Privacy notice
Effective 13 October 2026. Controller: Registrai, [email protected].
This notice covers builder.registrai.cc and its API. We collect as little as the site needs. There are no ads, no analytics and no tracking cookies.
What we process, why and for how long
| Purpose | Data | Legal basis | Kept |
|---|---|---|---|
| Points pilot sign-in | Wallet address, the signed sign-in message, a one-time nonce | To sign you in (Art. 6(1)(b) GDPR) | Session 12 h; nonces until used or expired |
| Points pilot account | Wallet address, points balance, orders, positions and their history, REGI eligibility checks, the REGI lock amount each leveraged position needs | To run the game you joined (Art. 6(1)(b)) | For the season, then until you ask us to delete it |
| REGI lock | Your wallet's REGI and locked REGI balances and its withdrawals, read from public Arc data | To check leverage eligibility and close leveraged positions after a withdrawal (Art. 6(1)(b)) | Read when needed; only the requirement on each position is stored |
| Public leaderboard | Shortened wallet address (first 6 and last 4 characters) and points | To show the standings (Art. 6(1)(b)) | While the season's leaderboard is shown |
| Rate limits and abuse prevention | IP address as a rate-limit key; for project suggestions, a keyed hash of the IP | Security and preventing abuse (Art. 6(1)(f)) | Rate-limit keys under 1 h; suggestion hashes 90 days |
| Project suggestions | The suggesting wallet and the suggestion you sign | To review suggestions (Art. 6(1)(f)) | 90 days after the latest suggestion |
| Registration requests | The builder wallet named in the signed claim | To register a claim on your behalf (Art. 6(1)(b)) | 60 days |
| Staff sign-in | Wallet address of staff accounts | To secure the admin area (Art. 6(1)(f)) | Session only |
| Project profiles | Public facts about projects: contract and deployer addresses, project websites and accounts, with evidence | Publishing verifiable public information about projects (Art. 6(1)(f)) | While the project is listed; corrections on request |
A wallet address can be personal data when it can be linked to you. Blockchain data is public: we read it from the Arc network, and we can't change or delete what is on chain. Lock, withdraw and claim transactions you send for the points pilot are public on Arc, and the site reads your vault's lock balance and its withdrawals.
Cookies
The site sets only two cookies, both strictly necessary and both only after you sign in: __Host-rb_pilot (points pilot session, 12 hours) and __Host-rb_admin (staff session). They hold a signed session token and are deleted when you sign out or they expire. The site may also remember display choices in your browser's local storage; that stays on your device.
Who else processes data
- Cloudflare hosts the site, its database and storage, and handles every request (including your IP address) as our processor. Cloudflare may process data outside the EEA under the EU–US Data Privacy Framework and standard contractual clauses.
- Hetzner (Germany) runs the server that computes the indices from public chain data. It processes no visitor data.
- Arc RPC providers. The index pages and the pilot read the Arc network directly from your browser (rpc.mainnet.arc.io), including your REGI and lock balances. That provider receives your IP address and the requests your browser sends; its own privacy terms apply. Our server also asks it for your wallet's REGI and lock balances when you sign in and place orders.
- Your wallet software sees the messages you choose to sign and the transactions you choose to send (lock, withdraw, claim), which it passes to the Arc network.
- Telegram, only if a project links a chat for Radar alerts: the chat ID and the messages we send there.
We don't sell personal data or share it for advertising.
Your rights
You can ask for access to your data, correction, deletion, restriction of processing, a copy in a portable format, and you can object to processing based on legitimate interests. Write to [email protected] from the context you used (for pilot data, we may ask you to sign a message with the wallet to confirm it's yours). You can also complain to the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
Age
The site isn't meant for anyone under 18, and the points pilot requires you to confirm you are 18 or older.
Changes
We'll update this notice when what we process changes; the date at the top shows the current version. See also the Terms of use.