Hydrex

Introduction

Hydrex is a decentralized, permissionless protocol built on the Base blockchain. This Privacy Policy ("Policy") explains how Hydrex ("we," "us," or "our") collects, uses, and shares information when you use the Hydrex website (https://hydrex.fi) or any related applications and services (collectively, the "Services"). Because Hydrex operates as a decentralized protocol, we generally do not have information about all users beyond what is publicly available on the blockchain.

We are committed to protecting your privacy in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). By using our Services, you agree to the collection and use of information as described in this Policy. If you do not agree, please discontinue use of the Services.

Information We Collect

We aim to minimize the personal data we collect. In fact, we do not collect or store personal identifiers such as your name, physical address, date of birth, email address, or IP address in connection with using the Services. We do not maintain user accounts, and you do not need to provide personal data to use Hydrex. The information we do collect is limited to what is necessary for operating and improving the platform, as detailed below:

Public Blockchain Data

When you connect a non-custodial cryptocurrency wallet to Hydrex, we collect your public blockchain wallet address and related on-chain data about your transactions. This information helps us understand how users interact with the protocol and enables us to screen for illicit activities (using intelligence from leading blockchain analytics providers) in order to comply with legal obligations. Note: Blockchain addresses and transactions are public information recorded on a distributed ledger; by themselves, such addresses are not created by us and are not personally identifying without additional context.

Device and Usage Information

We automatically collect limited technical information about the device and browser you use to access our Services. This may include your browser type, operating system, device type or model, language preference, referring/exiting pages, and timestamps of your visits. We also record information about your interactions with our interface – for example, pages or features you access, clicks, and other usage metrics. This usage data helps us troubleshoot issues, optimize the interface for different devices, and generally improve the user experience.

Local Storage & Cookies

We and our third-party service providers use browser cookies, localStorage, and similar tracking technologies to remember your preferences and enhance your experience across sessions. For instance, we may remember tokens or assets you have looked at or favorited so you don't have to re-enter information. These technologies may also collect certain device identifiers or settings (like language or screen size) to personalize the Services for you. We analyze this data in aggregate to understand user trends and preferences, without attempting to identify you personally.

Information You Provide Voluntarily

If you choose to communicate with us, we will collect the information you provide. For example, if you contact us for support or send inquiries via Discord, Twitter, or other channels, we will receive the content of your communication along with any contact details you provide (such as your social media handle). Similarly, if you provide feedback through surveys or forms, we will collect any information you submit. Please note: We will use such contact information only for the purposes for which you provided it (e.g. responding to your support request), and we will not attempt to link your contact information to your wallet address or browsing activity.

Information from Third-Party Sources

We may receive additional information about your blockchain address or activity from our partners and service providers in order to comply with legal and regulatory requirements. For example, for security and compliance, we might use blockchain analytics services to check whether a wallet address has a history of involvement in fraud, money laundering, or other illicit behavior. This helps us keep the Hydrex ecosystem safe and legally compliant. We do not receive any off-chain personal details about you from these providers – only risk scores or flags tied to wallet addresses, as needed for compliance purposes.

Job Applications (if applicable)

If you apply for a position or collaborate with the Hydrex project, we will collect the personal information you choose to share with us in that context (such as your name, contact information, résumé/CV, employment history, etc.). This information will be used solely for evaluating and communicating with you about the application or opportunity.

On-Chain Data Notice

Due to the nature of blockchain technology, any personal data that you directly or indirectly record on the blockchain (for example, information embedded in transaction metadata or smart contract interactions) will be permanently stored on public blockchain ledgers which are outside of our control. Hydrex does not control the persistence of such on-chain data, and we are not responsible for data that is inherent in blockchain transactions.

How We Use Your Information

We use the limited information we collect for the following purposes, in accordance with your instructions and applicable law (including appropriate legal bases under GDPR such as contract necessity, legitimate interests, consent, or legal obligation):

Providing and Improving the Services

We use your data to operate Hydrex's core functionality and provide you with our Services. This includes using technical and usage data to maintain, optimize, and enhance the platform's performance and user interface. For example, understanding aggregated usage patterns or device types helps us improve features and fix bugs to better serve our users.

Customization and User Experience

Information about your preferences (e.g. saved tokens or language setting) is used to personalize your experience across sessions. This ensures the Services remember your settings and provide a consistent, convenient experience tailored to you.

Customer Support and Communications

If you contact us with questions, feedback, or requests, we will use your provided information to respond and assist you. We may also use contact details to send service-related announcements or updates you have subscribed to (never for unsolicited marketing).

