개인정보 처리방침

1. 우리는 누구인가

BlockzHub는 Vaulta 커뮤니티 허브입니다 — 뉴스, 코스, dApp, 평판, 경품, 온체인 참여(투표·거버넌스·스테이킹·기부). 아래에 기재된 개인정보의 컨트롤러입니다. 권리 행사·문의는 연락 페이지.

2. 수집하는 정보

We collect only what we need to run the Service:

• Account data — your name, email address, a securely hashed password, and a referral code. If you enable two-factor authentication (2FA), we store a secret used to verify your codes.
• Content & activity — articles, comments, ratings, votes, dApp reviews and submissions, course enrolments and progress, reputation events, and newsletter preferences.
• Communications — messages you send us (feedback, surveys, scam reports, support) and your email delivery/consent status.
• Wallet & on-chain data — public wallet addresses you connect (Antelope/EOS/Vaulta and Ethereum) and the public transactions you choose to sign through the Service.
• Technical data — IP address, device/browser information, approximate location derived from IP, and server logs used to operate, secure, and debug the Service.

We do not collect or store your wallet private keys or seed phrases — ever. Signing happens in your own wallet.

3. 정보 이용 방식

• Provide, maintain, and improve the Service and its features.
• Authenticate you, manage sessions, and keep your account and the platform secure (including 2FA, rate-limiting, and fraud/abuse prevention).
• Surface community content and compute reputation, rankings, and giveaway eligibility.
• Send you transactional emails (e.g. email verification, password reset, notifications) and, with your consent, newsletters.
• Respond to your requests and comply with legal obligations.

4. 법적 근거 (EEA/UK)

Where the GDPR/UK GDPR applies, we rely on: contract (to provide the Service you request), legitimate interests (to secure, operate, and improve the Service and prevent abuse), consent (for newsletters and non-essential cookies, which you can withdraw at any time), and legal obligation (to comply with applicable law).

5. 쿠키 및 유사 기술

We keep cookie use minimal:

• Essential — httpOnly authentication cookies (your access and refresh tokens) that keep you signed in. These are not readable by JavaScript, reducing the risk of token theft.
• Preferences — a cookie that remembers your language.

We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from signing in.

6. 블록체인 및 지갑 데이터

Actions you sign with your wallet — donations, block-producer/proxy votes, governance proposals, and staking — are recorded on public blockchains that are immutable and outside our control. Anyone can view them, and they generally cannot be edited or deleted. Consider what you make public on-chain. Never share your private keys or seed phrase with anyone, including anyone claiming to be BlockzHub.

7. 제3자 서비스

We use a small set of processors and integrations to run the Service, including:

• Infrastructure — our hosting, database, and cache providers.
• Email delivery — an email/SMTP provider for transactional and newsletter messages.
• Blockchain nodes — public RPC endpoints we query to read chain state and broadcast the transactions you sign.
• Wallets — browser wallet extensions (e.g. MetaMask, Anchor) that you connect and control.
• Crypto swap — an embedded third-party swap widget; its provider processes any swap you initiate under its own privacy policy.

These providers process data on our instructions or as independent controllers for their own services; review their policies for details.

8. 데이터 공유 시점

We do not sell your personal data. We share it only with the processors above, when you make content public on the platform, to comply with valid legal requests, to protect our rights and users’ safety, or as part of a business transfer (e.g. merger) with continued protection.

9. 데이터 보관

We keep account and content data while your account is active and as needed to provide the Service. Short-lived security tokens (email-verification and password-reset tokens) are stored only as one-time hashes and expire automatically. When you delete your account we remove or anonymise personal data, except where we must retain limited records for legal, security, or accounting purposes. On-chain data cannot be deleted.

10. 데이터 보호 방법

We use industry-standard safeguards: passwords hashed with a strong algorithm, httpOnly session cookies, optional 2FA, session revocation, hashed API keys, encryption in transit (HTTPS), rate limiting, and least-privilege access. No system is perfectly secure, so please use a strong, unique password and enable 2FA in your account settings.

11. 권리와 선택

Depending on where you live, you may have the right to access, correct, export (portability), delete, or restrict/object to processing of your personal data, and to withdraw consent. You can update your profile, manage 2FA, and unsubscribe from newsletters at any time, or contact us to exercise other rights. If you are in the EEA/UK you may also lodge a complaint with your local data-protection authority; California residents have rights under the CCPA/CPRA, and we do not sell personal information.

12. 국외 이전

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

13. 아동 개인정보

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. 정책 변경

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, provide additional notice. Continued use of the Service after an update means you accept the revised policy.

15. 문의

Questions or requests about your privacy? Reach us through the contact page. We aim to respond within a reasonable time and in line with applicable law.