Privacy

What we store

On our own server (the VPS in Amsterdam):

• Your wallet: your wallet address and when you signed in.
• Your session: a sign-in session for 7 days; we keep only its fingerprint.
• If you connect X: your X user id and @username, the result of the age and follower check (and whether your points count in full or half), when you consented, and your signed link. A linked account stays recorded against your wallet for the season, so it cannot be linked to another wallet. We keep no X password and no X access token. We hand the access back the moment you are linked. We read nothing else from your X account.
• If you connect Telegram: your numeric Telegram id, when you linked, your signed link, and whether you were in our group at each weekly check. For group messages we keep the length, a fingerprint, the time and the message id, plus who replied to or reacted to whom. We never store message text.
• What you do on the board: your daily check-ins, the referral claims you sign, the pieces you submit (their URLs), and your signed ballots.
• What we paid you, which is public on chain anyway.

What is public

• short wallets, points and statuses on /season;
• the weekly list (wallet and amount);
• every ballot with its signature and weight;
• the links to the pieces you submit, next to your short wallet;
• if you opted in as a helper, links to your counted answers next to your short wallet.

Never published

Your X or Telegram account next to your wallet.

Server logs

nginx keeps IP, time and path for 14 days for abuse protection, without query strings on the API. A separate click log, for visits to /stake that carry a referral code, keeps IP, time, the referring wallet, the piece number and the referrer page for 14 days, so creators' links can be counted; only counts leave the server.

If you arrived through someone's link

Your sign-in text names that link's wallet and piece number, so the visit can count for its creator.

Deletion

• Data is kept until 30 days after the season's last payout (Thursday 4 February 2027, if the last payout goes out on Tuesday 5 January 2027), then deleted from the server and from every backup.
• If X tells us a post was deleted, or its owner asks, we delete our copy within 24 hours, as X's policy requires.
• "Delete my data" on the board (Rules tab) needs a fresh signature and erases everything at once. Any unpaid reward that depends on it is forfeited; payments already made stay on chain.
• What was already published stays: a week's ballot set before you deleted keeps your piece's link next to your short wallet, and the weekly lists and payments stay on chain.
• Questions go as replies to the pinned post in our main Telegram group.