Privacy Policy

1. Who is responsible

Blockfactory Sp. z o.o., at the address below, is the controller of personal data processed for operating Votearn. This Policy describes the website, usage measurement, communications and optional sign-in features. External issuers, wallet providers and platforms may act as separate controllers under their own notices.

2. Information processed

When you visit, hosting and infrastructure providers process information needed to deliver and secure the website, such as IP address, request time, requested resource, browser and device details, and technical errors. If you contact us, we process your contact details and the information you choose to provide.

If you choose email sign-in or wallet connection, Privy and your selected wallet provider process the identifiers and authentication information needed for that interaction. These may include email address, public wallet address, linked account identifiers and session information. The interface may display your account details. Do not send us passwords, recovery phrases or private keys.

A public blockchain address and its activity may be visible to others and may constitute personal data when associated with a person. Connecting a wallet does not make public blockchain information private.

3. Cookie-free usage analytics

We use Vercel Web Analytics to understand aggregate website use, including page views, broad device and browser information, approximate location and referrer information. Our custom events count actions such as opening the menu or a proposal, exploring more proposals, opening the featured article, clicking a Stock Token link and starting wallet connection.

These custom events contain only an action name: we do not attach email addresses, wallet addresses, holdings, account identifiers or voting choices. Our analytics configuration removes query strings and fragments from reported page URLs, limits reporting to known public pages and suppresses events when the browser’s Do Not Track setting is enabled.

Vercel Web Analytics does not use analytics cookies. Vercel describes its visitor measurement as based on a request-derived hash discarded after 24 hours; this is not the retention period for every aggregate statistic. We do not use advertising cookies, advertising pixels or session replay on this site.

4. Optional sign-in and browser storage

Browsing the public site does not require sign-in. Authentication is activated when you choose to connect. Privy and wallet software may use browser storage and, depending on their settings, necessary authentication cookies to maintain or secure the session. These are distinct from advertising or analytics cookies. We do not claim that third-party authentication is storage-free.

You can disconnect and manage site storage in your browser or wallet. Removing required session information may sign you out. We do not add non-essential cookie-based tracking; if that changes, we will update this notice and obtain consent where required.

5. Purposes and legal bases

Where the GDPR applies, we process data to provide requested account functionality and respond to pre-contractual requests under Article 6(1)(b); to operate, secure and improve the website, measure aggregate use and handle correspondence under our legitimate interests in Article 6(1)(f), subject to your rights and interests; and to comply with legal obligations under Article 6(1)(c). Where consent is required, we rely on Article 6(1)(a) and you may withdraw it without affecting prior lawful processing.

Providing contact or authentication information is voluntary, but we may be unable to respond or provide the requested feature without it. We do not use this information to make solely automated decisions producing legal or similarly significant effects about you.

6. Recipients and international transfers

Information is made available as necessary to hosting and analytics providers, including Vercel; authentication providers, including Privy; your selected wallet provider; and professional advisers or public authorities where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal data or share it for cross-context behavioral advertising.

Providers may process data outside Poland or the European Economic Area, including in the United States. Where required, transfers rely on a valid adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses and supplementary measures. You can request information about the safeguards applicable to your data using the contact below.

7. Retention and security

We retain personal data only as long as necessary for the relevant purpose: account-related data for the requested account relationship and necessary closure steps; correspondence until resolved and for any applicable claims period; and security or legal records for the periods required by law or justified by a documented security need. Provider-side retention also depends on the service and its configuration. We periodically assess the need to retain data and delete or anonymize it when that need ends.

We use reasonable technical and organizational measures appropriate to the risks. No system is entirely secure. Public blockchain records are maintained by independent networks and generally cannot be deleted or altered by us; this does not limit your rights concerning personal data within our control.

8. Your rights

Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may withdraw consent where processing relies on it. We may need proportionate information to verify a request; never send a wallet recovery phrase. We normally respond to GDPR requests within one month, with any lawful extension explained to you.

You may complain to the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl) or another competent supervisory authority, including one in your place of habitual residence, employment or the alleged infringement. You do not need to contact us first.

9. External websites and children

Following an external link subjects your interaction to the destination’s privacy practices. Our site does not embed third-party social feeds or remotely loaded source favicons. Review the privacy notices of Vercel at vercel.com/legal/privacy-policy and Privy at privy.io/privacy-policy for their respective practices.

Account features are not directed to children under 18. If you believe a child has supplied personal data through those features, contact us so we can assess and address it.

10. Changes and contacting us

We update this Policy when our practices or legal obligations change and revise the date above. We will provide additional notice or request consent when required. For privacy questions and requests, contact the controller using the postal or registered email address below and identify your request as relating to Votearn.

Contact

Blockfactory Sp. z o.o.
ul. Floriana Stablewskiego 13/2, 60-213 Poznań, Poland.
KRS: 0000987962 · NIP: 7792543090 · REGON: 52286180900000.
Share capital: PLN 5,000.

official@omnisea.org · Registered company contact.