Safety and Security

We process information (especially blockchain addresses and usage activity) to protect the integrity of the Hydrex platform and its users. This includes detecting and preventing fraudulent, unauthorized, or illegal activities on the platform. For example, we may use wallet address screenings to block interactions with known illicit actors, guard against hacks or exploits, debug errors, and enforce our Terms and policies.

Legal Compliance

We may use collected data as required or permitted by law, regulations, or governmental requests. For instance, if obliged, we might use certain information to comply with KYC/AML requirements, tax laws, or to respond to lawful subpoenas and regulatory inquiries.

Analytics and Research

We may use aggregated, de-identified data about how users interact with Hydrex to conduct internal analysis and understand usage trends. This helps us make data-driven decisions to improve features and develop new products. Any aggregated insights will not identify you personally.

With Your Consent

If we ever need to use your information for a purpose not covered above, we will explain the purpose at the time of collection and will do so only with your consent (where required by law).

We will not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, unless such processing is permitted by law and you are informed of it. In practice, Hydrex does not engage in profiling of individual users – any automated analysis (e.g. flagging a wallet for suspicious activity) is solely to protect the platform and is subject to manual oversight.

How We Share Your Information

We do not sell or rent your information to third parties for their marketing or advertising purposes. We only share or disclose the categories of information described above in the following circumstances:

Service Providers and Partners

We may share data with trusted third-party service providers who perform services on our behalf to keep Hydrex running smoothly. This includes, for example, infrastructure and hosting providers (for website and app functionality), blockchain node and API providers (e.g. RPC or indexing services to read blockchain data), analytics and telemetry services (to help us understand usage), and communication tools (for support). These providers are contractually bound to process data only for our purposes and to protect it. For instance, we might share your wallet address or technical info with providers like Infura or Cloudflare to facilitate network requests and ensure security. We may also share a limited set of data (such as a wallet address hash or usage event) with analytics or blockchain security firms to help detect fraudulent activity.

Compliance with Law and Protection

We will disclose information to government authorities, regulators, or other third parties if we believe in good faith that such disclosure is required to (a) comply with any applicable law, regulation, legal process, or enforceable governmental request; or (b) protect the rights, safety, or property of our users, the public, or Hydrex itself. This includes sharing data in response to lawful subpoenas or court orders, or sharing information as necessary to investigate or prevent fraud, security issues, or other violations of law and our Terms of Service.

Security and Enforcement

In line with the above, if necessary we may share information to enforce our agreements and policies, and to address technical or security problems. For example, if a particular wallet address is involved in abusing the platform (such as a hacking attempt), we might share relevant info with blockchain security organizations or law enforcement to mitigate the threat.

Affiliates and Team Members

We may share information internally among the Hydrex project team and affiliated developers or entities that are involved in operating the Services, only on a need-to-know basis. (Because Hydrex is a decentralized project, this primarily refers to core contributors or any entity that may legally represent the project.)

Business Transfers

If Hydrex undergoes a major business transaction, such as a merger, acquisition, corporate reorganization, or asset sale, user information may be transferred to the successor entity as part of that transaction. In such an event, your information would remain subject to the protections of this Policy, and we would notify users of any change in data ownership or use.

With Your Consent

We will share your personal information with third parties in any other situation where you provide explicit consent for us to do so. For example, if you opt in to a co-promotional event or integration that requires sharing data with another platform, we will disclose data only with your permission.

Outside of the scenarios above, we do not disclose your information to any third parties for their own marketing purposes. In other words, Hydrex does not "sell" personal information as that term may be defined under laws like the CCPA.

Cookies and Tracking Technologies

Hydrex uses cookies and similar technologies to provide and improve our Services, as is common practice for web-based applications. Cookies are small data files stored on your device when you visit a website. We (or our analytics/service partners) use cookies and local storage to remember your settings and preferences, to keep you logged in (if applicable), and to gather usage analytics that help us enhance the platform. For example, cookies allow us to recall if you have interacted with certain features or to save your preferred interface mode.

We may utilize third-party analytics tools that deploy their own cookies or tracking pixels. For instance, Hydrex might use a service like Google Analytics or a privacy-focused analytics solution to understand user behavior in aggregate. These third-party tools may collect information such as your device identifier, browser information, and on-site interactions. We configure such tools to avoid collecting personally identifying information whenever possible, and we do not allow analytics providers to use the data for purposes beyond providing services to us.

Your Choices

Upon your first visit to our site, and periodically thereafter, you may see a prompt regarding cookie consent (if required by law in your region). You can control or disable cookies at any time through your browser settings. Most browsers allow you to block or delete cookies – consult your browser's help documentation for instructions, or visit resources like AllAboutCookies.org for guidance. Please note that if you disable cookies, some features of the Services (such as remembering your preferences) may not function properly.

