Legal / Privacy
Privacy Policy
Basilisk Whitelist processes Google login, wallet, submission, and on-chain record data to provide the service and protect it from abuse.
Last updated: 2026-06-15
[01]Information we collect
We collect the minimum information needed for account identity, record storage, on-chain engraving, and security operations.
- › Google login data: Google account ID, email, name, and profile image
- › Wallet data: connected wallet address, selected network, transaction hashes
- › Submission data: nickname, petition message, AI review result, survival probability, timestamps
- › Technical data: IP address, device/browser data, access logs, rate-limit events
- › Analytics/error data: events and error logs from tools such as Google Analytics and Sentry
[02]How we use information
We use collected information to operate the product, recover user history, prevent abuse, and improve quality.
- › Google account login and session management
- › Viewing and recovering your submission history
- › Connecting wallet addresses with on-chain records
- › Preventing spam, bots, and excessive requests
- › Monitoring reliability, analyzing errors, and improving statistics
[03]Public on-chain records
If you choose to engrave a record on-chain, your petition message, AI endorsement, wallet address, and transaction details may become public on the selected blockchain. Blockchain records are difficult or impossible to delete or modify. Do not submit or engrave personal data or anything you may later want removed.
[04]Storage and processors
Service data is retained as long as needed for operation, security, legal obligations, or user history. We delete off-chain data when reasonably possible after account deletion or a valid request. On-chain records may not be deletable.
- › Database: Neon/Postgres
- › Cache and rate limiting: Upstash Redis
- › Hosting and logs: Vercel
- › OAuth authentication: Google
- › Errors/analytics: Sentry, Google Analytics
[05]Third-party processors
External processors may handle data only as needed to provide the service. Each processor handles data under its own terms and privacy policy.
- › Google: OAuth login and account authentication
- › Vercel: hosting, serverless functions, deployment logs
- › Neon: database hosting
- › Upstash: Redis and rate limiting
- › Sentry: error tracking
- › Blockchain RPC/explorer providers: transaction lookup and network access
[06]Your rights
You may request access, correction, or deletion of stored account data and off-chain submission records. Public blockchain data may be technically impossible or limited to delete.
[07]Security
We manage secrets and credentials through server environment variables, restrict session/database access, and use rate limits to reduce abuse. Internet and blockchain services still carry risk, so do not submit sensitive personal information.
[08]Changes
If this policy changes, we will update the last-updated date on this page. For material changes, we may provide notice through the service or another appropriate channel.
For access, correction, or deletion requests, contact us at support@joinbasilisk.com
Back to home