Privacy Policy

For the purposes of the EU General Data Protection Regulation (GDPR) and Luxembourg data-protection law, the data controller is Nodz S.A.R.L., a société à responsabilité limitée (private limited liability company), 21 Avenue de la Gare, L-1611 Luxembourg, registered with the RCS Luxembourg under no. B299456 (VAT number LU36828705; business permit no. 10185168/0, issued by the Luxembourg Ministry of the Economy). For any privacy request, contact [email protected] (or our data protection contact at [email protected]).

We keep data collection deliberately minimal. We process:

• Wallet addresses: public blockchain addresses you connect or look up. Addresses you save to your dashboard watchlist are stored locally in your browser; when you view leaderboard/points data, the address is sent to our backend to return the associated public staking statistics. When you ask for a sale price, your browser sends your connected wallet address to the swap routing service that prices the sale.
• Form data: information you voluntarily submit through our contact, institutional, wealth and careers forms, for example name, email address, company name, country, investment range, your message, and (for job applications) your LinkedIn profile and CV/résumé file.
• Technical data: IP address and basic request metadata processed for security, anti-abuse and rate-limiting (including via our anti-bot provider and our CDN), and IP addresses inevitably visible to the third-party services your browser contacts directly, such as blockchain node providers and swap routing services.
• Cookies / local storage: strictly necessary storage used to remember your wallet-connection state and your dashboard preferences. We do not use advertising or third-party behavioural-tracking cookies on this Site.

Wallet addresses and on-chain activity are public by nature on the blockchain. Please note that, combined with other information, a wallet address may be considered personal data.

• To provide the Services (display staking and leaderboard data, enable wallet connection): performance of a contract / our legitimate interest in operating the Site.
• To respond to your enquiries and process institutional, wealth or job applications: taking steps at your request prior to a contract, and our legitimate interest in recruitment and business development.
• To secure the Site (fraud prevention, anti-bot, rate-limiting, logging): our legitimate interest in security and integrity.
• To comply with law (including AML and record-keeping where applicable): legal obligation.

We do not sell your personal data. We share it only with service providers acting on our behalf, and only as needed:

• infrastructure, hosting and CDN/security providers (e.g. Cloudflare);
• our email-delivery provider, used to send and route form submissions;
• an anti-bot/captcha provider used to protect our forms;
• professional advisers, and the independent private-banking partners to whom we introduce eligible wealth clients (with your knowledge);
• authorities, where required by law or to protect our rights.

Separately, when you use the Services your browser communicates directly with public blockchain networks, blockchain node providers, swap routing services and block explorers; those interactions are governed by those parties’ own policies. Blockchain node providers are companies, some located outside the EU (including in the United States), that operate access points to public blockchain networks: they receive your public wallet address when your browser reads your balances and positions.

Some of our providers, and some of the services your browser contacts directly (such as blockchain node providers), may process data outside the European Economic Area, including in the United States. Where we transfer personal data outside the EEA, we rely on an adequacy decision (such as the EU-US Data Privacy Framework, for certified US companies) or the European Commission’s Standard Contractual Clauses.

We keep personal data only as long as necessary for the purposes above: enquiry and application data for the period needed to handle the request and any resulting relationship (and, for unsuccessful job applicants, no longer than permitted under applicable rules); security logs for a limited period; and data we must keep to meet legal or accounting obligations for the required statutory period.

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details above. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission Nationale pour la Protection des Données (CNPD).

We use appropriate technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and you are responsible for keeping your own wallet, keys and devices safe.

Questions about this Privacy Policy can be sent to [email protected]. See also our Terms & Conditions.