Privacy Policy

• Public blockchain data. Your wallet address, your bskts account address, and the transactions and balances linked to them. This is public data on Robinhood Chain and other networks; we read it to show you your account and to run the Products.
• Log-in data. Log-in is provided by Privy. If you log in with an email code, a Google, X or GitHub account or a passkey, Privy processes that identifier and creates or links a wallet for you; your email or social account can be shown to you in the Products, but we do not store it on our servers. We record only which log-in method you used.
• Your eligibility record. When you set up an account: your wallet address, the statement and Terms version you signed, your signature, the country you declared, the country your connection came from (worked out by our hosting provider from your IP address at that moment — the IP address itself is not stored), your log-in method and the time.
• Orders and preferences. Automated orders you place (their type, limits and the account they belong to), and votes or preferences you submit, stored so we can carry them out or show them.
• Correspondence. If you contact us: your name, email address, the topic and your message, plus a one-way hash of your IP address that lets us stop repeated abuse without keeping the address. Messages you send us on X, Discord or other channels are also received by us.
• Technical data. Your IP address and basic request data (such as browser type) pass through our hosting provider, Cloudflare, which uses them to serve the site, protect it (including bot checks at log-in) and apply regional restrictions. Our relayer uses your IP address, in memory only, to rate-limit requests. Our server logs can contain wallet addresses and transaction hashes. We measure aggregate page views and visits with Cloudflare Web Analytics and Umami. Neither uses cookies, stores your IP address or tracks you across sites.
• Browser storage. The Products keep data in your browser’s local storage: your settings and cached views, a note that you have accepted the current Terms, and your trading key — a private key that never leaves your browser and is never sent to us. Privy keeps its own log-in session data in your browser. You can clear any of it through your browser settings; clearing the trading key means setting it up again.

We do not screen your wallet with blockchain-analytics providers today; we may start to, to comply with sanctions and financial-crime laws, and if we do, your wallet address will be shared with them for that purpose.

• To provide the Products — show your account, relay your transactions, carry out your orders, and run and improve the Products.
• For eligibility and legal compliance — to enforce the restrictions in our Terms (including sanctions and the countries where bskts is not offered), keep a record of what you declared and signed, and meet requests from regulators, courts and law enforcement.
• For safety and security — to prevent, investigate and stop fraud, abuse, attacks and illegal activity, and to enforce our Terms.
• For support — to answer your questions and messages.
• In aggregate — to understand how the Products are used, without identifying you.

We share data only as follows:

• Service providers that run the Products for us, bound to use the data only for that: Privy (log-in and embedded wallets), Cloudflare (hosting, security, regional restrictions and analytics), Umami (analytics), Supabase (our database), Railway (hosting for our relayer, keeper and price engine), blockchain data providers such as Alchemy (reading the chain), and Across (cross-chain deposits, when you use one).
• Legal obligations — in litigation, regulatory proceedings and compliance, and when compelled by subpoena, court order or other legal process.
• Safety and security — when we believe it is needed to prevent harm to you, us or others, or to enforce our Terms.
• Business changes — to a successor in a merger, acquisition, reorganisation, sale of assets or similar transaction.
• With your consent, at any other time.

We do not sell your data, and we do not share it with anyone for their marketing. Transactions you make are published to the blockchain by their nature, where anyone can see them.

We do not use advertising or cross-site tracking cookies. Privy and Cloudflare may set cookies or browser storage that log-in and site security need. Our analytics are cookieless and aggregate. You can block or clear cookies and storage in your browser; some features, such as staying logged in or trading without a pop-up, will then stop working.

The Products link to and rely on services we do not control — wallets, Privy, bridges, liquidity pools, token issuers, block explorers and social platforms. When you use them, they may collect data under their own privacy policies, which we encourage you to read.

Our YouTube channel. We publish videos to the bskts YouTube channel (@bsktsxyz) using YouTube API Services. That use covers our own channel only: we upload and edit our videos, read our channel’s statistics, and read and reply to public comments left on our videos. We do not ask for access to your YouTube or Google account, and we do not store or share YouTube data about you; comment text and display names are read to reply to them and are not kept in our systems. When you watch our videos or interact with the channel, YouTube and Google process your data under the YouTube Terms of Service and the Google Privacy Policy. You can see and revoke any app’s access to a Google account at Google’s security settings.

We keep your eligibility record for as long as you use the Products and for [RETENTION PERIOD — to be completed] afterwards, as a compliance record. Correspondence is kept as long as needed to deal with it and any follow-up. Order and preference data is kept while it is needed to run the Products. Server logs are kept for a short period. Data on a blockchain is permanent and outside our control.

We use reasonable administrative, technical and physical safeguards to protect the data we hold. No system or transmission over the internet is completely secure, and we cannot guarantee the security of your data. You are responsible for the security of your wallet, keys, log-in and devices.

Our service providers process data in several countries, including the United States and India. Where the law requires it, we rely on appropriate safeguards for those transfers.

Depending on where you live — for example under the EU or UK General Data Protection Regulation or the California Consumer Privacy Act — you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable form, and withdraw consent you have given. You will not be treated differently for exercising these rights.

We cannot change or delete data on a blockchain. We may keep data we are legally required to keep, or need to resolve disputes, prevent fraud or enforce our Terms — including your eligibility record — even after a request. We process data because it is needed to provide the Products under our Terms, to comply with the law, for our legitimate interests in running and securing the Products, or with your consent.

To make a request, contact us. We may ask you to prove that the data or wallet is yours, for example by signing a message with your wallet. You may also complain to your local data-protection authority.

The Products are for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe we have, contact us and we will delete it.

If we make a material change to this policy, we will tell you through the Products and update the date above. Continuing to use the Products after a change means you accept it.

Questions about this policy or your data: bskts.xyz/contact, or write to [LEGAL ENTITY and REGISTERED ADDRESS — to be completed].