Privacy notice
Last updated 29 September 2026
What we collect
Public pages set no tracking or advertising cookies. When you sign in, one session cookie (HttpOnly, SameSite) keeps you signed in; it is removed when the session ends or times out.
Records we keep
To protect the service we record access events: time, requested address and the network address our edge provider reports. Participants' transaction records are kept as the platform's tamper-evident ledger requires.
Who processes it
Traffic passes through Cloudflare (network security and delivery). Email is handled by Microsoft 365. Encrypted backups are stored with Backblaze in the EU.
Your rights
You may ask what we hold about you, and ask for correction or deletion where the law and our record-keeping obligations allow. Write to the contact address below.