1. Who we are and what this policy covers
This privacy policy applies to:
- Validator Tools desktop application – the local-first GUI you install on your own machines.
- ethertool.org website – including landing pages, documentation and downloads.
“We”, “our” and “us” refer to Validator Tools OÜ, registered in Estonia and operating the Validator Tools product.
2. Desktop app privacy model
Validator Tools desktop is built as a local-first control panel. By default it does not send validator data, keys or operational history to any hosted backend operated by us.
2.1 What the app connects to
The app communicates only with endpoints you configure, for example:
- Beacon node and validator client APIs (e.g. Lighthouse, Teku, Prysm, Nimbus, Lodestar),
- execution layer RPC endpoints,
- optional remote signers, HSMs or custody services that you configure.
These connections run directly between the desktop app and your infrastructure. Traffic is not proxied through our servers.
2.2 Data stored locally by the app
To provide its functionality, the app may store the following data locally on your machine:
- connection settings for Beacon, execution and signer endpoints,
- local copies of validator metadata and state needed to build and track runs,
- run history and configuration (e.g. exit plans, consolidation runs, MEV policy choices),
- preferences such as language, theme and UI layout.
Storage is typically in configuration files or a local database under your user profile. You can remove this data by uninstalling the app and deleting its configuration directory.
2.3 Keys and signing material
Validator Tools is designed so that signing keys remain under your control:
- the app prepares unsigned payloads for exits, withdrawals, consolidations and BLS→Execution changes,
- signing is performed by your existing signing setup (local signer, Safe, HSM, or other remote signer),
- the app does not require you to send validator or withdrawal keys to our infrastructure.
If you choose to use optional features such as session keys or cached configuration, they are stored locally and remain under your control.
2.4 Telemetry, analytics and crash reports
By default, the desktop app is not designed to send telemetry, usage analytics or crash reports to us without your explicit consent.
If future versions add optional diagnostics or feedback mechanisms, they will be:
- off by default, or clearly opt-in,
- documented in the release notes and documentation,
- limited to the minimum necessary technical information.
3. Data we handle on the ethertool.org website
The public website is intentionally simple: it serves product information, documentation and downloads. We do not run third-party advertising or social tracking pixels.
3.1 Server logs
Like most websites, our servers may log basic technical information when you access the site, such as:
- IP address and approximate region,
- browser type and version,
- the pages you request and timestamps,
- basic error and performance information.
These logs are used to operate the service, prevent abuse, understand aggregate traffic patterns and diagnose issues. Logs are retained for a limited period and then deleted or anonymised.
3.2 Cookies and local storage
The website may use strictly necessary cookies or local storage to:
- remember simple preferences (for example, which section of the homepage you last visited),
- support navigation helpers between pages (e.g. scrolling to a section after navigation).
We do not use cookies for cross-site tracking or advertising.
3.3 Contact and support
If you contact us via hello@ethertool.org or any future contact form, we will process the information you choose to provide, such as:
- your email address and name,
- the content of your message and any attachments,
- related correspondence.
We use this information solely to respond to your request and keep a record of support interactions.
4. How we use and share information
We use the limited personal and technical data we have access to for purposes such as:
- operating and improving the website and downloads,
- responding to support and inquiry emails,
- monitoring and protecting the service against abuse and attacks.
We do not sell your personal data or share it with third parties for their own marketing purposes.
We may share information only in limited situations, for example:
- with service providers who help operate our infrastructure (subject to appropriate safeguards),
- if required to do so by law or in response to valid legal requests,
- to investigate or prevent abuse, security incidents or fraud affecting the service.
5. How long we keep information
We keep personal data only for as long as it is reasonably necessary for the purposes described in this policy, including:
- server logs – retained for a limited period for security and diagnostics, then deleted or anonymised,
- support correspondence – retained as long as needed to keep a useful record of issues and resolutions,
- any other data – kept no longer than required to provide the relevant functionality or comply with law.
6. Your choices and rights
Depending on where you live, you may have certain rights regarding your personal data, such as the right to access, correct or delete information we hold about you.
You can always:
- uninstall the desktop app and remove its local data from your machines,
- configure your Beacon / RPC / signer endpoints as you see fit,
- contact us at hello@ethertool.org to ask about any data we hold in relation to you (for example, support emails).
7. Changes to this policy
We may update this privacy policy from time to time, for example when we add new product features or change how the website is operated. When we make material changes, we will update the “last updated” date below and, where appropriate, provide additional notice.
Last updated: 2025