Privacy Policy

1.1 Account and authentication data. When you sign in, our wallet-infrastructure provider processes your login identifier (such as an email address or linked social account) and creates or connects a wallet. We receive your authenticated identifier, wallet address, and related account metadata.

1.2 Wallet and transaction data. We collect the wallet addresses you use with the Platform, your deposits and withdrawals, orders, trades, positions, redemptions, and balances. Settled trades and positions are recorded on the Base blockchain, which is public and outside our control.

1.3 Profile and participation data. We collect information you choose to provide, such as a username or avatar, referral activity, points and rewards balances, and — if you joined our waitlist — the email address you used, which we may match to verify referral eligibility.

1.4 Usage and device data. We automatically collect standard technical data such as IP address, device and browser type, pages viewed, and interactions with the Platform, including via real-time connections used to stream prices and account updates.

1.5 Local storage. We store preferences and session data in your browser (for example, authentication tokens and interface preferences such as dismissed dialogs). These are functional; you can clear them through your browser at any time. We do not currently use non-essential analytics or advertising cookies. If this changes, we will update this Policy and provide a cookie notice and consent mechanism where required by applicable law.

1.6 Compliance and verification data. Where we conduct identity or compliance verification under our Terms of Use, we (or our verification providers) may collect government-issued identification, date of birth, proof-of-address documents, source-of-funds information, and the results of screening against sanctions and risk databases.

2.1 We use the information we collect to: (a) operate the Platform, including matching orders, settling trades, displaying balances and positions, and processing deposits, withdrawals, and redemptions, which is necessary to perform our contract with you; (b) authenticate you and secure your account, based on our contract with you and our legitimate interest in Platform security; (c) operate points, rewards, and referral programs, including eligibility verification and abuse prevention, based on our contract with you and our legitimate interest in program integrity; (d) monitor for prohibited conduct such as market manipulation and sybil activity, based on our legitimate interest in Platform integrity and our legal obligations; (e) comply with legal obligations, including sanctions and identity-verification screening where applicable, based on those legal obligations; (f) analyze and improve the Platform, based on our legitimate interest in doing so; and (g) communicate with you about the Platform, including service messages (based on our contract with you) and, where permitted, product updates (based on your consent, where required).

2.2 Where we rely on legitimate interests, we consider and balance those interests against your rights; you can request more detail through the contact channel in Section 11. Where consent is the basis for a particular use, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

3.1 Your trading activity is settled on a public blockchain. Wallet addresses, trades, positions, and redemptions recorded on-chain are publicly visible, permanent, and cannot be modified or deleted by Strix Lab. Anyone may be able to associate your wallet address with your on-chain activity, and, if you have made the connection public elsewhere, with your identity.

4.1 Service providers. We share information with providers who support the Platform, including wallet infrastructure and authentication, cloud hosting, blockchain-data indexing, messaging/streaming infrastructure, sanctions and blockchain-analytics screening providers, and analytics. Providers process information on our behalf under their own contractual and security obligations.

4.2 Legal and safety. We may disclose information where required by law, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, safety, or property of Strix Lab, our users, or the public, including investigating fraud, manipulation, or violations of our Terms of Use.

4.3 Corporate transactions. If Strix Lab is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

4.4 We do not sell your personal information for money.

4.5 California Privacy Rights. If you are a California resident: in the preceding twelve (12) months we have collected the categories of personal information described in Section 1, for the purposes described in Section 2, and shared them with the categories of recipients described in this Section 4. We do not sell personal information. Certain analytics or service-provider arrangements may constitute "sharing" under the California Consumer Privacy Act even though nothing is sold; where applicable, we will provide a mechanism to opt out of such sharing. Participation in our points, rewards, or referral program may constitute a "financial incentive" under the CCPA; participation is voluntary, and the material terms are described in the applicable program terms.

5.1 We retain personal information for as long as necessary to operate the Platform, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Trading records may be retained for extended periods where required for financial-integrity, audit, or compliance purposes. On-chain data is permanent and outside our control.

6.1 We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and delegated-signing architecture in which wallet keys are managed by our wallet-infrastructure provider rather than stored by Strix Lab. No system is completely secure; you are responsible for securing your login credentials and devices.

7.1 Depending on your jurisdiction, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us through the support channels listed on the Platform. We will respond as required by applicable law.

7.2 Note that we cannot modify or delete data recorded on a public blockchain, and deleting certain account data may prevent continued use of the Platform.

7.3 You may opt out of non-essential communications by following the unsubscribe instructions in those messages.

7.4 If you are located in the European Economic Area or the United Kingdom, you have the right to lodge a complaint with your local data protection supervisory authority.

8.1 The Platform is operated from, and information may be processed in, jurisdictions other than your own, which may have different data-protection standards. Where required, we rely on appropriate safeguards for such transfers, such as Standard Contractual Clauses or another legally recognized transfer mechanism.

9.1 The Platform is not directed to persons under 18, and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a person under 18, we will delete it and terminate the associated account.

10.1 We may update this Policy from time to time. Material changes will be announced through the Platform, and the "Last updated" date above reflects the latest revision. Your continued use of the Platform after changes take effect constitutes acknowledgment of the revised Policy.

11.1 Questions about this Policy or our data practices may be directed to us through the support channels listed on the Platform.