Privacy Policy | Probant Protocol

The short version

This site runs Google Analytics, which sets cookies and is the only third party script on the page. Everything else, including fonts, is served from our own domain. There is no advertising tracker, no pixel and no session recorder. The only personal information you give us directly is what you type into a form and choose to send, delivered by a form processor named below. We do not sell personal information and we have never sold personal information.

1. Who is responsible

Probant Protocol, a company being organized in the United States, is the controller of the personal information described here. Contact info@prbt.io for anything in this policy. On incorporation the registered entity name is substituted throughout this document.

2. What we collect

Form submissions: Name, company, work email, role, portfolio size, licensing program status, and the free text you write. Only the fields you fill in, only when you press submit. The email field and the role field are required; the rest are optional.
Wallet address: Your public address, in your browser only. If you connect a wallet on the early access page, the page reads your public address and network to display them back to you. This site has no backend, so that address is not transmitted to us, stored on a server, or linked to your email unless you type it into a form yourself.
Local storage: One key, named walletRdns. It records which wallet extension you last connected so the page can offer it again. It stays in your browser, it is never sent anywhere, and clearing your site data removes it.
Server logs: IP address, user agent, referring page, timestamp. Standard web server logs kept by our hosting provider for security and troubleshooting. We do not use them to build profiles.
Analytics: Google Analytics 4, property G-D0X7SB5P5E. It records which pages were viewed, roughly where in the world the visit came from, the device and browser, and the site that referred you. Google truncates IP addresses before storing them. We use it to see which pages are read and which are ignored, nothing more.
Cookies: Google Analytics sets first party cookies, typically _ga and _ga_G-D0X7SB5P5E. They distinguish one visitor from another across pages. There are no advertising cookies and no cross site tracking cookies, and we set none of our own.
Third party scripts: One. The Google Analytics tag loads from googletagmanager.com. Every other stylesheet, script, font and image on this site loads from our own domain.
Opting out: Any tracker blocker, or Google's own browser add on, stops it. Nothing on this site depends on analytics working, so blocking it costs you no functionality at all.

3. Why we collect it

To answer you. If you write to us through a form, we use your email to reply.
To run the early access list. Build updates, notice of when the anchor tool opens, and notice of when the contribution points program starts.
To decide what to build. Role, portfolio size, and what you tell us is broken shape the schema and the roadmap. This is the field we read most carefully.
To keep the site up. Server logs, for security and diagnostics.

We do not use your information for advertising, we do not enrich it against data brokers, and we do not run it through a lead scoring vendor.

4. Legal bases, if you are in the UK or the EEA

Consent for sending you build updates. You can withdraw it at any time, and every message carries a one click unsubscribe.
Legitimate interests for replying to your inquiry, for keeping the site secure, and for understanding what to build. We think a person who writes to us expects a reply and expects to be listened to.
Consent for analytics cookies where consent is required. If you are in the UK or the EEA and no consent prompt has appeared, that mechanism is not in place yet and analytics should be treated as running without it. We would rather say so here than imply a compliance posture we have not built.

5. Who receives it

Three categories of recipient, and no others.

FormSubmit. Our forms post to formsubmit.co, which relays the submission to our inbox as an email. FormSubmit processes the submission in transit. Review their practices before submitting anything you would not send by email.
Google. The Analytics tag sends page view data to Google, which processes it as our service provider under the Google Analytics terms. Google is in the United States.
Our email and hosting providers. Ordinary service providers that store our mail and serve this site, bound to process data only on our instructions.
Legal compulsion. If a valid legal process requires disclosure, or disclosure is necessary to protect rights, safety, or the integrity of the service. We will tell you unless we are prohibited from doing so.

We do not sell personal information. We do not share personal information for cross context behavioral advertising. Under the California Consumer Privacy Act as amended, that means we have no sale or share to opt out of.

6. How long we keep it

Early access list entries: until you unsubscribe or ask for deletion, and then removed within thirty days.
Inquiry correspondence: up to twenty four months, so we can pick up a thread you started last year.
Server logs: typically ninety days or less, per our hosting provider's retention.

7. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict processing, to withdraw consent, and to be free from discrimination for exercising any of these.

To exercise any of them, email info@prbt.io from the address you signed up with, or tell us enough to locate your record. We respond within forty five days, and we will tell you if we need longer. You may use an authorized agent. If you are in the UK or the EEA you also have the right to complain to your supervisory authority.

8. Where your information is processed

We operate from the United States and our providers process data there. If you contact us from outside the United States, your information is transferred to and processed in the United States, which may have different data protection rules than your country. Where a transfer mechanism is required, we rely on the European Commission's standard contractual clauses or another lawful mechanism.

9. Security

We keep the attack surface small on purpose. This site is static, has no database of our own, no user accounts, no session, and no login. That eliminates most of the ways a marketing site leaks data. The site is served over TLS. No system is perfectly secure, and we do not claim otherwise.

10. Children

This site is for business use and is not directed to anyone under sixteen. We do not knowingly collect information from children. If you believe a child has sent us information, write to us and we will delete it.

11. What happens when there is a product

Today Probant is a website with a mailing list. When the anchor tool ships, it will process different information: document digests, registration numbers, license terms, counterparty identities. That will require its own policy, and it will be published before the tool opens rather than after. One design commitment is already fixed and stated across this site: document contents are never uploaded. Only a cryptographic digest and an attestation go onchain.

12. Changes to this policy

If we change this policy, the effective date at the top of the page changes. If a change materially reduces protection for information we already hold, we will email everyone on the list before it takes effect rather than relying on you to check this page.

13. Contact

Privacy questions, requests, and complaints go to info@prbt.io. A postal address is added here when the entity is registered.