Privacy Notice
Effective 25 August 2026
Who is responsible
Zodial Labs GmbH operates this website. Contact us at mail(at)zodial.xyz. Company details are available in the Legal Notice.
Data Zodial handles
- Public blockchain data, including wallet addresses, accounts, transactions, and positions, is read to provide lending, portfolio, leaderboard, and reward features.
- If you sign in, Zodial stores a hashed session token and the profile, publication, referral, badge, quest, agreement, and reward records needed to provide the social features you choose to use.
- Your browser stores functional preferences such as theme, onboarding state, access confirmation, and analytics preference. Zodial does not use advertising cookies.
- Security and operational logs may contain limited request metadata needed to prevent abuse, diagnose failures, and protect the service.
Wallet and service providers
Reown AppKit provides wallet connection infrastructure. Optional Reown analytics are disabled, but wallet connection services may process wallet, IP, device, and protocol metadata as described in the Reown privacy policy. RPC, indexing, hosting, database, and content-delivery providers process the minimum technical data needed to return the feature you request. Providers may process data outside the European Economic Area using the transfer safeguards described in their policies and applicable data-processing agreements.
Anonymous product analytics
Zodial uses Vercel Web Analytics to understand aggregate page and feature usage. It is cookie-free and does not create cross-site advertising profiles. Zodial removes query parameters, URL fragments, wallet or profile identifiers in dynamic routes, and wallet identifiers from custom events before sending analytics. Vercel derives a temporary visitor identifier from request data and rotates it after 24 hours. See Vercel's privacy and compliance documentation.
Purposes, legal bases, and retention
Zodial processes data necessary to provide requested features and sessions to perform the agreement with you, meet legal obligations, and pursue legitimate interests in service security, fraud prevention, reliability, and privacy-minimized aggregate product measurement. Where a feature explicitly asks for consent, that consent is its legal basis and can be withdrawn prospectively. Social sessions expire within 24 hours. Access confirmations remain in your browser until you clear them or the required version changes. Profile data remains until you delete the profile. Private season proof is retained for up to 24 months after finalization, while transient challenges, sessions, and queue data are removed sooner under the documented retention policy.
Your choices and rights
You can keep a profile private, choose which accounts and badges to publish, unpublish the profile, delete it, clear browser preferences, or disable analytics above. Subject to applicable law, you may request access, correction, deletion, restriction, objection, or data portability and may complain to a competent supervisory authority. Public blockchain records cannot be changed or deleted by Zodial. Zodial does not use this data to make solely automated decisions that produce legal or similarly significant effects.