Bounties · Legal
Privacy Notice
Effective 12 August 2026
Bounties is owned and managed by Bittrees, which is responsible for information processed to operate the hosted interface. Bittrees Technology authors the interface on Bittrees’ behalf. Public blockchains remain independent, public systems that we do not control.
What we collect
We process the wallet address you connect; signed authentication messages, nonce and session records; selected roles; bounty scopes and milestones; proposals; evidence URIs and hashes; token inspection results; ratings and reviews; reports and moderation records; notifications; escrow transaction references and canonical contract state; and technical records such as timestamps, browser and network metadata, security events, and service logs. We do not ask for a password, seed phrase, or private key.
Public blockchain data
Wallet addresses, contract calls, token movements, event logs, and commitments on a public blockchain are public and may be permanent. We cannot erase or change chain data. A wallet address is pseudonymous, not necessarily anonymous, and may be linked to other activity by participants or third parties.
Why we use information and our legal bases
We use information to authenticate wallets; perform our agreement to provide bounty, proposal, evidence, notification, review, reporting, and moderation features; verify canonical chain state; secure, debug, and improve the service in our legitimate interests; prevent abuse and protect participants; comply with legal obligations; and establish, exercise, or defend legal claims. Where law requires consent for a specific activity, we will request it and permit withdrawal without affecting earlier lawful processing.
Infrastructure and recipients
The application is served through Vercel and uses managed Supabase/Postgres services for persistence and application logic. Wallets, configured RPC providers, block explorers, blockchain networks, and storage or links selected by participants may receive transaction or request data. We may disclose information to infrastructure providers, professional advisers, transaction participants where the product requires it, a successor in a business reorganization, and authorities when legally required. Providers may process information only for authorized services and under applicable contractual and security obligations.
Visibility
Public wallet profiles, marketplace listings, proposals associated with a transaction, evidence links, ratings, reviews, wallet identifiers, token information, and chain references may be visible to other users or the public. Authorized moderators can see reported and hidden content needed for review. Frontend moderation does not erase public chain data or records retained for security, legal, or integrity purposes.
Cookies and browser storage
We use security-critical, short-lived session cookies and browser session storage for wallet authentication and cross-site-request-forgery protection. We do not use this information for cross-site advertising. If that changes, we will update this notice and provide any consent mechanism required by law before doing so.
Retention and security
We retain offchain account and transaction-support records while an account or bounty is active and afterward only as reasonably needed for participant access, security, fraud prevention, dispute evidence, legal obligations, and enforcement. Short-lived authentication challenges and sessions expire according to their security settings; operational logs and moderation records are periodically reviewed and deleted or de-identified when their purpose no longer requires identification. We use access controls, row-level database policies, wallet signatures, short-lived sessions, security logging, encryption in transit, and managed infrastructure controls. No system is perfectly secure. Onchain retention is controlled by the relevant blockchain, not by Bounties.
Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or port offchain personal data; withdraw consent; and complain to a data-protection authority. Identity verification may require a fresh wallet signature. Rights may be limited by public-chain immutability, legal obligations, fraud prevention, security, freedom of expression, or the rights of others. You may submit a request through the official Bittrees contact channel at bittrees.org. We will not discriminate against you for exercising a privacy right.
International processing and younger users
Infrastructure providers and public blockchains may process information across borders. Where required, we use contractual safeguards, adequacy decisions, or another lawful transfer mechanism and apply supplementary security measures appropriate to the service. Bounties is not directed to children, and you must meet the legal-age and capacity requirements applicable to your agreement.
Automated decisions, changes, and contact
Bounties does not make solely automated decisions that produce legal or similarly significant effects about access to work. Deterministic smart-contract results follow participant-authorized code and deadlines, not profiling by Bittrees. We will date material changes to this notice and provide notice where required. Privacy questions and requests may be submitted through the official Bittrees contact channel at bittrees.org.