Privacy Policy
Scope
This Privacy Policy describes how OBSDN handles personal data collected through the OBSDN web interface, APIs, and related tools (the "Interface"). It supplements the Terms of Use.
Introduction
OBSDN respects user privacy and aims to comply with applicable data protection laws across the jurisdictions in which the Interface is offered. This policy explains what data is collected, why, who it may be shared with, and what choices users have.
The on-chain protocol behind OBSDN is permissionless and pseudonymous. This policy applies to the Interface layer — the off-chain product surface through which users access the protocol — not to the underlying blockchain itself.
Definitions
- Personal Data. Information that identifies, or could reasonably be combined with other information to identify, a natural person. Public blockchain data (wallet addresses, transaction history) is not Personal Data on its own but may become Personal Data when linked to off-chain identifiers such as email, IP address, or KYC records.
- Processing. Any operation performed on Personal Data, including collection, storage, use, disclosure, and deletion.
- User. Any person accessing the Interface.
Categories of Data Collected
Depending on how you use the Interface, OBSDN may collect:
- Wallet and on-chain data. Wallet address, signed messages, deposit and withdrawal events, positions, fills, and other on-chain interactions associated with your address.
- Account and onboarding data. Email address, social handles, referral codes, and — where required by applicable law — KYC information such as legal name, date of birth, government ID, and proof of address. KYC is handled by third-party verification providers; OBSDN receives verification status and a limited set of attributes.
- Communications. Messages you send to support, bug reports, feedback, and survey responses.
- Device and usage data. IP address, approximate geolocation derived from IP, browser type, operating system, device identifiers, referring URLs, pages visited, click and scroll events, latency metrics, and timestamps.
- Cookies and similar technologies. Session cookies, local storage entries, and analytics identifiers. See Cookies and Similar Technologies.
OBSDN does not knowingly collect data from minors. If you believe a minor has provided Personal Data, contact OBSDN to request deletion.
Purposes of Processing
Personal Data may be processed to:
- Operate, maintain, and improve the Interface and matching engine.
- Authenticate users, prevent fraud, detect market abuse, and enforce the Terms of Use.
- Comply with applicable laws, sanctions screening, anti-money-laundering obligations, and lawful requests from competent authorities.
- Enforce geographic restrictions described in Restricted Jurisdictions.
- Provide customer support and respond to inquiries.
- Send service announcements, security notices, and (with consent where required) marketing communications.
- Measure usage, diagnose errors, and analyze performance.
- Administer referral and incentive programs.
- Defend legal claims and protect the rights and safety of OBSDN, users, and third parties.
The lawful basis for processing is the performance of the user agreement, compliance with legal obligations, OBSDN's legitimate interests in operating a secure trading venue, and — where applicable — user consent.
Sharing and Disclosure
OBSDN does not sell Personal Data. Personal Data may be shared with:
- Service providers. Cloud hosting, analytics, error monitoring, KYC providers, customer support tooling, and similar processors acting on OBSDN's instructions under contractual confidentiality obligations.
- Compliance and legal recipients. Regulators, law enforcement, courts, and other authorities where required by law or to protect rights, safety, or property.
- Professional advisers. Lawyers, auditors, and accountants under duties of confidentiality.
- Successors. A buyer or successor entity in connection with a merger, acquisition, financing, reorganization, or sale of assets.
- Public posts. Anything you publish in public channels (community forums, social media replies to OBSDN, etc.) is visible to others by design.
International Transfers
OBSDN operates globally. Personal Data may be transferred to and processed in countries other than the one where it was collected. Where required, OBSDN relies on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
Cookies and Similar Technologies
The Interface uses cookies and local storage to keep sessions active, remember preferences, secure authentication, and measure usage. You can disable cookies in your browser, but some features may stop working. Where required, a cookie banner allows you to manage non-essential categories.
Retention
Personal Data is retained only as long as necessary for the purposes described in this policy or as required by law. KYC records and transaction logs are typically retained for the period mandated by financial regulations in the relevant jurisdiction. On-chain data cannot be deleted because the underlying blockchain is immutable.
Security
OBSDN applies administrative, technical, and physical safeguards designed to protect Personal Data, including encryption in transit, access controls, segregated environments, and audit logging. No system is perfectly secure; OBSDN cannot guarantee that data transmitted over the internet will be free from unauthorized access.
If a security incident materially affects your Personal Data, OBSDN will notify you and the relevant authorities to the extent required by law.
Your Rights
Depending on your jurisdiction, you may have rights to:
- Access the Personal Data OBSDN holds about you.
- Request correction of inaccurate data.
- Request deletion of data, subject to legal retention obligations.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on it.
- Lodge a complaint with your local data protection authority.
To exercise these rights, contact OBSDN through the support channels listed on the Interface. OBSDN may need to verify your identity before acting on a request. Some requests may be limited where compliance would conflict with legal obligations or the rights of others.
Third-Party Services
The Interface may link to third-party services (wallets, RPC providers, bridges, block explorers, analytics dashboards). Their handling of your data is governed by their own privacy policies. OBSDN is not responsible for third-party practices.
Changes to This Policy
OBSDN may update this Privacy Policy from time to time. Material changes will be announced through the Interface or other reasonable means. The "last updated" indicator at the top of the published policy reflects the current version. Continued use of the Interface after an update constitutes acceptance.
Contact
Questions, complaints, or rights requests may be directed to OBSDN through the support channels listed on the Interface.