Security & Privacy

Practical controls for a read-only crypto safety workflow.

Read-only API access

We only request read-only permissions. FiraCrypto cannot trade, withdraw, or modify your exchange accounts in any way.

Server-side secret handling

Payment, database, notification and admin secrets stay server-side and are not returned in public API responses.

Public Abuse Protection

Expensive public scanner and report endpoints are rate-limited, and API traffic receives security headers.

No Data Selling

We do not sell trading data. Report and contact details are used to deliver the requested safety workflow.

Threat analysis

Threat Model & Mitigations

API key compromise

Read-only keys cannot execute trades or withdrawals. Revoke exchange keys at the exchange if a credential is no longer needed.

Data exposure

Public API errors use generic messages with request IDs while detailed failures stay in server logs.

Man-in-the-middle attack

Production traffic uses HTTPS/TLS, and browser responses include security headers such as HSTS, nosniff, frame denial, referrer policy and a permissions policy.

Admin access

Admin routes use server-side user checks and configured admin email allow-lists before exposing review data.

Data governance

Data Retention Policy

We keep data only where it is needed for reports, account workflows, support, reliability or abuse prevention. You can request deletion at any time.

Data TypeRetentionPurpose
Report order details6 years after the orderDeliver the requested report and keep accounting records
Lead and contact emailUntil you ask us to delete it, and no longer than 24 months after our last contactSend the requested scan or report follow-up
Account and watchlistWhile your account is openRun your watchlist rescans and email alerts
Server logs and analyticsShort-lived hosting logs; analytics (with consent) up to 14 monthsReliability, abuse prevention and product diagnostics

Delete My Data

You can request complete deletion of your account and all associated data at any time. Email [email protected] or use the account settings workflow where available. See the privacy policy for details.

Safe scanning workflow

Check crypto risk without handing over control

FiraCrypto separates investigation from control. Start with public, read-only checks, compare the evidence across tools, and only move to a written report when the decision needs a clearer audit trail.

Token checks do not need custody

Public token scans use contract data and security signals, so you can start with a contract address instead of connecting a wallet.

scan a token contract for free

Wallet checks should start with exposure

Address screening helps flag known scam, phishing, drainer, mixer and sanctions signals before you decide whether deeper review is needed.

check a wallet address for exposure

Report decisions need evidence

A written token safety report gives you a shareable review path when an automated result shows risk, uncertainty or missing data.

inspect a sample token safety report

Security FAQ

Does FiraCrypto need permission to trade or withdraw crypto?

No. FiraCrypto's public token and wallet checks are designed around read-only safety review. It does not ask for trading or withdrawal permission.

Can I scan a token without connecting a wallet?

Yes. The free token risk scanner works from a token contract address and supported chain, so a wallet connection is not needed for a public contract check.

What should I do if a scan shows risk?

Treat the result as an investigation signal, not financial advice. Recheck the address, review the evidence, compare related tools and consider a written report for decisions that need a clearer audit trail.

Legal Disclosures

Read the full terms of service and privacy policy.

Not Financial Advice

FiraCrypto provides informational tools and risk indicators only. Nothing on this platform constitutes financial, investment, legal, or tax advice. Always do your own research and consult with qualified professionals before making financial decisions.

No Guarantee of Loss Prevention

While we strive to provide accurate and timely alerts, FiraCrypto cannot guarantee prevention of financial losses. Risk indicators are probabilistic estimates based on available data. Market conditions can change rapidly, and our analysis may contain errors or delays.

Service Limitations

FiraCrypto is not a custodian, broker, or trading platform. We do not hold, trade, or transfer any cryptocurrency on your behalf. We are not registered as a financial adviser, broker-dealer, or investment adviser in any jurisdiction.

Jurisdiction

FiraCrypto services are provided from the United Kingdom. Users are responsible for ensuring their use of the platform complies with applicable local laws and regulations. Service may not be available in all jurisdictions.

Security Questions?

If you have security concerns or want to report a vulnerability, please contact us.