debords measures how the site is used (see "measuring" below), shows no ads, and has no accounts beyond your wallet's address. it sets one cookie of its own, and only if you sign in to make api keys, save filters or set alerts; measuring, where it runs, sets two small ones to tell one visit from the next. if you set alerts, the telegram chat you link is kept with your address. what you do with it is public on the chain. a text you seal, hidden words included, is read by debords to check it and lock it. if you send the survey, your answers are emailed to us. nothing is sold or shared for advertising.

the survey, only if you send it: your answers, a way to reach you if you give one, your account's address if a wallet is connected, your wallet's name, whether your browser has a wallet, your window's width and language, and how long you took. we use it to improve debords, and to reply if you asked.

texts you seal: the whole text, hidden words included, your account's address and the seal's terms are sent to this server, which checks the text (by machine moderation), locks the hidden words so only it can open them, and releases them when the goal is met. the locked text is kept on the chain; nobody else can read it before it is released. a refused text is not kept.

signing in: to make api keys or save filters, your wallet signs a short message naming this site and the time. the server keeps the signed-in address for thirty days under a random id, which is the cookie ("session"). signing out removes both. nothing else is tied to it.

api keys: a key is shown to you once; the server keeps only its hash, a name you gave it, when it was made, and the address that made it. it counts how often each key reads, per hour, to hold the rate your pass allows, and forgets the counts a couple of hours later.

saved filters: a name and the narrowing it stands for (state, currency, order, words, language, creator), kept with the site under your address until you delete them.

passes: a pass is bought from your wallet on the chain; the site only writes the quote (the price in the currency you chose, signed so the contract accepts it) and reads from the chain which pass an address holds. no card, no billing details, nothing to renew.

page requests: like every website, this server receives your ip address and browser details with each request. it uses your ip address only to limit spam: to the survey, to sealing, to translation, to the feeds, to the chain questions the page asks through it and to the measuring posts, and our hosting provider keeps standard logs to run the site and keep it safe.

translation: to show each text in your language, your browser's language and the seals on the page you are reading are sent to this server, which has them translated by machine and keeps them. the translation service only ever receives what is meant to be public: a teaser when it is sealed (its hidden words left out), and the whole text once it is released. it does not keep them or learn from them.

to see where the page is slow or breaks, the page sends amazon cloudwatch rum, through this server, how long each page took, errors the script met, which pages were opened, your browser and screen size, and a replay of the session, in which everything you type, the text you are sealing and your api keys are masked before they leave your browser; what the page shows is kept as it is, and all of it is public on the chain already. cloudwatch keeps it 30 days. in the eu and eea, the uk, switzerland and california the page asks first, in one line above the header, and does nothing until you answer; everywhere else it is on unless you turn it off at /privacy?analytics=off, which is remembered in your browser. a browser that sends the global privacy control signal is never measured.

a few settings, never sent anywhere: light or dark ("scheme"), the wallet you connected ("wallet"), your answer about measuring ("consent"), transactions you sent that are still on their way (kept until they settle), and, per chain and account, which seals you have a part in and how many owe you something. clearing this site's data in your browser removes them, and the "session" cookie and the two measuring cookies ("cwr_s_…" and "cwr_u_…") with them.

seals, pledges, bonds, releases, claims and passes are public, permanent transactions on a blockchain, tied to your account's address. nobody can change or delete them, debords included.

amazon web services runs the server and the database, checks and translates texts, keeps the key that locks hidden words and the keys that sign approvals and quotes, holds the measuring data and carries the mail we send ourselves (survey answers, and what is sent to support@debords.com, forwarded to us). alert lines go to telegram (telegram.org), under its own policy. a blockchain node provider (alchemy) answers the questions this server asks the chain; it sees our server, not you. your wallet talks to the page directly, under its own privacy policy. these providers may process data in other countries, including the united states.

survey answers are deleted within 12 months. ip addresses used against spam are forgotten within an hour; the counts of a key's reads a couple of hours later. a sign-in lasts thirty days unless you sign out. keys and saved filters stay until you delete them.

you can ask to see, correct or delete what we hold about you, or object to its use, by emailing support@debords.com. you can also complain to your data protection authority. what is on the chain cannot be changed or deleted by anyone.

we do not track you across other sites. the measuring above is the only kind there is, and the global privacy control signal turns it off. debords is not meant for anyone under 18.

if this policy changes, the new version will be posted here and the date at the top will change.