Privacy Policy

1. Introduction

Noderr Protocol ("Noderr," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://noderr.xyz and https://dapp.noderr.xyz (the "Sites") and use our decentralized finance protocol (the "Protocol").

Please read this Privacy Policy carefully. By accessing or using our Sites or Protocol, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Sites or use the Protocol.

Contact Information: For privacy-related inquiries, please contact us at [email protected]

2. Non-Custodial Nature of Our Service

Noderr Protocol is a non-custodial decentralized finance platform. This means:

• We do not have access to, control, or custody of your digital assets or private keys
• We cannot access, move, or recover your funds
• You retain full control and responsibility for your wallet and assets at all times
• We do not collect or store your private keys, seed phrases, or wallet passwords

Because of our non-custodial nature, the personal information we collect is limited compared to traditional financial services.

3. Information We Collect

3.1 Blockchain Data (Publicly Available)

When you interact with the Noderr Protocol smart contracts on the Base blockchain, certain information is recorded on the public blockchain, including:

• Your wallet address (public key)
• Transaction hashes and timestamps
• Token balances and transfers
• Smart contract interactions
• Vault deposits, withdrawals, and positions

This information is publicly available on the blockchain and is not collected or controlled by Noderr. Anyone can view this information using blockchain explorers such as Basescan.

3.2 Website Usage Data

When you visit our Sites, we automatically collect certain information about your device and browsing activity, including:

• IP address and approximate geographic location
• Browser type and version
• Operating system
• Device type (desktop, mobile, tablet)
• Pages visited and time spent on pages
• Referral source (how you arrived at our Sites)
• Click data and navigation patterns

3.3 Analytics and Cookies

We use analytics services and cookies to understand how users interact with our Sites and Protocol. These technologies help us improve user experience, identify bugs, and optimize performance. We use:

• Google Analytics: To track website traffic and user behavior
• Performance Cookies: To measure site performance and loading times
• Functional Cookies: To remember your preferences (e.g., theme selection)

You can control cookie settings through your browser preferences. Note that disabling cookies may affect your experience on our Sites.

3.4 Information You Provide

We may collect information you voluntarily provide when you:

• Subscribe to our newsletter or mailing list
• Participate in our community forums or Discord
• Contact us for support or inquiries
• Participate in governance votes or DAO activities

This may include your email address, username, and any information you choose to share in communications.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To provide, maintain, and improve the Sites and Protocol
• Analytics: To understand user behavior and optimize user experience
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Communications: To send you updates, newsletters, and important protocol announcements (only if you opt in)
• Compliance: To comply with legal obligations and enforce our Terms of Service
• Development: To develop new features and improve existing functionality

We do not use your information for advertising or marketing purposes beyond communications you explicitly opt into.

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

5.1 Service Providers

We may share information with third-party service providers who perform services on our behalf, including:

• Web hosting and infrastructure providers
• Analytics providers (Google Analytics)
• RPC node providers (for blockchain connectivity)
• Email service providers (if you subscribe to our mailing list)

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

5.2 Legal Compliance

We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to:

• Comply with applicable laws or respond to valid legal processes
• Protect the rights, property, or safety of Noderr, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service or other agreements

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on our Sites of any such change in ownership or control of your personal information.

5.4 Public Blockchain Data

Information recorded on the blockchain (wallet addresses, transactions, balances) is publicly available and cannot be deleted or modified. This information is not shared by us but is inherently public due to the nature of blockchain technology.

6. Data Retention

We retain information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Website Analytics: Typically retained for 26 months (Google Analytics default)
• Email Subscriptions: Retained until you unsubscribe
• Support Communications: Retained for up to 2 years for record-keeping
• Blockchain Data: Permanently recorded on the blockchain (not controlled by Noderr)

When information is no longer needed, we will securely delete or anonymize it.

7. Your Rights and Choices

7.1 GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal obligations)
• Right to Restriction: Request limitation of processing of your information
• Right to Data Portability: Request transfer of your information to another service
• Right to Object: Object to processing of your information for certain purposes
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at [email protected]. Note that blockchain data cannot be deleted due to the immutable nature of blockchain technology.

7.2 CCPA Rights (California Users)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information (subject to exceptions)
• Right to Opt-Out: Opt out of the sale of your personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

To exercise these rights, please contact us at [email protected].

7.3 Cookie Controls

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. Please note that disabling cookies may affect the functionality of our Sites.

7.4 Email Unsubscribe

If you have subscribed to our mailing list, you can unsubscribe at any time by clicking the "unsubscribe" link in any email we send or by contacting us at [email protected].

8. Security

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (HTTPS/TLS)
• Secure hosting infrastructure
• Regular security audits and updates
• Access controls and authentication
• Monitoring for security incidents

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Responsibility: You are solely responsible for securing your private keys, seed phrases, and wallet credentials. We cannot and will not recover lost or stolen private keys. Use hardware wallets and secure backup methods to protect your assets.

9. Third-Party Services

Our Sites and Protocol may contain links to third-party websites, services, or integrations, including:

• Wallet providers (MetaMask, WalletConnect, Coinbase Wallet)
• Blockchain explorers (Basescan)
• Decentralized exchanges and liquidity pools
• Oracle providers (Chainlink)
• Social media platforms

These third-party services have their own privacy policies and terms of service. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before using their services.

10. Children's Privacy

Our Sites and Protocol are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected], and we will delete such information.

11. International Data Transfers

Noderr operates globally, and your information may be processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

For users in the EEA, we ensure that appropriate safeguards are in place for international data transfers, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for certain countries
• Other lawful transfer mechanisms under GDPR

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Post the updated policy on our Sites
• Notify you via email (if you have subscribed) for material changes
• Provide notice on our Sites or through the Protocol for significant changes

Your continued use of the Sites or Protocol after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within a reasonable timeframe, typically within 30 days for GDPR requests and 45 days for CCPA requests.

14. Additional Information for Specific Jurisdictions

14.1 European Economic Area (EEA)

Our legal basis for processing your personal information includes:

• Consent: Where you have provided consent (e.g., newsletter subscription)
• Contract: To perform our obligations under the Terms of Service
• Legitimate Interests: For analytics, security, and service improvement
• Legal Obligation: To comply with applicable laws

You have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.

14.2 United Kingdom

For UK users, we comply with the UK GDPR and Data Protection Act 2018. You have similar rights to EEA users and can contact the UK Information Commissioner's Office (ICO) with complaints.

14.3 Other Jurisdictions

We strive to comply with applicable privacy laws in all jurisdictions where we operate. If you have specific questions about compliance in your jurisdiction, please contact us at [email protected].