Privacy policy
//01_ WHO WE ARE
This website is operated by Paperhands ("we", "us"). It is an interface to a smart contract on a public blockchain. We do not hold your funds and we do not run accounts. This policy explains what personal data is processed when you use the site, by whom, and what you can do about it.
//02_ WHAT WE DO NOT COLLECT
- No account, no sign-up, no email address, no name, no phone number.
- No analytics, no session recording, no fingerprinting.
- No tracking or advertising cookies, and no third-party advertising or social media scripts.
- No identity checks. We never ask for documents.
//03_ WHAT IS PROCESSED
Hosting logs. Like any website, the servers that deliver this site receive your IP address, your browser's user agent, the page or file requested and the time of the request. Our hosting provider keeps these logs for security, abuse prevention and debugging, for a short period, and then deletes them. We do not combine them with any other data.
Price requests. The site shows prices through our own server routes (/api/prices and /api/history). Your browser asks our server; our server fetches the prices from RedStone's public gateways. RedStone sees our server, not you. These requests appear in the hosting logs above and carry no wallet address.
Your wallet address. When you connect a wallet, the page learns your public address in your browser and uses it to read your balances and positions from the blockchain. We do not send it to our server and we do not store it.
//04_ THIRD PARTIES YOU TALK TO DIRECTLY
- Your wallet. The wallet extension or app you connect is software from another provider, with its own privacy policy. It sees every transaction and signature you approve.
- The chain RPC endpoint. To read the blockchain and send transactions, your browser and your wallet talk to an RPC endpoint of chain 4663. Its operator receives your IP address and the requests made, including your wallet address. We do not control it.
- The blockchain. Every transaction you send is published on a public blockchain.
//05_ PUBLIC BLOCKCHAIN DATA
Deposits, withdrawals, positions, settlements, claims, paper and rewards are recorded on a public blockchain under your wallet address. Anyone can read them, forever. We cannot edit, hide or erase them, and no one else can either. If your wallet address can be linked to you, this history can be linked to you too. Keep that in mind before you use a wallet that is tied to your identity.
//06_ DATA STORED IN YOUR BROWSER
The site sets no cookies. It uses your browser's local storage for three entries:
| KEY | PURPOSE | WHEN |
|---|---|---|
ph.consent | your choice in the consent panel | always (strictly necessary) |
ph.session.<wallet address> | the one-click trading key for that wallet | only if you enable one-click trading |
ph.prefs | interface preferences such as the last market viewed | only if you accept preferences |
These entries stay in your browser and are not sent to our server. Details, and how to remove them, are in the cookies policy.
//07_ GDPR
If you are in the European Economic Area, the United Kingdom or Switzerland, data protection law gives you specific rights. For the processing described here, Paperhands is the controller.
| PROCESSING | LEGAL BASIS |
|---|---|
| Hosting logs | our legitimate interest in keeping the site secure and available (GDPR art. 6(1)(f)) |
| Price requests, the consent record, the one-click trading key | necessary to provide the service you ask for (art. 6(1)(b)); browser storage strictly necessary for it |
| Interface preferences | your consent (art. 6(1)(a)), which you can withdraw at any time |
Your rights:
- access: to know whether we hold data about you and to receive a copy;
- rectification: to have inaccurate data corrected;
- erasure: to have data deleted;
- restriction: to have processing limited while a question is resolved;
- portability: to receive data you provided in a machine-readable format;
- objection: to object to processing based on our legitimate interest;
- withdrawal of consent, at any time, without affecting earlier processing;
- complaint: to lodge a complaint with the data protection supervisory authority of your country.
To exercise a right, send a direct message to our X account. We answer within one month. Because we hold almost nothing that identifies you, we may ask for details (for example the approximate time and IP address of a visit) to find the relevant log entries. Data in your browser you can delete yourself at any time, and data on the blockchain cannot be erased by anyone.
//08_ RETENTION AND TRANSFERS
Hosting logs are kept for a short period set by our hosting provider, then deleted. Browser storage stays until you clear it or withdraw consent. Our hosting provider may process logs outside your country, including outside the European Economic Area; such transfers rely on the safeguards that provider offers, such as standard contractual clauses.
//09_ MINORS AND CHANGES
The site is not intended for anyone under 18 and we do not knowingly process data about minors. If this policy changes, the update date shown on this page changes with it.