Not in force. Written on 18 October 2026 from what the site does; counsel hasn't reviewed it yet, and the operating entity isn't named yet ([Operating entity — to be named]). Notes marked [pending counsel] are legal choices still open
Privacy notice
How Blocktronics uses personal data: what it keeps, why, for how long and who else receives it. A draft written from what the site stores today, for counsel to review, with a note marked [pending counsel] wherever a legal choice is still open.
1. Who is responsible
[Operating entity — to be named] decides how personal data on Blocktronics is used.
[pending counsel] The controller's name and address, whether a representative or a data protection officer is needed, and the supervisory authority you can complain to.
2. Your account and sign-in
Your account is your wallet address: you sign in by signing a message with it, and a wallet address is public on its chain. We keep the address, the display name if you set one, when the account was made and when it was last used.
Signing in uses a one-time code (a nonce) that is valid for 10 minutes, and then a session cookie that keeps you signed in for 14 days, or until you sign out.
3. Email and Telegram
Both are optional. An email address is used only after you confirm it with a 6-digit code, which expires in 15 minutes; only a one-way code of it is kept. It receives the alerts you send to email, the weekly digest and, if you subscribe, the market brief. You can remove it on your account page.
You can subscribe to the market brief with an email address and no account: we keep the address, your preferences and, for each issue sent, the address it went to.
Every alert email and weekly digest has a one-click unsubscribe link, and so does the brief. When a link stops alert emails, we keep a one-way code (a SHA-256) of the address it was sent to, not the address.
Linking Telegram (with /start) keeps your chat id and, when Telegram sends it, your @username; alerts you send to Telegram go to that chat. You can unlink it at any time.
4. What you make
- Dashboards, with the last 100 versions of each. Deleting one can be undone.
- Alerts: their sentences, including any webhook address in them, their state, and every notification they sent with what happened on each channel.
- Card designs, hubs and the images you upload for a hub. Hub images are public to anyone with their link, and can't be deleted from the site yet.
- Your watchlist, when you sign in with one.
- If you apply to the research programme: your name, your X handle, links, your reach, writing samples and a bio, and the posts you publish.
5. Credits, swaps and rewards
Your credits are a ledger: each row is what was added or spent, on which action and page.
A swap quote sends the aggregator (KyberSwap and 0x) the chain, the two tokens and the amount. To build the transaction it also sends your wallet address, which Blocktronics doesn't store. Your recent swaps are kept in your own browser.
When you collect a swap reward, your account keeps that transaction's hash, the chain, the two tokens and its dollar value, so each swap counts once.
6. The referral program
Opening someone's referral link sets a cookie on this site for 60 days, holding a random id, so that an account you make in that time is credited to them. A second cookie shows “Invited by …” for 6 hours. If your browser sends Global Privacy Control or Do Not Track, neither is set.
To count a visit once a day without storing an IP address, we keep a one-way code (an HMAC) of the IP address and browser; when an account is credited, a one-way code of the network, to spot many sign-ups from one place. Neither can be turned back into an address.
The person who shared the link sees the short form of your wallet, when you first used Blocktronics and whether you went on to pay; not what you do. If you're an affiliate, we keep your payout wallet and your referrals and commissions.
[pending counsel] Whether the referral cookie needs consent first under ePrivacy rules, and whether showing a referred account's short wallet to the referrer is acceptable.
7. Measuring the site
Without your consent we count visits anonymously, and store nothing in your browser for it. The server combines the date, a shortened form of your IP address and your browser's description into a code, with a random key replaced every day and never stored, so the code can't be traced back to you or linked across days. We never store your IP address.
With your consent (Accept on “Help improve Blocktronics”), your browser keeps a random id so we can see how the site is used across visits; if you're signed in at the time, your activity is linked to your account. The prompt asks again after 395 days. If your browser sends Global Privacy Control or Do Not Track, it counts as a No and the prompt doesn't show.
We record the pages you open (for a page about a person or a private dashboard, only the kind of page), the features you use, the type of device, light or dark mode, the site that sent you and campaign tags in the link, page speed and errors (their type, never their content). Never what you type, your email address or your wallet address.
Detailed records are deleted after 90 days; daily totals that identify no one stay. With consent, a record of the weeks you visited is kept for 395 days after your last visit. Analytics choices, at the foot of every page, turns it off or deletes what was recorded under your id (and your account, if you're signed in).
No third-party analytics tool receives these events.
[pending counsel] Whether the anonymous count needs consent under ePrivacy rules, and whether the periods above are the right ones.
9. AI apps and AI features
When you connect an AI app to your account, we keep only one-way codes of its tokens: an access token lasts an hour and a refresh token 90 days, and each is deleted a day after it expires. Account keys are kept the same way. You can revoke either on your account page.
Some features use Claude, from Anthropic, when this server is set up with it: Ask to build (what you type and the dashboard you have open), writing an alert in plain words (your sentence) and describing a hub (your sentence). What you type there goes to Anthropic to answer it.
[pending counsel] Naming Anthropic as a processor, and the transfer it involves.
10. Who else receives data
- The swap's aggregators (KyberSwap and 0x), as above.
- Telegram: your chat id and the message, for alerts you send there.
- Our email provider: your address and the message, for every email.
- Chain nodes (our RPC provider, or public nodes): the addresses and transactions the site reads, such as a wallet you look up or a swap's transaction when you collect its reward.
- Anthropic, as above, when you use those features.
- The webhook addresses and agents you name in an alert receive what it sends.
Nothing in the site sends personal data to advertisers or data brokers, and none of it is sold. The Blocktronics data backend receives tokens and chains to answer, never your account.
[pending counsel] Naming the email provider and the hosting provider (Railway is the plan) as processors, with where each stores data.
11. How long it's kept
- Sign-in nonces: 10 minutes. Sessions: 14 days. Email and Telegram codes: 15 minutes.
- An AI app's tokens: until a day after they expire.
- Analytics: 90 days for detailed records; 395 days after your last visit for the consented weeks.
- Everything else (the account, its email and Telegram details, what you make, notifications, the credits ledger, swap rewards, referral records, the brief's sends) is kept while the account exists. Nothing deletes it automatically yet.
[pending counsel] A retention period for each kind of record, including the financial records (credits, rewards, referrals) after an account closes.
12. Your choices and rights
On the site today you can remove your email, unlink Telegram, unsubscribe from any email, delete your alerts, designs and posts, delete dashboards, revoke account keys and connected apps, and turn analytics off or delete it under Analytics choices.
Deleting an account and exporting its data aren't built into the site yet.
[pending counsel] The rights that apply (access, correction, erasure, restriction, objection, portability, withdrawing consent, complaint) and how a request is made and answered until the tools are built.
[pending counsel] Who may use the site (a minimum age) and how children's data is handled.
13. Why we may use it
Proposed for review: running your account and what you ask for, under our agreement with you; the anonymous visit count and keeping the service secure, under our legitimate interest; analytics with an id, and the brief, under your consent.
[pending counsel] The legal basis for each use above.
14. Where it's processed
The hosting and the processors aren't named yet.
[pending counsel] Where data is stored and processed, and the safeguards for any transfer outside the EEA.
15. Changes and contact
This notice will change as the site does. Questions about your data: Blocktronicsxyz@gmail.com.
[pending counsel] How changes are announced, and a dedicated privacy contact.