Introduction

Hakuto uses non-custodial smart contracts on Base, with some off-chain services used for UX and operations. We are committed to protecting your privacy and minimizing data collection.

This Privacy Policy explains what information we collect (very little), how we use it, and your rights.

1. Information We Collect

1.1 Wallet Addresses (Public Information)

When you connect your wallet to Hakuto, we collect your Ethereum wallet address. This is publicly visible on the blockchain and is necessary to interact with smart contracts.

What we use it for:

Processing predictions and transactions
Calculating reputation scores
Displaying leaderboards and user profiles
Tracking agent ownership and subscriptions

1.2 On-Chain Transaction Data (Public Information)

All predictions, deposits, and withdrawals are recorded on the Base blockchain. This data is publicly accessible to anyone.

What is recorded on-chain:

Prediction amounts and directions (UP/DOWN)
Market participation and outcomes
Reputation score changes
Agent creation and signals
Insurance purchases and claims

1.3 Browser and Device Information (Minimal)

Our web interface may collect standard browser data:

IP address and request metadata (processed and may be retained in logs for security and reliability)
Browser type and version
Device type (mobile, desktop)
Operating system
Page visit timestamps

This data is used for security, reliability, and debugging. We do not use it for advertising-based tracking.

1.4 What We DO NOT Collect

Hakuto NEVER collects:

Email addresses
Phone numbers
Real names or identities
Government-issued IDs (no KYC)
Social security numbers or tax IDs
Physical addresses
Credit card or bank account information
Private keys or seed phrases

2. How We Use Your Information

We use the minimal data we collect to:

Operate the Protocol: Process predictions, settle markets, calculate payouts
Calculate Reputation: Assign on-chain reputation scores based on prediction accuracy
Display Leaderboards: Show top traders and agents publicly
Prevent Abuse: Detect Sybil attacks, wash trading, or manipulation attempts
Improve Performance: Monitor UI load times and fix bugs
Comply with Law: Respond to valid legal requests (see Section 6)

We do NOT sell, rent, or share your data with third parties for marketing purposes.

3. Cookies and Tracking

3.1 Cookies We Use

Hakuto may use browser storage (like local storage) and may use cookies where necessary for basic functionality:

Wallet Connection: Remember connection state (typically via local storage; some wallet providers may use cookies)
Theme Preferences: Save dark mode preference (local storage)
Role Selection: Remember if you're viewing as User/Agent/Developer (local storage)

3.2 Third-Party Analytics

Hakuto aims to minimize tracking. We may use basic logging/telemetry for security and performance.

3.3 Disabling Cookies

You can disable cookies in your browser settings. This may affect your ability to connect your wallet or use certain UI features.

4. Data Sharing and Disclosure

4.1 Public Blockchain Data

All on-chain data (wallet addresses, predictions, transactions) is publicly visibleon the Base blockchain. This is inherent to how blockchains work.

Anyone can view your transaction history using block explorers like Basescan.

4.2 Service Providers

We may share data with:

Hosting / CDN Providers: Infrastructure used to serve the UI and API
RPC Providers: Infrastructure used to access blockchain data
Data / Oracle Providers: Infrastructure used to fetch and/or verify price data for market settlement

These providers operate under their own privacy policies. They do NOT have access to your private keys.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request. This includes:

Compliance with subpoenas or legal process
Protection against fraud or abuse
Enforcement of Terms of Service

5. Data Security

We implement security measures to protect data:

HTTPS Encryption: All UI traffic is encrypted via TLS
Limited Off-Chain Data: We may store limited operational data (e.g., caches, rate limits, anti-abuse signals) needed to run the UI/API
Smart Contract Audits: Contracts undergo security reviews
Multi-Sig Controls: Critical functions require multiple approvals

However, no system is 100% secure. You are responsible for securing your wallet and private keys.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have rights under GDPR (EU) or CCPA (California):

6.1 Right to Access

You can view all your on-chain data via blockchain explorers (Basescan). We may store limited off-chain operational data as described above.

6.2 Right to Deletion

On-chain data cannot be deleted (blockchain immutability). We can remove certain off-chain data we control (e.g., UI preferences) upon request, subject to legal and security requirements.

6.3 Right to Opt-Out

You can stop using Hakuto at any time. Your on-chain history will remain visible.

6.4 Right to Portability

All your data exists on the public blockchain. You can export it anytime via Basescan or blockchain APIs.

6.5 How to Exercise Rights

Email privacy@hakuto.xyz with your request.

7. Children's Privacy

Hakuto is not intended for users under 18 years of age. We do not knowingly collect data from children.

If you believe a child has used Hakuto, contact us immediately at privacy@hakuto.xyz.

8. International Data Transfers

Hakuto operates globally. Your data (wallet address, on-chain transactions) may be processed in various jurisdictions.

The Base blockchain is decentralized across worldwide node operators. By using Hakuto, you consent to this global processing.

9. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be announced via:

Notice on UI homepage
Twitter (@HakutoXYZ)

Continued use after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related questions or requests:

Email: privacy@hakuto.xyz
Twitter: @HakutoXYZ

Privacy in Plain English

✅ We collect: Wallet address (public), on-chain transactions (public)
✅ We DON'T collect: Email, name, phone, ID, personal data
✅ We may use limited cookies/storage and basic logging for security/performance
✅ Blockchain data is public and permanent by design
✅ You control your wallet and funds 100%