message. It moves nothing.
  • We don't sell your data, we don't use it for advertising, and we use no advertising or tracking cookies.

3. What we collect

On the waitlist

  • Wallet addresses you paste, connect or sign with, and the public trade history of those wallets, which we read to make your card.
  • The handle on your card, exactly as you type it. We don't check it against X and you don't sign in to X.
  • A signature from each wallet on your card, to show the wallet is yours.
  • Your email address, only if you enter it and tick the box that lets us email you.
  • Your country, worked out from your connection.
  • Survey answers, only if you open the optional survey from your card. That link carries your card code, so we can read your answers next to your card's figures.
  • A hashed IP address. We combine your IP address with a secret value and keep only the result, to count requests and stop abuse. We don't store your IP address itself.

In the app

  • The wallet you connect and the commitments you create: the name and goal you give them, the asset, how they unlock, your cut and your weekly limit.
  • The public sales of that wallet. We watch them so a sale in profit can fund your commitment, and we read the wallet's trade history to work out whether a sale was in profit.
  • A record of each contribution and skim, including the transaction it came from.

On every page

  • Page visits: the page, the site that sent you, your country, and your browser and device type. They are counted without cookies and don't identify you.

4. How we use it, and our legal basis

  • To make your card, give you a place in line and run the app. Legal basis: performance of our agreement with you.
  • To email you about Latch, only if you asked us to. Legal basis: your consent, which you can withdraw at any time.
  • To keep Latch secure and working, for example by limiting how many requests one connection can make. Legal basis: our legitimate interest in a secure, working service.
  • To decide where referral rewards apply. UK rules on promoting cryptoassets don't allow referral rewards, so we use your country to switch them off in the UK. Legal basis: compliance with the law.
  • To understand how Latch is used and what to build next, from page visits and survey answers. Legal basis: our legitimate interest in improving the product.

5. Your card is public

Once you claim a card, anyone with its link can see your handle, the share of your wins you kept, your diagnosis, the symbol of your best trade and, unless you chose to hide them, the dollar amounts. Hidden amounts are removed on our servers before the card is made. Your wallet addresses are never shown on the card.

6. Cookies and browser storage

  • A referral cookie called ref, set when you arrive through a friend's link, so their referral counts when you claim. It lasts 30 days and is only sent to latch.finance/waitlist.
  • Settings kept in your browser: your light or dark choice on latch.finance, whether waitlist sounds are muted, and the name of the wallet you last connected in the app. They stay on your device.

We use no advertising or tracking cookies, and page visits are counted without cookies.

7. Who we share it with

We don't sell your data. We share it only where it is needed to run Latch:

  • Service providers that run Latch for us, such as our hosting, database, analytics, form and email providers. They act only on our instructions and handle only what their part of the service needs.
  • Blockchain data providers, which receive the wallet addresses we look up so they can return those wallets' public transactions.
  • Regulators, law enforcement or courts, where the law requires it, or to establish or defend legal claims.

Transactions you sign in the app are recorded on a public blockchain. Anyone can see them, and neither we nor anyone else can delete them.

8. International transfers

Some of our providers are based outside the UK, for example in the United States. Where your data is transferred outside the UK, we rely on the safeguards allowed under UK data protection law, such as the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses with the UK Addendum, so your data keeps a similar level of protection.

9. How long we keep it

  • Scan results nobody claims, and signing requests: deleted within a day.
  • Request counts used to stop abuse: deleted after two days.
  • Cards, waitlist entries, scanned trade history and emails: kept until the waitlist closes or you ask us to delete them.
  • Commitments and contribution records in the app: kept while the early-access app runs, or until you ask us to delete them. Records already on a blockchain can't be deleted.
  • Survey answers: kept while we use them to plan Latch, or until you ask us to delete them.

10. Security

Data is encrypted in transit. Our databases refuse access by default: only our servers can reach them, and our internal tools have read-only access that can't see email addresses. We never ask for your seed phrase or private keys. In the app, the most Latch can take from your wallet is the weekly limit you approve in that wallet, and you can revoke it at any time. No system is perfectly secure, but we take protecting your data seriously.

11. Your rights

You have the right to:

  • see the data we hold about you
  • correct data that is wrong
  • have your data deleted
  • ask us to restrict or stop using your data
  • object to uses based on our legitimate interests
  • receive a copy of your data in a portable format
  • withdraw your consent at any time, for example to emails

To use any of these, send a direct message to @latchfinance on X.

12. Complaints

If you're unhappy with how we handle your data, please send a direct message to @latchfinance on X first so we can put it right. You can also complain to a data protection regulator. In the UK that is the Information Commissioner's Office (ico.org.uk). Elsewhere, it is the data protection authority in your country.

13. Age

Latch is for adults. We don't knowingly collect data from anyone under 18.

14. Changes to this notice

We'll update this notice as Latch changes, and change the date at the top. If a change affects how we use data you've already given us, we'll tell you before it takes effect, by email if you gave us one.

15. Contact

For questions about this notice or your data, send a direct message to @latchfinance on X.