Политика конфиденциальности

1. Кто мы

BlockzHub — хаб сообщества Vaulta: новости, курсы, dApp, репутация, гивевеи и on-chain участие (голосование, управление, стейкинг, донаты). Мы контролёр описанных данных. Права и вопросы — страницу контактов.

2. Какие данные мы собираем

We collect only what we need to run the Service:

• Account data — your name, email address, a securely hashed password, and a referral code. If you enable two-factor authentication (2FA), we store a secret used to verify your codes.
• Content & activity — articles, comments, ratings, votes, dApp reviews and submissions, course enrolments and progress, reputation events, and newsletter preferences.
• Communications — messages you send us (feedback, surveys, scam reports, support) and your email delivery/consent status.
• Wallet & on-chain data — public wallet addresses you connect (Antelope/EOS/Vaulta and Ethereum) and the public transactions you choose to sign through the Service.
• Technical data — IP address, device/browser information, approximate location derived from IP, and server logs used to operate, secure, and debug the Service.

We do not collect or store your wallet private keys or seed phrases — ever. Signing happens in your own wallet.

3. Как мы используем данные

• Provide, maintain, and improve the Service and its features.
• Authenticate you, manage sessions, and keep your account and the platform secure (including 2FA, rate-limiting, and fraud/abuse prevention).
• Surface community content and compute reputation, rankings, and giveaway eligibility.
• Send you transactional emails (e.g. email verification, password reset, notifications) and, with your consent, newsletters.
• Respond to your requests and comply with legal obligations.

4. Правовые основания (ЕЭЗ/Великобритания)

Where the GDPR/UK GDPR applies, we rely on: contract (to provide the Service you request), legitimate interests (to secure, operate, and improve the Service and prevent abuse), consent (for newsletters and non-essential cookies, which you can withdraw at any time), and legal obligation (to comply with applicable law).

5. Файлы cookie и аналогичные технологии

We keep cookie use minimal:

• Essential — httpOnly authentication cookies (your access and refresh tokens) that keep you signed in. These are not readable by JavaScript, reducing the risk of token theft.
• Preferences — a cookie that remembers your language.

We do not use advertising or cross-site tracking cookies. Blocking essential cookies will prevent you from signing in.

6. Блокчейн и данные кошелька

Actions you sign with your wallet — donations, block-producer/proxy votes, governance proposals, and staking — are recorded on public blockchains that are immutable and outside our control. Anyone can view them, and they generally cannot be edited or deleted. Consider what you make public on-chain. Never share your private keys or seed phrase with anyone, including anyone claiming to be BlockzHub.

7. Сторонние сервисы

We use a small set of processors and integrations to run the Service, including:

• Infrastructure — our hosting, database, and cache providers.
• Email delivery — an email/SMTP provider for transactional and newsletter messages.
• Blockchain nodes — public RPC endpoints we query to read chain state and broadcast the transactions you sign.
• Wallets — browser wallet extensions (e.g. MetaMask, Anchor) that you connect and control.
• Crypto swap — an embedded third-party swap widget; its provider processes any swap you initiate under its own privacy policy.

These providers process data on our instructions or as independent controllers for their own services; review their policies for details.

8. Когда мы передаём данные

We do not sell your personal data. We share it only with the processors above, when you make content public on the platform, to comply with valid legal requests, to protect our rights and users’ safety, or as part of a business transfer (e.g. merger) with continued protection.

9. Хранение данных

We keep account and content data while your account is active and as needed to provide the Service. Short-lived security tokens (email-verification and password-reset tokens) are stored only as one-time hashes and expire automatically. When you delete your account we remove or anonymise personal data, except where we must retain limited records for legal, security, or accounting purposes. On-chain data cannot be deleted.

10. Как мы защищаем данные

We use industry-standard safeguards: passwords hashed with a strong algorithm, httpOnly session cookies, optional 2FA, session revocation, hashed API keys, encryption in transit (HTTPS), rate limiting, and least-privilege access. No system is perfectly secure, so please use a strong, unique password and enable 2FA in your account settings.

11. Ваши права и выбор

Depending on where you live, you may have the right to access, correct, export (portability), delete, or restrict/object to processing of your personal data, and to withdraw consent. You can update your profile, manage 2FA, and unsubscribe from newsletters at any time, or contact us to exercise other rights. If you are in the EEA/UK you may also lodge a complaint with your local data-protection authority; California residents have rights under the CCPA/CPRA, and we do not sell personal information.

12. Международная передача

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

13. Конфиденциальность детей

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

14. Изменения этой политики

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, provide additional notice. Continued use of the Service after an update means you accept the revised policy.

15. Связаться с нами

Questions or requests about your privacy? Reach us through the contact page. We aim to respond within a reasonable time and in line with applicable law.