Privacy Policy

1. Information we handle

• Wallet address. When you connect a wallet, the Interface reads your public address to show balances, orders, positions and vault shares.
• Signed orders. Perp orders you sign in your wallet (EIP-712) are sent to our gateway, which matches them offchain and settles fills on chain. The gateway keeps your open orders, fills, positions and funding history so the Interface can show them.
• Onchain activity. Collateral deposits and withdrawals, vault deposits and redemptions, spot swaps and faucet mints are transactions from your wallet to smart contracts on Base Sepolia. Your profile picture in the Interface is a pattern generated from your address in your browser; nothing is uploaded.
• Technical data. Like most web services, our servers and hosting providers may log IP address, browser type and request times for security and debugging.
• Local preferences. Your watchlist and your privacy choice are stored in your browser's local storage, on your device only.
• Analytics. We do not currently run any analytics or tracking scripts. The analytics option in the privacy banner is off by default, and nothing is collected while it is off.

2. Public blockchain and Arkiv data

Anything recorded on a blockchain is public and permanent. Your address and its onchain activity, including settled trades, collateral, vault shares and swaps, can be seen by anyone, linked to other activity and analyzed by third parties. Separately, the vault publishes market-level records to Arkiv: funding rates, the vault's hedge decisions and periodic vault snapshots. These Arkiv records describe markets and the vault as a whole and do not contain your wallet address. We cannot change or erase data once it is on a public network.

3. What we do not collect

• We never ask for, receive or store your private keys or seed phrase.
• We do not require an account, name, email address or identity documents (no KYC).
• We do not sell your personal information.

4. How we use information

• to operate the Interface, match and settle orders, and display your balances, positions, vault shares and PnL;
• to keep the service secure, prevent abuse and enforce our Terms of Use;
• to meet legal obligations, including sanctions screening of wallet addresses.

5. Cookies, local storage and analytics

We group browser storage into the same categories you see in our privacy banner:

• Essential: needed for the Interface to work, such as your wallet connection, selected network and the record of your privacy choice. These are always on.
• Analytics: reserved for aggregated usage measurement. No analytics run today; if we add them, they stay off unless you accept.
• Preferences: remembers settings like your market watchlist. You can turn this off.

Your choice is saved in local storage under the key "maas.consent", together with the time you made it.

6. Third-party services

Using the Interface means your browser talks directly to services we do not operate, which receive your IP address and request data under their own privacy policies:

• Privy, which provides the wallet connection window and receives your wallet address and basic device information when you connect;
• the wallet you choose, such as a browser extension, Coinbase Wallet or a WalletConnect-compatible app, and the WalletConnect relay when you use it;
• Base Sepolia RPC providers, which receive your address and the reads and transactions your browser sends;
• TradingView, whose chart widget on spot pages is loaded from tradingview.com;
• Arkiv, which your browser reads to show the vault's funding history and decisions.

Live prices come from Pyth. Our server fetches them from Pyth's Hermes service and passes them to your browser, so Pyth does not receive any information about you.

7. Retention

Gateway order and fill history and server logs are kept only as long as needed to run, secure and debug the service, and may be wiped whenever the test network or our services are reset. Local storage stays on your device until you clear it. Onchain and Arkiv records cannot be deleted.

8. Your choices

• Use Customize in the privacy banner to turn analytics or preferences on or off.
• Clear your browser's site data, or remove the "maas.consent" entry, to reset your choice; the banner will appear again.
• Disconnect your wallet at any time from the Interface or from your wallet app.
• Depending on where you live, you may have rights to access, correct or delete personal data we hold. Contact us at legal@example.com.

9. Children

The Interface is not intended for anyone under 18, and we do not knowingly collect information from children.

10. Changes

We may update this Privacy Policy as the product evolves. We will change the "Last Updated" date above when we do.

11. Contact

Privacy questions or requests can be sent to legal@example.com.