Privacy Policy

1. Data We Collect

1.1 Information you provide

• Account information: email address, username, profile data, and authentication data when you sign in via Privy (including the wallet address you connect).
• User-generated content: readlists, ecosystem project submissions, wallet lists, and any other content you publish on the Service.
• Communications: messages you send us, including support requests.

1.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, referrer, and approximate location derived from your IP address. Collected via Vercel Analytics in a privacy-friendly, cookieless mode (no individual tracking identifiers stored on your device).
• Technical data: IP address, browser type, device type, operating system, language preferences, and timezone — used for security, debugging, and content delivery.
• On-chain data: when you connect a wallet, we associate publicly available on-chain activity (e.g., positions, trades, balances) with your session to display your dashboard. We do not store this on-chain data beyond what is necessary to render it.

2. Legal Basis for Processing (GDPR)

We process your personal data on the following bases:

• Contract performance — to provide you with the Service when you create an account or connect a wallet;
• Legitimate interest — to secure the Service, prevent abuse, improve features, and produce aggregated analytics;
• Consent — for optional features that require it (e.g., email communications you opt into);
• Legal obligation — to comply with applicable laws, court orders, or sanctions regulations.

Wallet addresses, when linked to an identifiable individual, are treated as personal data under GDPR (per the European Data Protection Board’s guidance on blockchain technology).

3. How We Use Your Data

• operate, maintain, and improve the Service;
• authenticate you and secure your account;
• personalize your dashboard, watchlists, and notifications;
• communicate with you about service updates, security, and support;
• detect, prevent, and respond to fraud, abuse, or security incidents;
• produce aggregated, de-identified statistics about usage of the Service;
• comply with legal obligations.

4. Cookies and Similar Technologies

Liquid Terminal currently uses only strictly necessary technologies (session storage for authentication, preferences). Our analytics provider (Vercel Analytics) runs in a cookieless mode and does not set tracking cookies. We do not use advertising cookies, third-party trackers, or cross-site profiling tools.

If we introduce non-essential cookies or trackers in the future, we will request your prior consent through a cookie banner, and you will be able to manage your preferences at any time.

5. Sharing of Data

We share data only with:

• Service providers (processors) acting on our behalf, including Privy (authentication), Vercel (hosting and analytics), Cloudflare (CDN and security), and Railway (backend hosting). Each is bound by a data-processing agreement.
• Third-party data providers we query on your behalf to render the Service (Hyperliquid, HypurrScan, DefiLlama). These calls may transmit your IP address but no account identifiers.
• Public surfaces — content you publish (public readlists, public ecosystem submissions, public wallet lists) is visible to all users by design.
• Legal recipients — courts, regulators, or law-enforcement authorities when required by valid legal process.
• Successors — in the event of a merger, acquisition, or asset sale, subject to confidentiality protections.

We do not sell your personal data.

6. International Data Transfers

Our infrastructure providers may host data in the European Union, the United States, or other regions. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Data Retention

• Account data: retained for as long as your account is active, plus a limited period after deletion for backups and legal obligations.
• Usage and security logs: typically retained for up to 12 months.
• User-generated public content: remains visible until you delete it or your account.

You may request deletion at any time (see Section 9).

8. Security

We implement reasonable technical and organizational measures to protect personal data, including HTTPS/TLS encryption in transit, access controls, secret rotation, and minimal data retention. No system is perfectly secure; we cannot guarantee absolute security.

9. Your Rights (GDPR)

If you are in the EU/EEA, UK, or Switzerland, you have the right to:

• access the personal data we hold about you;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”), subject to legal exceptions;
• restrict or object to processing based on legitimate interests;
• data portability — receive your data in a structured, machine-readable format;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data-protection authority.

To exercise any of these rights, contact us at privacy@liquidterminal.com. We respond within 30 days.

On-chain data note: blockchain records (Hyperliquid transactions, wallet activity) are public and immutable. We cannot erase data from the blockchain — only the off-chain links and metadata we hold.

10. Children

The Service is not directed to individuals under 18. We do not knowingly collect data from children. If you believe a minor has provided us with personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date. We encourage you to review this page periodically.

12. Contact

For any privacy-related question or to exercise your rights, contact us at privacy@liquidterminal.com.