Privacy Policy
This policy explains what personal data backx.trade collects, why, and your rights. We collect as little as we can. We do not sell your data and we do not use advertising trackers.
1. Who is responsible
GAZZFUN LLC, which operates backx.trade, is the data controller. Contact: support@gazz.fun.
2. What we collect
- Login data: when you sign in, our login provider Privy gives us an account ID and the login method you used: your email address, phone number, or the identifier of the social account you chose (Google, X, Discord, Twitch, Telegram or Farcaster). With a passkey, no personal data beyond the account ID is shared.
- Beta sign-up: when you sign up for the beta we record the time and which type of login you used (for example email or Google), not the address or number itself.
- Wallet address: the address of the wallet created for you. We never have your private key.
- Session data: a session cookie that keeps you signed in. We store only a hashed version of it, with creation and expiry times.
- Technical data: IP address and request metadata, used for security and rate limiting, and kept briefly.
- Preferences on your device: theme and price-color settings are stored in your browser’s local storage and never sent to us.
3. On-chain data is public
Your wallet address and every transaction you make (deposits, positions, vault deposits, withdrawals) are recorded on Robinhood Chain. This data is public and permanent, and neither we nor anyone else can delete it.
4. Why we use it (legal basis)
- To provide the Service you ask for: sign-in, your wallet, positions and vaults (performance of a contract).
- To keep the Service and its users secure: abuse prevention, rate limiting and fraud detection (legitimate interest).
- To meet legal obligations, such as sanctions screening or responding to lawful requests (legal obligation).
5. Cookies
We use only cookies that are strictly necessary: the session cookie, and cookies set by Privy and Cloudflare to sign you in securely and block bots. We do not use analytics or advertising cookies.
6. Who we share it with
We use these service providers, who process data on our behalf:
- Privy (login and wallet infrastructure)
- Cloudflare (bot protection during login)
- The social login provider you choose (for example Google, X, Discord, Twitch, Telegram or Farcaster), which confirms your account to Privy
- Vercel (website hosting)
- Railway (API and database hosting)
- Google Fonts (fonts; your browser’s IP address is sent to Google when fonts load)
Some of these providers are located outside the EEA. Where that applies, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses. We may also disclose data when required by law.
7. How long we keep it
- Account and wallet link: while your account exists.
- Sessions: until they expire or you sign out, then deleted.
- Security logs: up to 30 days.
8. Your rights
Under the GDPR you can ask to access, correct or delete your personal data, restrict or object to its use, and receive a copy of it. Email support@gazz.fun. Deleting your account does not delete on-chain data, and you should export your wallet first if it holds funds.
You can complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.
9. Children
The Service is not for anyone under 18, and we do not knowingly collect their data.
10. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be announced on the Service.