Privacy Policy

Effective: December 24, 2025

1. Introduction

TWZRD is an open-source attention oracle and claims portal that distributes Token-2022 rewards as loyalty incentives for authentic cross-platform engagement. This policy describes data handling across our off-chain PostgreSQL database and the immutable Solana blockchain.

2. Data We Collect & How We Use It

• Public Creator Identifier: Read-only OAuth access to your YouTube/Twitch channel ID and handle – used solely to verify protocol eligibility.
• Wallet Address: Provided by you to receive rewards; ownership verified via cryptographic signature.
• Mapping Link: We store the association between your public creator identifier and wallet address in username_mappings for reward computation and integrity. Both identifiers are public, but we treat their linkage as internal operational data.
• Operational Logs: Infrastructure providers (Vercel, Fly.io, AWS) automatically log IP addresses and request metadata for security, DDoS mitigation, and rate-limiting. These logs are ephemeral and never linked to your loyalty profile.

3. What We Do NOT Collect

We do not request or store personal email addresses, private account credentials, real names, or any other personally identifiable information beyond the mapping described above.

4. Google API Services Compliance

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. We do not use Google data for advertising or sell it.

5. Data Storage & Blockchain Reality

Your data exists in two distinct layers:

Off-Chain (PostgreSQL):
Mapping in username_mappings, raw events, and engagement aggregates. Private to our system and deletable on request.

On-Chain (Solana):
Reward claims are permanent transactions on Solana (program ID GnGzNdsQMxMpJfMeqnkGPsvHm8kwaDidiKjNU2dCVZop). These include:

• Your wallet address
• Claimed amount
• Epoch and subject_id (keccak256 hash of channel name)

Specific engagement details are never published directly. They are aggregated off-chain, hashed into Merkle leaves, and only the root + proof reach the chain – rendering individual engagement unreadable without off-chain data.

6. Data Retention & Deletion

• Retention Window: Raw engagement signals and heartbeats are retained only as long as needed for active claim windows and oracle integrity (~30 days post-epoch close). Expired raw data is pruned.
• Deletion Requests: Contact privacy@twzrd.xyz to delete your off-chain mapping (username_mappings row). We will remove it promptly.
• Immutable On-Chain Data: Any prior claim transactions remain permanently visible on Solana. We cannot alter or delete them.

7. Sharing & Transparency

• We do not sell or share data with third parties for marketing/advertising.
• All protocol code is public (MIT/Apache 2.0) at github.com/twzrd-sol.
• Blockchain Visibility: Claim transactions are public ledger entries. Anyone can view wallet addresses and amounts claimed.

8. Security & Protocol Integrity

• Private keys never leave your device.
• Anti-Sybil Defense: We analyze engagement patterns to detect botting or Sybil attacks. Flagged activity may be disqualified without notice to preserve fairness and treasury integrity.

9. Contact

Questions, privacy concerns, or off-chain deletion requests: privacy@twzrd.xyz