Privacy Policy
Data controller
For the purposes of the EU General Data Protection Regulation (GDPR) and Luxembourg data-protection law, the data controller is [Nodz legal entity name],[registered address, Luxembourg]. For any privacy request, contact [email protected] (or our data protection contact at [[email protected] / DPO details]).
What data we collect
We keep data collection deliberately minimal. We process:
- Wallet addresses: public blockchain addresses you connect or look up. Addresses you save to your dashboard watchlist are stored locally in your browser; when you view leaderboard/points data, the address is sent to our backend to return the associated public staking statistics. When you ask for a sale price, your browser sends your connected wallet address to the swap routing service that prices the sale.
- Form data: information you voluntarily submit through our contact, institutional, wealth and careers forms, for example name, email address, company name, country, investment range, your message, and (for job applications) your LinkedIn profile and CV/résumé file.
- Technical data: IP address and basic request metadata processed for security, anti-abuse and rate-limiting (including via our anti-bot provider and our CDN), and IP addresses inevitably visible to the third-party services your browser contacts directly, such as RPC providers and swap routing services.
- Cookies / local storage: strictly necessary storage used to remember your wallet-connection state and your dashboard preferences. We do not use advertising or third-party behavioural-tracking cookies on this Site.
Wallet addresses and on-chain activity are public by nature on the blockchain. Please note that, combined with other information, a wallet address may be considered personal data.
Why we use it and legal bases
- To provide the Services (display staking and leaderboard data, enable wallet connection): performance of a contract / our legitimate interest in operating the Site.
- To respond to your enquiries and process institutional, wealth or job applications: taking steps at your request prior to a contract, and our legitimate interest in recruitment and business development.
- To secure the Site (fraud prevention, anti-bot, rate-limiting, logging): our legitimate interest in security and integrity.
- To comply with law (including AML and record-keeping where applicable): legal obligation.
International transfers
Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Data retention
We keep personal data only as long as necessary for the purposes above: enquiry and application data for the period needed to handle the request and any resulting relationship (and, for unsuccessful job applicants, no longer than permitted under applicable rules); security logs for a limited period; and data we must keep to meet legal or accounting obligations for the required statutory period.
Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise these rights, contact us using the details above. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission Nationale pour la Protection des Données (CNPD).
Security
We use appropriate technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and you are responsible for keeping your own wallet, keys and devices safe.
Contact
Questions about this Privacy Policy can be sent to [email protected]. See also our Terms & Conditions.