Privacy Policy | Onyx App

1. Information we collect

We collect the following categories of information, most of which is generated automatically when you use the Interface:

Wallet and blockchain information: When you connect a wallet, the Interface receives your public wallet address(es) and the network you are connected to. To display balances, positions, history, governance activity and points, the Interface (or services acting on our behalf) reads publicly available blockchain data associated with those addresses, including transaction hashes, block numbers, token balances, staking positions, votes and smart-contract events. Blockchain data is public, permanent and outside our control.
Points Program information: If you enrol a wallet address in the Onyx Points Program, we record that address, the time of enrolment, the on-chain and in-app activity used to calculate points, and the resulting points balance and leaderboard position.
Governance content: If you create a governance proposal or comment through the Interface, the title, description and any other content you submit is recorded together with your wallet address and is publicly visible on-chain and in the Interface.
Technical and usage information: Like most websites, our hosting infrastructure automatically logs information such as your IP address, approximate location derived from it, browser type and version, operating system, device type, language preference, referring URL, the pages you visit, the date and time of your visit and error diagnostics.
Locally stored information: The Interface stores certain information in your browser (cookies and local storage) so that it works correctly, for example your language selection, whether a wallet was previously connected, the status of pending bridge, swap and migration transactions, and unsent governance proposal drafts. This information stays on your device unless you clear it.
Communications: If you contact us, for example by email at legal@onyx.org, we collect the information you provide in that correspondence, including your email address and the content of your message.

2. How we use information

We use the information described above to:

provide, operate and maintain the Interface, including displaying your balances, positions, history and points;
construct the transactions you request so that you can review and sign them in your wallet;
operate the Points Program, calculate points and publish leaderboards;
remember your preferences, such as language and previously connected wallet;
monitor, secure and debug the Interface, detect and prevent fraud, abuse, sybil activity and security incidents;
comply with legal obligations, including sanctions screening and responding to lawful requests from authorities;
enforce our Terms of Service and protect our rights and those of other users;
analyse aggregate usage to understand how the Interface is used and improve it; and
respond to your enquiries and communicate with you about the Interface.

We do not sell your personal information, and we do not use it for cross-context behavioural advertising.

3. Legal bases for processing

Where data-protection law (such as the EU or UK General Data Protection Regulation) applies to our processing, we rely on the following legal bases:

Performance of a contract: to provide the Interface and the Points Program in accordance with our Terms of Service.
Legitimate interests: to secure, monitor, debug and improve the Interface, prevent abuse and enforce our Terms, provided those interests are not overridden by your rights.
Legal obligation: to comply with applicable laws, including sanctions and anti-money-laundering requirements.
Consent: where required, for example for non-essential cookies, in which case you may withdraw consent at any time.

4. Cookies and local storage

The Interface uses strictly necessary cookies and browser local storage to function. These are used to remember your language, maintain your wallet connection session, track the state of pending transactions across page reloads, and keep unsent drafts. We do not use third-party advertising or tracking cookies. You can delete cookies and local storage through your browser settings; doing so may reset your preferences and clear locally stored transaction records but will not affect any assets or on-chain data.

5. How we share information

We share information only in the following circumstances:

Service providers: We use third parties to host and deliver the Interface (including edge hosting and content-delivery providers), to index blockchain data, to provide RPC access to blockchain networks, and to supply market data. These providers process information on our behalf under contractual confidentiality obligations. Note that when your browser requests blockchain data, your IP address and the wallet address being queried may be sent directly to RPC node operators, indexing services and block explorers configured in the Interface.
Wallet providers and connection protocols: When you connect a wallet (for example via a browser-extension wallet or WalletConnect), information such as your wallet address, the Interface's domain and connection metadata is exchanged with your wallet provider and any relay service it uses, under that provider's own privacy policy.
Public blockchains: Transactions you sign are broadcast to public blockchains, where your wallet address and transaction details become permanently and publicly visible. We cannot remove or alter on-chain data.
Public leaderboards and governance: Wallet addresses, points totals and governance content are displayed publicly within the Interface.
Legal and safety: We may disclose information to courts, regulators, law-enforcement agencies or other third parties where we believe disclosure is required by law, or is necessary to protect the rights, property or safety of Onyx, our users or the public, or to enforce our Terms of Service.
Corporate transactions: If we are involved in a merger, acquisition, restructuring, financing or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
Affiliates: We may share information with our affiliates for the purposes described in this Policy.

6. Third-party services

The Interface links to and integrates third-party services, including wallet software, RPC providers, blockchain explorers, decentralised exchanges, bridges, price-data APIs and documentation sites. This Policy does not cover those services. We encourage you to review the privacy policies of any third-party service you use.

7. International transfers

We and our service providers may process information in countries other than the one in which you reside, including the British Virgin Islands, the United States and the European Union. Those countries may have data-protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards for such transfers, such as standard contractual clauses.

8. Data retention

We retain technical logs for a limited period as needed for security, debugging and abuse prevention. Points Program records are retained for as long as the program operates and thereafter as needed to resolve disputes or comply with law. Information held in your browser's local storage remains until you clear it. Blockchain data is permanent and is not controlled by us. We may retain information longer where required to comply with legal obligations, resolve disputes or enforce our agreements.

9. Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for the security of your wallet, private keys, seed phrase and devices. We will never ask you for your private keys or seed phrase.

10. Your rights and choices

Depending on where you live, you may have rights under applicable data-protection law, including the right to:

access the personal information we hold about you and receive a copy of it;
correct inaccurate or incomplete information;
request deletion of your information, subject to legal exceptions;
restrict or object to certain processing, including processing based on legitimate interests;
receive your information in a portable format;
withdraw consent where processing is based on consent; and
lodge a complaint with a data-protection supervisory authority in your jurisdiction.

To exercise any of these rights, email us at legal@onyx.org. We may need to verify your identity or your control of a wallet address (for example by asking you to sign a message) before acting on your request. Please note that we cannot modify or delete data recorded on a public blockchain, and that information stored only in your browser can be deleted directly by you.

You may disconnect your wallet at any time from within the Interface or your wallet software, and you may stop using the Interface at any time.

11. Children

The Interface is not directed to, and we do not knowingly collect personal information from, anyone under the age of 18. If you believe a person under 18 has provided us with personal information, please contact us at legal@onyx.org and we will take steps to delete it.

12. Do Not Track and similar signals

We do not use third-party tracking or advertising technologies, so the Interface behaves the same whether or not your browser sends a "Do Not Track" or Global Privacy Control signal.

13. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, for material changes, may provide additional notice within the Interface. Your continued use of the Interface after a revised Policy takes effect means you accept the changes.

14. Contact us

All privacy-related notices, questions, requests and complaints must be sent by email to legal@onyx.org. Please include "Privacy" in the subject line so that we can route your message quickly.