Datenschutz- richtlinie

1. Wer wir sind

BlockzHub ist der Vaulta-Community-Hub — News, Kurse, dApps, Reputation, Giveaways und On-Chain-Teilnahme (Voting, Governance, Staking, Spenden). Wir sind Verantwortlicher der beschriebenen Daten. Rechte oder Fragen: Kontaktseite.

2. Welche Daten wir erheben

We collect only what we need to run the Service:

• Account data — your name, email address, a securely hashed password, and a referral code. If you enable two-factor authentication (2FA), we store a secret used to verify your codes.
• Content & activity — articles, comments, ratings, votes, dApp reviews and submissions, course enrolments and progress, reputation events, and newsletter preferences.
• Communications — messages you send us (feedback, surveys, scam reports, support) and your email delivery/consent status.
• Wallet & on-chain data — public wallet addresses you connect (Antelope/EOS/Vaulta and Ethereum) and the public transactions you choose to sign through the Service.
• Technical data — IP address, device/browser information, approximate location derived from IP, and server logs used to operate, secure, and debug the Service.

We do not collect or store your wallet private keys or seed phrases — ever. Signing happens in your own wallet.

3. Wie wir deine Daten nutzen

• Provide, maintain, and improve the Service and its features.
• Authenticate you, manage sessions, and keep your account and the platform secure (including 2FA, rate-limiting, and fraud/abuse prevention).
• Surface community content and compute reputation, rankings, and giveaway eligibility.
• Send you transactional emails (e.g. email verification, password reset, notifications) and, with your consent, newsletters.
• Respond to your requests and comply with legal obligations.

4. Rechtsgrundlagen (EWR/UK)

Where the GDPR/UK GDPR applies, we rely on: contract (to provide the Service you request), legitimate interests (to secure, operate, and improve the Service and prevent abuse), consent (for newsletters and non-essential cookies, which you can withdraw at any time), and legal obligation (to comply with applicable law).

5. Cookies & ähnliche Technologien

We keep cookie use minimal:

• Essential — httpOnly authentication cookies (your access and refresh tokens) that keep you signed in. These are not readable by JavaScript, reducing the risk of token theft.
• Preferences — a cookie that remembers your language.

We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from signing in.

6. Blockchain- & Wallet-Daten

Actions you sign with your wallet — donations, block-producer/proxy votes, governance proposals, and staking — are recorded on public blockchains that are immutable and outside our control. Anyone can view them, and they generally cannot be edited or deleted. Consider what you make public on-chain. Never share your private keys or seed phrase with anyone, including anyone claiming to be BlockzHub.

7. Drittanbieter-Dienste

We use a small set of processors and integrations to run the Service, including:

• Infrastructure — our hosting, database, and cache providers.
• Email delivery — an email/SMTP provider for transactional and newsletter messages.
• Blockchain nodes — public RPC endpoints we query to read chain state and broadcast the transactions you sign.
• Wallets — browser wallet extensions (e.g. MetaMask, Anchor) that you connect and control.
• Crypto swap — an embedded third-party swap widget; its provider processes any swap you initiate under its own privacy policy.

These providers process data on our instructions or as independent controllers for their own services; review their policies for details.

8. Wann wir Daten teilen

We do not sell your personal data. We share it only with the processors above, when you make content public on the platform, to comply with valid legal requests, to protect our rights and users’ safety, or as part of a business transfer (e.g. merger) with continued protection.

9. Speicherdauer

We keep account and content data while your account is active and as needed to provide the Service. Short-lived security tokens (email-verification and password-reset tokens) are stored only as one-time hashes and expire automatically. When you delete your account we remove or anonymise personal data, except where we must retain limited records for legal, security, or accounting purposes. On-chain data cannot be deleted.

10. Wie wir Daten schützen

We use industry-standard safeguards: passwords hashed with a strong algorithm, httpOnly session cookies, optional 2FA, session revocation, hashed API keys, encryption in transit (HTTPS), rate limiting, and least-privilege access. No system is perfectly secure, so please use a strong, unique password and enable 2FA in your account settings.

11. Deine Rechte & Wahlmöglichkeiten

Depending on where you live, you may have the right to access, correct, export (portability), delete, or restrict/object to processing of your personal data, and to withdraw consent. You can update your profile, manage 2FA, and unsubscribe from newsletters at any time, or contact us to exercise other rights. If you are in the EEA/UK you may also lodge a complaint with your local data-protection authority; California residents have rights under the CCPA/CPRA, and we do not sell personal information.

12. Internationale Übermittlungen

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

13. Datenschutz von Kindern

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. Änderungen dieser Richtlinie

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, provide additional notice. Continued use of the Service after an update means you accept the revised policy.

15. Kontakt

Questions or requests about your privacy? Reach us through the contact page. We aim to respond within a reasonable time and in line with applicable law.