Skip to content

Pufferfish / Legal & research notices

Privacy Policy

How we handle website visits, messages and report-order inquiries, and how you can exercise your privacy rights.

Last updated

Reading, contacting us and buying a report

Pufferfish Research Group publishes this website. You can read a Study overview, browse the catalog or view report details without creating an account or providing payment information. This policy covers visits to our pages, email correspondence and order support. We do not sell personal information.

We sell our digital reports directly through this website when an edition is available. We handle order inquiries and privacy requests at [email protected]. Our digital report refund policy explains how to report a problem with a purchase.

We accept paid report orders only where we have opened sales to residents and local law permits the sale. Eligibility depends on where you ordinarily reside.

View current sales restrictions

Wherever you reside, you can read our public research, email us and exercise the privacy rights that apply to those interactions without placing an order.

Information we receive

When your browser requests a page or file, the host receives your IP address and the requested address. Request times, browser information, referring pages, response codes and security events may be recorded. Catalog searches and filters run in your browser and appear in the page address. Opening or sharing a filtered address can disclose the search words.

If you email us, we receive your email address, any name you give, your message, attachments and delivery details. For a missing file, incorrect charge or refund inquiry, give the order reference, report title and a description of the problem. Keep passwords, full card numbers, identity documents and brokerage or portfolio details out of your message.

The public pages do not take payment details. If an order needs attention, we may receive information from you or our order records, such as the edition purchased, payment or refund status and whether delivery succeeded.

When sales open, our shop will settle payments on-chain. Transaction records can include wallet addresses or other identifiers, an amount, a time and a transaction reference. On a public network, others may see these details and link them to other activity. Network records may persist even if we delete our own support correspondence. Check the network and visibility stated at checkout. Keep personal information out of transaction notes. Never send us a private key or recovery phrase.

How we use information

We use technical information to serve the pages, investigate errors and protect the site against abuse. We use correspondence to answer questions, review corrections and respond to complaints or privacy requests. Sending a message does not subscribe you to marketing.

Where a legal basis is required, our interests in running a secure, reliable site and answering inquiries support these activities, subject to your rights and interests. We use order information as necessary to fulfill your order or to help resolve a delivery or billing inquiry. We also process information to meet applicable legal obligations, including responding to valid rights requests. Where consent is required for an optional use, browsing a page does not give that consent.

Hosting, measurement and browser controls

Cloudflare provides hosting and network security. It can receive technical request information even if your browser blocks scripts. Cloudflare adds a Web Analytics script to hosted pages for traffic and performance measurement. The public site’s current content security policy blocks the external analytics script in browsers that enforce it.

The public research pages do not use advertising pixels, create cross-site advertising profiles or share personal information for cross-context behavioral advertising. This practice is the same whether or not your browser sends a Do Not Track or Global Privacy Control signal. Hosting security features may use technical identifiers. Your browser provides controls for cookies and site storage.

Read Cloudflare’s privacy policy and its Web Analytics description for details about these services.

Who receives information

Hosting and security services process web requests. Email providers handle messages. We use the order reference and details needed to resolve a delivery or payment problem. We may disclose information when legally required.

When our shop chat is enabled, its script loads on the page. Your browser can send your IP address and browser request details before you open the chat or send a message. We receive the information you choose to submit to the chat.

Hosting, messaging and order services may process information in other countries. You can use the publisher contact below to ask which provider handled information about you and, where applicable, what international transfer safeguards apply and how to obtain a copy.

How long we keep information

We keep support messages and order references for the time needed to answer the request, complete a remedy and handle related disputes. Tax, accounting or other legal duties may require transaction records to be kept longer. Technical log retention depends on the host’s service settings and the time needed to investigate security issues.

Email [email protected] to ask about a visit, message or order. An order reference is enough to start an inquiry. Please leave out wallet recovery phrases and full payment credentials.

Your choices and privacy rights

Depending on the law that applies to you, you may ask what personal information we hold about you, how we obtained and used it, and who received it. You may have the right to obtain a copy, request correction or deletion, restrict processing, receive your data in a portable format or object to processing based on legitimate interests. You may withdraw consent for future processing where consent was the basis. A legal duty to retain a transaction record can limit deletion.

Email [email protected] and describe the information or interaction involved. If we have reasonable doubts about your identity, we may ask for the minimum additional information needed to verify it. If the EU GDPR applies, we respond without undue delay and within one month of receiving your request. For complex or numerous requests, we may extend that period by up to two further months. We will notify you of the extension and the reasons within the first month.

If we decline a request, we will explain why and how you can seek review, including a complaint to a data protection authority or a judicial remedy where applicable. We will not discriminate against you for exercising your privacy rights.

Changes to this notice

Effective date for this version: . It applies to information handled under this version once posted.

For a material change, we will post a prominent notice on this website explaining what will change and when. If a new use requires consent, we will ask before using your information for that purpose.

Publisher and contact

Pufferfish Research Group publishes this website and its research. In these notices, “we”, “us” and “our” refer to the publisher. We handle our own shop orders, complaints and requests about personal information.

For general questions, privacy requests, complaints or corrections, contact [email protected]. Please avoid sending identity documents, passwords, account numbers or other sensitive information in an initial email.