Privacy

Draft for legal review. This text is not final and does not apply yet. Parts in [brackets] are still to be filled in.

The short version

We store nothing about you. No accounts, no database, no analytics, no tracking cookies. What your browser asks the Solana network passes through our server without being logged.

Who is responsible

[Trade name], Rotterdam, the Netherlands, KvK [KvK number]. Contact: [email address].

What happens when you use SolLock

Hosting. Cloudflare serves this website. Like any web server, it receives your IP address and browser details in order to deliver the pages and protect the site from attacks. We have switched off logging for our own server code. Cloudflare processes this data for us under its data processing agreement. [Lawyer: Cloudflare DPA, transfers outside the EU under the EU-US Data Privacy Framework.]
Rate limits. To stop abuse, Cloudflare counts how many requests come from your IP address each minute, in memory. The counts are not stored by us.
Blockchain requests. To build a lock and to find your locks, your browser asks the Solana network questions through our server, for example the balance of a wallet address. Those questions contain public addresses. Our server passes them on to our network providers, Helius and, as a backup, Alchemy, without your IP address or browser details, and does not log them.
Prices. Our server fetches today's SOL price from CoinGecko. CoinGecko never sees you or your request.
Nothing from other sites. Fonts and code come from our own domain. There are no third-party scripts, ads or trackers.
Your browser. Your browser remembers your theme, your currency and the wallet you connected last (in local storage), so you don't have to choose again. This never leaves your browser and is not used to track you. You can clear it in your browser settings.
Your wallet. Your wallet app is not ours. It has its own privacy policy.

The blockchain is public

A lock is a transaction on Solana. It is public and permanent: anyone can see your wallet address, the amount, the unlock date and, for a gift, the recipient's address. Nobody can delete it, including us. A gift links the recipient's address to yours, so think about that before you lock a gift.

Why we may process this

Delivering the website and keeping it safe is our legitimate interest. Passing on the blockchain requests you make is needed to provide the service you ask for. [Lawyer: confirm the legal bases under Article 6(1)(b) and (f) GDPR.]

Your rights

You have the right to access, correct and delete your personal data, and to object to its use. Because we store nothing about you, there is usually nothing for us to show or delete, but you can always ask. If you are unhappy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

If this statement changes, the new version appears on this page. [Date of this version.]