Privacy Policy

This policy applies to information we process when you use Blue Collar Crypto (the "Service"). It should be read together with our Cookie Policy and Terms of Service.

We collect the following categories of information:

• Account information — email address, chosen handle, display name, and a securely hashed password (we never store passwords in plain text).
• Wallet and on-chain information — blockchain wallet addresses you link (verified by a signature), and the public on-chain holdings, tokens, NFT, and validator activity associated with them. This data is public on the blockchain; we index and display it.
• Profile and activity — content you create (posts, comments, media), reactions, attestations, reviews, disputes, group memberships, and trust/reputation signals derived from your activity.
• Device and technical information — IP address (stored only in hashed form for security), browser and device characteristics, and a device fingerprint used for fraud and multiple-account detection (see section 4).
• Usage information — pages viewed, actions taken, timestamps, and request metadata, used to operate and secure the Service.
• Communications — messages you send us and, where applicable, notification and email preferences.
• Authentication data from single sign-on — if you sign in with Google or X, we receive basic profile information (such as your email and identifier) from that provider.

We use information to:

• provide, maintain, and improve the Service and your account;
• compute and display trust, reputation, and on-chain gating features;
• detect, prevent, and respond to fraud, abuse, multiple accounts, automation, and security incidents;
• communicate with you about your account, security, and Service updates;
• comply with legal obligations and enforce our terms.

To protect the integrity of trust and reputation and to prevent sybil / multiple-account abuse, we generate a device fingerprint from server-side signals (such as network and request characteristics) and from limited browser-reported signals (such as an automation flag and screen characteristics). We use it to detect when one device or actor controls multiple accounts and to score automation. IP addresses used in this process are stored only as keyed hashes, not in raw form.

Consent. When you create an account, you consent to these fraud-prevention device checks. Admin-provisioned accounts and visitors who do not complete signup are not fingerprinted in this way. The legal basis is your consent and our legitimate interest in securing the Service.

Blockchain networks are public and, by design, permanent and outside our control. Wallet addresses you link and their associated on-chain activity are publicly visible on the relevant network regardless of our Service. When you link a wallet, you acknowledge that this information is public and may be displayed and associated with your profile.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure the Service, prevent fraud, and operate trust features, balanced against your rights); consent (for fraud-prevention device checks at signup and where otherwise indicated, which you may withdraw); and legal obligation (to comply with applicable law).

We do not sell your personal information. We share it only with:

• Service providers / processors that help us run the Service, including cloud hosting and deployment, error and performance monitoring, blockchain RPC and data providers (used to read public on-chain data), single sign-on providers, media providers, and email delivery. These providers process data on our behalf under contractual safeguards.
• Legal and safety — where required by law, legal process, or to protect the rights, safety, and integrity of the Service and its users.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We and our providers may process information in countries other than yours, including the United States and the European Union. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

We keep personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to meet legal, security, fraud-prevention, and dispute-resolution needs, after which we delete or anonymize it. Security records such as fingerprint data are retained only for the period necessary for fraud prevention. Note that public on-chain data cannot be deleted from the blockchain by us.

We use technical and organizational measures to protect information, including password hashing, hashed IP storage, signed authentication tokens, access controls, rate limiting, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and wallet keys.

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to withdraw consent. Where the CCPA applies, you have rights to know, delete, correct, and to not be discriminated against for exercising them; we do not sell or share personal information for cross-context behavioral advertising.

To exercise your rights, contact privacy@bluecollarcrypto.io. We may need to verify your identity. You may also have the right to complain to your local data-protection authority.

The Service is not directed to children under 18, and we do not knowingly collect their information. If you believe a child has provided us information, contact us and we will delete it.

We use a small number of cookies and browser-storage entries that are strictly necessary or functional. See our Cookie Policy for details and choices.

We may update this policy from time to time. We will change the effective date and, for material changes, provide notice where appropriate. Your continued use after changes take effect constitutes acceptance.