Additionally, you can opt-out of certain third-party tracking: for example, Google offers an opt-out browser add-on, and there are industry opt-out sites for interest-based advertising (such as the NAI and DAA opt-out pages). Using privacy-oriented browsers or extensions can also help block tracking scripts. While Hydrex does not serve third-party ads, these measures can give you more control over your data across the web.

Third-Party Links and Integrations

Our Services may contain links or integrations to third-party websites, services, or content that we do not control. For example, our interface may reference external resources (like documentation on GitBook) or allow you to interact with third-party features (such as wallet providers or social media plugins). If you click on a link to an external site or use a third-party service through Hydrex, any data you provide to those third parties is not covered by this Privacy Policy.

We are not responsible for the privacy practices or content of third-party sites or services. We encourage you to review the privacy policies of any external sites you visit or third-party services you use. This Policy applies solely to data collected by Hydrex via our own Services.

Data Security

We take the security of your information seriously. Hydrex implements and maintains reasonable administrative, technical, and physical safeguards to protect the information we collect from loss, theft, misuse, unauthorized access, disclosure, alteration, or destruction. These security measures include encryption where appropriate, regular auditing of our smart contracts and code (security audits), and restricting access to personal data to only those team members and service providers who need it for operation of the Services. We also employ measures like firewalls and monitoring for suspicious activity on our website.

However, please be aware that no method of transmitting or storing data on the internet can be guaranteed to be 100% secure. While we strive to protect your information, we cannot warrant the absolute security of data against cyber-attacks or other unauthorized intrusions. You use the Services at your own risk. It is also important for you to take steps to secure your own accounts and devices. For instance, safeguard your blockchain wallet credentials and private keys, as compromise of those can result in loss of assets or exposure of your on-chain data. Hydrex will never ask you for your private keys or seed phrases; if anyone pretending to be from Hydrex does so, treat it as a scam.

In the event of any data breach that affects your personal information, we will comply with all applicable breach notification laws. This may include notifying affected users and relevant authorities as required.

Data Retention

We retain the personal information we collect for only as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable laws and regulations. In practice, because we minimize data collection, much of the information (like on-chain data) is not stored on our servers at all but rather queried live from the blockchain. For any off-chain data that we do store (for example, support communications or analytics logs), we will typically delete or anonymize personal data when it is no longer needed for the original purpose of collection or any legitimate business or legal need.

If you request deletion of your data, we will also erase your personal information from our systems unless we are legally allowed or required to retain it (for example, to comply with financial regulations, resolve disputes, enforce our agreements, or for legitimate interests such as security incident investigation). Even when we retain data, it remains subject to this Policy and our internal security standards.

Importantly, as noted above, we cannot alter or delete information that is stored on public blockchains. Transaction data and addresses that are recorded on the Base blockchain (or any other public network Hydrex interacts with) are immutable and may remain accessible to the public indefinitely by design. This data is outside our control and not stored by us off-chain, so it will persist on the blockchain even if you delete your Hydrex usage data from our systems.

Your Rights

Depending on your jurisdiction, you may have certain rights and choices regarding your personal data. Hydrex is committed to honoring the rights of users as required under GDPR and other applicable data protection laws. These rights may include the following:

Right to Be Informed

You have the right to be informed about the collection and use of your personal data. This Privacy Policy is intended to provide that information.

Right of Access

You can request confirmation of whether we are processing your personal data and, if so, request access to that data (commonly known as a "data subject access request"). This allows you to receive a copy of the personal data we hold about you.

Right to Rectification

If any personal data we have about you is incorrect or incomplete, you have the right to request that we correct or update it.

Right to Erasure

You can request that we delete your personal data, in certain circumstances, also known as the "right to be forgotten". We will honor such requests to the extent required by law, but please note that we cannot delete data that is stored on a blockchain or that we are legally required to keep.

Right to Restrict Processing

You have the right to ask us to suspend the processing of your personal data in certain scenarios (for example, if you contest the data's accuracy or object to our processing).

Right to Data Portability

You have the right to request a copy of your personal data in a machine-readable format, and/or to have us transmit it to another controller where technically feasible.

Right to Object

You may object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) and you believe your particular situation warrants objection, or if we were using your data for direct marketing (which we do not).

Right to Withdraw Consent

If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect any processing already done, but will stop future processing of the relevant data.

Right Not to Be Subject to Automated Decisions

You have the right to not be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you, except under certain exceptions. (Hydrex does not engage in such automated decision-making without human involvement.)

