# Privacy Policy

**Last Updated:** January 10, 2026

> **V3 scope notice:** This legacy mini-app draft is not a V3 launch privacy
> notice or counsel-approved policy. The proposed Base V3 pilot is review-only
> with zero active partners; partner acceptance, counsel review, Base Sepolia
> rehearsal, mainnet approval, and x402 evidence remain unset.

## Our Commitment

For the proposed Base V3 pilot, “privacy-preserving” means **data minimization
and reviewed commitments/references**. It does not mean zero data collection,
private or invisible transactions, anonymity, or that any belief text is never
stored by every client, wallet, RPC, relay, or other third party.

## Data handling

Do not submit PII, credentials, private keys, raw evidence, or freeform
narratives in Base calldata, events, public strings, or commitments. Any
off-chain collection, retention, access, deletion/return, or use of cookies,
logs, analytics, email, and third-party infrastructure must be documented in a
separate approved data map; this legacy draft does not make an absolute claim
about those systems.

## What Is Public

Due to the nature of blockchain technology, the following information is publicly visible on the Base blockchain:

- ✅ **Your wallet address** (public by blockchain design)
- ✅ **Belief hashes** (SHA256 hashes of your belief text)
- ✅ **Transaction hashes** (Base blockchain transaction IDs)
- ✅ **Timestamps** (when attestations were created)
- ✅ **Module IDs** (which verification module was used)

**Important:** A cryptographic hash/commitment is public and may be linkable or
guessable. It is not automatically anonymous and does not prove that the
underlying material was never stored elsewhere.

## What Stays Private

Zero-knowledge or commitment-based designs can minimize disclosed information
only for a specific reviewed implementation and statement. They do not make a
Base transaction private. Never provide private keys to a website or service.

## Third-Party Services

### WalletConnect

We use WalletConnect for wallet connections. WalletConnect may collect:
- Wallet connection metadata (for session management)
- IP addresses (for relay server functionality)

See [WalletConnect Privacy Policy](https://walletconnect.com/privacy) for details.

### Base Network

All transactions are recorded on the Base blockchain. Base (operated by Coinbase) may collect:
- Transaction data (public blockchain data)
- RPC request metadata (IP addresses, timing)

See [Base Privacy Policy](https://base.org/privacy) for details.

## Data Storage

For the V3 pilot, any off-chain system of record, retention period, access
control, and deletion/return process remains subject to separate approval. Base
data is public and immutable once published.

## Your Rights

Rights and request handling depend on the actual operator, data map, and
applicable law. Public Base data cannot be deleted or made private.

## Children's Privacy

Do not submit children's personal data or any other unnecessary personal data
to public chains or this application.

## Changes to This Policy

If we ever change our privacy practices (e.g., add optional analytics), we will:
1. Update this document
2. Update the "Last Updated" date
3. Announce changes in our repository

## Compliance

No compliance determination is made by this legacy draft. Qualified counsel
must review the actual V3 operator, data flows, purposes, retention, and
jurisdictional requirements before activation.

## Contact

For privacy questions or concerns:
- **GitHub Issues:** [vaultfire-init/issues](https://github.com/Ghostkey316/ghostkey-316-vaultfire-init/issues)
- **Security Issues:** Please report security vulnerabilities responsibly via GitHub Security Advisories

## Philosophy

We believe:
- **Privacy is a right, not a feature**
- **Surveillance capitalism is wrong**
- **You should own your data**
- **Minimize data and do not overstate what public-chain technology hides**

Vaultfire proves you can build powerful Web3 applications without compromising user privacy.

---

**TL;DR:** Minimize data. Base transactions and commitments are public and
durable. This legacy draft makes no zero-data, invisible-transaction, or
absolute-belief-privacy claim.
