Elysium Radar: Privacy Policy (testnet edition)
Effective: [DATE] · Version 0.1 (testnet)
Draft for the testnet period. This is a short, standard text, not legal advice. Have it reviewed (including for GDPR/UK GDPR if you have EU or UK users) before real-money trading launches. Replace every [bracketed] item.
1. Who is responsible
[Operator legal name], [address / country] ("we") is responsible for personal data processed by Elysium Radar: the website, the Telegram and Discord channels and groups, and the Telegram bot.
Contact: [contact email].
2. What we collect
| Data | Source | Why |
|---|---|---|
| Telegram user ID, username, display name, language; Discord user ID and username | You, when you use the bot or join our channels and groups | To run the bot, deliver your alerts, and moderate |
| Your settings: watchlists, alert subscriptions, filters, slippage | You | To deliver the alerts and features you chose |
| Public wallet addresses you connect or ask us to watch | You | Portfolio, wallet alerts, building transactions for you to sign |
| Trade records: quotes, transaction hashes, fees | You and the public blockchain | Showing your history and PnL, fee accounting, support |
| Messages you send to the bot or post in our groups | You | Answering commands, moderation |
| Website technical data: IP address, browser type, pages visited, timestamps | Your browser, our hosting provider | Security, abuse prevention, basic usage statistics |
| Session cookie and wallet sign-in records (Sign-In with Ethereum message and signature) | Your browser and wallet | Keeping you signed in; proving a wallet is yours before we link it |
| One-time sign-in links the bot sends you (stored only as a hash; valid once, for 10 minutes) | Us | Signing you in on the website from Telegram |
Sites you report with /report, with your Telegram user ID | You | Reviewing possible phishing sites |
| Error reports (technical traces, no keys) | Our error-monitoring provider | Fixing bugs |
We never collect private keys or seed phrases. Never send them to anyone.
Public data. Radar also processes data that is already public: blockchain transactions and addresses, and public social-media posts and profiles of accounts in the Elysium ecosystem. We do this to provide ecosystem alerts. Public wallet addresses aren't linked to real-world identities by us, unless a project or person publicly claims them.
3. Legal bases (where GDPR or UK GDPR applies)
- Performance of a contract: running the bot, the alerts and the trading features you request.
- Legitimate interests: security, abuse prevention, moderation, improving the service, and publishing alerts derived from public data.
- Legal obligation: where the law requires us to keep or disclose data.
- Consent: for anything optional we ask about separately.
4. Sharing
We don't sell personal data. We share it only with:
- service providers that run Radar for us: hosting (Vercel, Railway), database, error monitoring (Sentry), wallet connection (Reown/WalletConnect, once enabled), AI text generation for summaries of public data and public posts (Anthropic; we send it public blockchain events and public X posts, not your account data), analytics, email;
- the platforms you use: Telegram, Discord, X, WalletConnect and your wallet, under their own policies;
- authorities, when the law requires it.
On-chain transactions you sign are public by nature.
5. Retention
- Account and settings data: kept while you use Radar.
- Sessions: 7 days. One-time sign-in links: deleted within a day of expiring. Unfinished or failed trade requests: 30 days.
- Public posts: posts from ecosystem accounts are removed from Radar when their author deletes them; posts from new accounts are shown for up to 48 hours; posts we don't show are deleted after 14 days.
- Deleted data: removed within 30 days of you sending
/forgetto the bot, or emailing us. - Exceptions: trade and fee records may be kept longer where the law requires it. Server logs are kept for up to [30–90] days.
6. Your rights
Depending on where you live, you may:
- access, correct or delete your data;
- object to or restrict processing;
- receive a copy of your data;
- complain to your data-protection authority.
Use the bot command /forget or Delete my data on the website's Connect page. Either deletes your account, settings, watchlists, sessions, sign-in links and wallet links. You can also email [contact email].
7. Security
We use reasonable technical and organisational measures. Data is encrypted in transit, access is limited, and secrets are stored separately.
No system is perfectly secure. We'll notify affected users and authorities of a personal-data breach where the law requires it.
8. International transfers
Our providers may process data outside your country. Where required, we rely on appropriate safeguards (for example, standard contractual clauses).
9. Children
Radar is not for anyone under 18. We don't knowingly collect children's data.
10. Changes
We'll post updates here with a new effective date, and announce material changes in our channels.
11. Contact
[contact email]