Legal

Privacy Policy

Last updated: October 23, 2025

Your privacy is our priority. This policy explains how we handle your data in our privacy-first, decentralized social platform.

Quick Navigation

1. Introduction

Maskr is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our decentralized social platform. By using Maskr, you agree to the collection and use of information in accordance with this policy.

2. Data We Collect

2.1 On-Chain Data: We interact with blockchain data that is publicly available, including wallet addresses, NFT ownership, and transaction history.

2.2 Off-Chain Data: We store the following data on our servers:

  • - Posts and content you create
  • - Profile information (display name, bio, avatar)
  • - Interaction data (likes, comments, follows)
  • - Reputation scores
  • 2.3 Technical Data: We automatically collect:

  • - IP addresses (hashed and anonymized)
  • - Browser type and version
  • - Device information
  • - Usage statistics
  • 2.4 Optional Data: You may choose to provide:

  • - Email address (for notifications only)
  • - Social media links
  • 3. How We Use Your Data

    We use collected data for:

  • - Providing and maintaining our service
  • - Personalizing your experience
  • - Analyzing usage patterns to improve the platform
  • - Detecting and preventing fraud and abuse
  • - Complying with legal obligations
  • - Communicating with you (if you provided contact info)
  • We DO NOT:

  • - Sell your data to third parties
  • - Use your data for advertising
  • - Track you across other websites
  • - Collect personal identifying information without consent
  • 4. On-Chain vs Off-Chain Data

    On-Chain Data (Public & Immutable):

  • - Wallet addresses
  • - NFT minting and transfers
  • - Token transactions
  • - Governance votes
  • This data is stored on the blockchain and is publicly accessible. We cannot delete or modify this data.

    Off-Chain Data (Private & Deletable):

  • - Post content
  • - Direct messages (encrypted)
  • - Profile information
  • - Interaction history
  • You can request deletion of off-chain data at any time.

    5. Your Rights (GDPR Compliance)

    You have the right to:

  • - **Access:** Request a copy of your data
  • - **Rectification:** Correct inaccurate data
  • - **Erasure:** Request deletion of your data (off-chain only)
  • - **Portability:** Export your data in machine-readable format
  • - **Object:** Opt-out of certain data processing
  • - **Withdraw Consent:** Revoke permissions at any time
  • To exercise these rights, contact us at privacy@maskr.io

    6. Data Retention

    We retain your data for as long as:

  • - Your account is active
  • - Required to provide services
  • - Necessary for legal compliance
  • When you delete your account:

  • - Off-chain data is deleted within 30 days
  • - On-chain data remains on the blockchain
  • - Anonymized analytics data may be retained
  • 7. Data Security & Encryption

    We implement industry-standard security measures:

  • - **End-to-End Encryption:** Direct messages use Signal Protocol
  • - **Data Encryption:** All data encrypted at rest (AES-256)
  • - **Transport Security:** HTTPS/TLS 1.3 for all connections
  • - **Access Controls:** Strict role-based access
  • - **Regular Audits:** Security audits by independent firms
  • - **Incident Response:** 24/7 monitoring and response team
  • 8. Third-Party Services

    We use the following third-party services:

  • - **Infrastructure:** AWS, Cloudflare
  • - **Blockchain:** Polygon, IPFS, The Graph
  • - **Analytics:** PostHog (privacy-friendly, self-hosted)
  • - **Error Tracking:** Sentry
  • - **Email:** SendGrid (if you opt-in)
  • These services have their own privacy policies and we ensure they meet our privacy standards.

    9. Cookies & Tracking

    We use minimal cookies:

  • - **Essential Cookies:** Authentication, security
  • - **Preference Cookies:** Theme, language settings
  • We DO NOT use:

  • - Advertising cookies
  • - Cross-site tracking
  • - Social media tracking pixels
  • You can disable non-essential cookies in Settings.

    10. International Data Transfers

    Your data may be processed in countries other than your own. We ensure adequate protection through:

  • - EU Standard Contractual Clauses
  • - Privacy Shield certification (where applicable)
  • - Strong encryption in transit
  • 11. Children's Privacy

    Maskr is not intended for users under 13 years old. We do not knowingly collect data from children. If we discover data from a child under 13, we will delete it immediately.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of significant changes via:

  • - In-app notification
  • - Email (if you provided one)
  • - Prominent banner on the website
  • Continued use after changes constitutes acceptance of the new policy.

    13. Contact Us

    For privacy-related questions or requests:

    Email: privacy@maskr.io

    Data Protection Officer: dpo@maskr.io

    Mail: Maskr Privacy Team, [Address]

    We aim to respond within 72 hours.

    Questions About Privacy?

    Contact our Data Protection Officer for any privacy-related questions or concerns.

    Response time: Within 72 hours