Privacy Policy
Last updated 9 September 2026 · There is no account here, so most of this is about data you published yourself.
1. About this policy
This Privacy Policy (the “Policy”) is an agreement between you and the people operating gazua.xyz (“Gazua”, “we”). It explains what we do with information when you use the Gazua website, its interface, and its public API.
It does not cover the GIWA blockchain, the wallets and services you connect through, or the sites you reach from a launch’s links. Those are not ours, and section 8 explains why that distinction matters more here than it does for most products.
There is no account. We do not issue one, and nothing here is protected by a password we hold. An address proves itself by signing, which is why we store no credentials — there is nothing to register, nothing to reset, and nothing worth stealing from us.
2. What we collect
Public blockchain activity
We index GIWA so the product can show it: launches, trades, balances, fee credits, claims, dividends and referral bonds, each against the address that made them. This is public data that we read rather than information you give us, and every reading of it is available to anyone with a node.
Your wallet address
When you connect a wallet, we learn its address and use it to show you your holdings, earnings and dividends. Connecting does not create a record about you on our side, and disconnecting leaves nothing behind.
Signed messages
Some actions are authorised by a signature rather than a login: editing a launch’s description, binding a referral, proving you own a social handle, or authorising a sponsored withdrawal. We verify the signature, act on it, and keep the resulting record — for example, which address last edited a launch’s metadata.
What you publish about a launch
A launch’s description, links and artwork are yours and are stored by us, because the product lets you edit them and an immutable contract cannot. They are published to everyone.
Social account information
If you sign in with X or GitHub, our wallet provider Privy handles the sign-in and tells us the account’s identifier, its handle, its display name, its avatar, and the address of the embedded wallet it manages for you. We store those so the product can show @you instead of a hex string and so a launch can pay you.
We also look handles up without anyone signing in. When a creator names @someone as a fee recipient, we read that account’s public profile from X or GitHub to record who is being paid. If it is a handle you own, that record exists before you have ever visited us.
Our notification bot keeps one more thing: that a handle has already been told what it is owed, so it does not repeat itself in public at a named person.
Technical request data
Our servers see your IP address, the request, and standard headers, as every web server does. The IP is used to apply rate limits — some routes cost us money to serve — and is held in memory for the length of the limit window, typically a minute. It is not written to our database and not used to build a profile. Our hosting and CDN providers keep their own operational logs under their own policies.
Your browser’s own storage
We keep a few preferences in your browser, where they stay. Nothing here reaches us and clearing your site data removes all of it:
| Key | What it is for |
|---|---|
gazua.referral.pending | The referral code from a link you arrived on, until a trade uses it. |
gazua.slippagePercent | Your slippage tolerance, so it survives a reload. |
gazua.payWithQuote | Whether the trade panel is set to pay with the pairing asset. |
gazua.create.draft.v2 | An unfinished launch form, so refreshing does not lose what you typed. |
Privy sets its own storage to keep you signed in. The embedded charting library on a launch’s page is a third-party product with its own telemetry, which may report an anonymised pageview to its vendor.
3. What we do not collect
- No passwords, private keys or seed phrases. We could not use them and never ask.
- No email address, phone number or postal address, unless you write to us — and then only what is in your message.
- No identity documents and no KYC. We do not verify who you are.
- No advertising or cross-site tracking cookies, and no ad-network pixels.
- No behavioural profiles, and no sale of personal information to anyone.
4. How we use what we hold
- To run the product: show launches, prices, holdings, earnings and dividends.
- To let a launch pay a social handle, and to let the person behind that handle collect.
- To attribute referrals and pay them.
- To pay gas on someone’s behalf when they have signed an authorisation for it.
- To notify a handle, on the platform it belongs to, that it has fees waiting.
- To moderate: refuse or remove artwork, names and links that break our terms.
- To keep the service up and its costs bounded — rate limits, abuse investigation, debugging.
- To answer you when you contact us.
- To comply with the law, and to respond to lawful requests.
5. Legal bases
Where the GDPR or a similar law applies, we rely on: performance of a contract, for what the product needs to work; our legitimate interests, for security, abuse prevention and product operation; your consent, where we ask for it; and legal obligation, where one applies.
6. Who we share it with
We do not sell personal information. We share it with providers who run parts of the service on our behalf — wallet infrastructure, artwork pinning, databases, hosting and CDN — each limited to what their job needs. We may also disclose information where the law requires it, to investigate abuse or a security incident, or to protect our rights or somebody’s safety.
7. Third parties you reach through us
Some of the product is other people’s software, and what they learn about you is governed by their policies, not this one: Privy for sign-in and embedded wallets; the GIWA network and the RPC providers that carry your transactions; Uniswap v4 for graduated pools; our artwork pinning provider and the IPFS network; X and GitHub for handle lookups and notifications; the charting library on a launch’s page; and our hosting and CDN providers. Wallet extensions you connect are likewise their own.
8. The chain does not forget
Every trade, launch, claim and transfer is recorded on a public blockchain, permanently, by design. It is copied by every node, indexer, explorer and analytics firm that follows GIWA, and an address plus its history can identify you if you have linked that address to your name anywhere else — including in a launch you named after yourself.
We cannot delete, alter or hide anything on chain, and neither can anyone else. A request to erase your data reaches what we hold off chain and nothing more. That is a property of the technology rather than a policy of ours, and it is worth understanding before you transact rather than after.
9. Artwork is published, not stored privately
A launch’s image is addressed by a hash of its bytes and pinned to IPFS, a network of independent nodes. Anyone who has fetched it can keep it and serve it. We can stop pinning an image, and that is all we can do — once it has been distributed we cannot unpublish it. Do not upload anything you would want withdrawn later.
10. How long we keep things
Indexed chain data is kept for as long as we run the product; it is a copy of a public record and can be rebuilt from the chain at any time. Launch metadata and handle records last as long as the launch they belong to. Rate-limit counters last a minute. Provider logs follow the providers’ own retention. We keep correspondence as long as we need it for the matter it concerns and for our legal record.
11. Security
We hold no keys to your funds, no passwords and no identity documents, which removes most of what a breach of us could cost you. What we do hold sits behind access controls and encrypted transport. No system is perfectly secure, and we do not promise that ours is.
Report a vulnerability to support@gazua.xyz.
12. Where processing happens
We and our providers operate internationally, so information may be processed outside the country you are in, including in jurisdictions with different data-protection rules. Where the law requires safeguards for such a transfer, we put them in place.
13. Your rights
Depending on where you live, you may have the right to ask for access to your personal information, its correction or deletion, a portable copy, or a restriction on how we use it, and to object to processing based on legitimate interests. Write to support@gazua.xyz and we will respond as the applicable law requires. We may need you to prove control of an address — a signature is usually enough — before we act on a request about it.
Two limits, stated plainly: we cannot erase anything recorded on the blockchain, and we cannot recall artwork already distributed on IPFS. Everything else we hold, we can.
We do not sell personal information or share it for cross-context behavioural advertising, under any state privacy law that uses those terms.
14. Children
The product is not for anyone under 18, and we do not knowingly collect information from anyone under that age. If you believe a minor has used it, write to us and we will delete what we hold.
15. Changes
We will update this policy as the product changes. The date at the top says when it last changed, and a material change will be surfaced in the interface.