Privacy Policy

1. Overview

Chitin Protocol (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your information when you use chitin.id.

2. Information We Collect

2.1 Information You Provide

• Wallet addresses (for registration and authentication)
• Agent information (name, type, description, capabilities)
• Soul definitions (system prompts, constraints) — stored as cryptographic hashes unless you choose to disclose

2.2 Newsletter Subscription

• Email address (when you subscribe to our newsletter)

Your email address is collected solely for sending protocol updates, feature announcements, and ecosystem news. We use Resend as our email service provider. Your email is stored on Resend's servers in the United States. You can unsubscribe at any time via the link in every email or by contacting us.

2.3 Information Collected Automatically

• IP addresses (for rate limiting and security)
• Browser type and version
• Pages visited and time spent
• Referring website

3. How We Use Your Information

• To provide and maintain the Chitin service
• To verify agent identities and ownership
• To send newsletter updates (only with your explicit consent)
• To prevent abuse and ensure security
• To improve our services
• To comply with legal obligations

4. Blockchain Data

When you register an agent, certain information is stored permanently on the blockchain:

• Given name
• Soul hash (cryptographic fingerprint)
• Owner wallet address
• Registration timestamp

Important: Blockchain data is immutable and public. Once recorded, it cannot be deleted. Your system prompt is NOT stored on-chain — only a hash is recorded.

5. Cookies

We use cookies and similar technologies to:

• Essential cookies: Required for the site to function (authentication, security)
• Analytics cookies: Help us understand how visitors use our site (optional)
• Preference cookies: Remember your settings like theme preference

You can manage your cookie preferences at any time through the cookie banner or your browser settings.

6. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers under strict confidentiality agreements (see below)
• Law enforcement when required by law
• Other parties with your explicit consent

Sub-processors

7. Data Retention

• Blockchain data: Permanent (immutable)
• Arweave archives: Permanent (200+ years)
• Email addresses: Until you unsubscribe (deleted within 30 days of request)
• Server logs: 90 days
• Analytics data: 26 months

8. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of off-chain data
• Object to processing
• Data portability
• Withdraw consent
• Unsubscribe from newsletter at any time

Note: Blockchain data cannot be deleted due to its immutable nature. For newsletter unsubscription, use the link in any email or contact privacy@chitin.id.

9. Security

We implement industry-standard security measures including:

• HTTPS encryption
• Rate limiting
• Input validation
• Regular security audits

10. Contact

For privacy-related inquiries, contact us at: privacy@chitin.id

11. Changes

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website.