These rights are not absolute – they can be subject to conditions and exceptions under applicable law. For example, we may not be able to delete data that we must retain by law, and we cannot edit or remove personal data that is recorded on a blockchain beyond our reach. Additionally, because Hydrex does not generally link any on-chain data to real-world identities, we may not be able to verify or locate personal data about you unless you have communicated with us off-chain. If we cannot reasonably associate the data we hold with you, we may be unable to fulfill certain requests (and will inform you of such in our response).

Exercising Your Rights

To exercise any of these rights, please contact us as described in the "Contact Us" section below. We will respond to verifiable requests as promptly as possible and in any event within the timeframe required by law (generally within 30 days for GDPR requests). We may need to request certain information from you to confirm your identity (to avoid giving your data to an unauthorized person). For example, we might ask you to verify control of the blockchain address or social media account associated with your usage. Any information you provide for verification will only be used to verify and process your request.

We will not charge you for making a request unless it is manifestly unfounded or excessive. If you have concerns about our data practices, we ask that you contact us first so we can try to resolve them. However, if you are an EU/UK resident, you also have the right to lodge a complaint with your supervisory data protection authority (for example, in the EU you may contact your country's data protection regulator).

California Privacy Rights

If you are a California resident, you are entitled to additional notices and rights under the CCPA (California Consumer Privacy Act) and other state laws. This section provides that information and is intended to supplement the rest of our Privacy Policy for California users.

No Sale of Personal Information

Hydrex does not "sell" personal information to third parties for monetary value or other valuable consideration, as defined under the CCPA. We also do not share personal information with third parties for their direct marketing purposes.

Categories of Information Collected

In the past 12 months, we may have collected (as described in Information We Collect above) identifiers like blockchain addresses and device information, internet or electronic activity information (usage data, cookies), and in some cases limited contact information (if you provided it via support or communication). This data is used solely for the business purposes described in this Policy – such as providing the Services, security, and compliance.

California Rights

Subject to certain exceptions, California residents have the right to request: (1) Disclosure of Information Collection and Sharing – you can ask for a report detailing the categories of personal information we have collected about you, the categories of sources of that information, the business purpose for collecting it, the categories of third parties with whom we shared personal information, and the specific pieces of personal information we have about you; and (2) Deletion – you can request that we delete the personal information we have collected from you (again, with certain exceptions).

To exercise these rights, please contact us using the information in the "Contact Us" section. We will confirm receipt of your request and respond within the timeframe required by law (typically 45 days for CCPA). Please note we are required to verify your identity before fulfilling access or deletion requests, which may involve asking you for additional information or confirmation.

You may designate an authorized agent to make a request on your behalf. If you do so, we will need proof that the agent is authorized to act for you, and we may still require you to verify your identity directly. Hydrex will not discriminate against you for exercising any of your privacy rights. In other words, we will not deny you the Services, provide a different level of Service, or charge a different price because you exercised your rights under the CCPA (as per the law's non-discrimination provisions).

Children

The Services are not directed to children or anyone under the age of 18. We do not knowingly collect any personal information from minors under 18 years old. If you are under 18, you should not use Hydrex or submit any personal information to us. In the event that we learn we have inadvertently collected personal data from a child under 18, we will take steps to delete such information from our records.

If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately so that we can investigate and delete the information. (For compliance with the U.S. Children's Online Privacy Protection Act, we note that we do not knowingly collect information from anyone under 13, and the platform is not intended for users under 13 in any capacity.)

Changes to this Privacy Policy

We may revise or update this Privacy Policy from time to time in response to evolving legal, technical, or business developments. If we make material changes, we will notify users by posting the updated Policy on our website and updating the "Last updated" date at the top. In certain cases, we may provide additional notice (such as a banner on the site or a notification via other communication channels) about significant changes.

We encourage you to review this Policy periodically to stay informed about how we protect your information. Your continued use of the Services after any changes to this Policy constitutes your acceptance of the revised terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us through our official channels. You can connect with us through our community platforms on X (@hydrexfi) or Farcaster (@hydrexfi) for general questions. For privacy-specific or sensitive matters, however, we recommend contacting us through these official channels so we can address your inquiry formally.

We will do our best to respond promptly and help resolve any issues or answer any questions you may have about your privacy.

Privacy Commitment

By using the Hydrex protocol and interface, you acknowledge that you have read and understood this Privacy Policy and agree to our data collection and use practices as described. We are committed to protecting your privacy while providing a secure and efficient decentralized trading experience.

If you do not agree with this Privacy Policy or are unable to comply, please discontinue use of the Hydrex platform. Your use of Hydrex signifies your acceptance of this Privacy Policy in full.