Privacy Policy

This Privacy Policy describes how Herodotus ("we", "us", or "our") collects, uses, and shares information in connection with the Herodotus Console and related services (the "Service"), available at the Herodotus Console web application.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

Account information: email address, username, and authentication credentials when you sign up or log in.
Profile information: display name, avatar.
Project data: project names, configurations, API keys, and any content you upload or create within the Service (e.g. cairo programs, PIEs, etc.).
Communications: messages you send to support, feedback, and survey responses.

1.2 Wallet and On-Chain Information

The Service supports Web3 wallet connections. When you connect a wallet, we may process:

Your public wallet address
Public on-chain transactions associated with that address
Signed messages used for authentication

We do not collect or store your private keys, seed phrases, or wallet passwords.

1.3 Information Collected Automatically

Usage data: pages viewed, features used, queries submitted, timestamps, referring URLs.
Device and log data: IP address, browser type and version, operating system, device identifiers, language preferences, and crash logs.
Cookies and similar technologies: used for session management, authentication, preferences, and analytics. See Section 6.

1.4 Information from Third Parties

We may receive information from third-party authentication providers (e.g. OAuth providers), analytics providers, and blockchain data providers in order to operate the Service.

2. How We Use Information

We use the information we collect to:

Provide, operate, maintain, and improve the Service;
Authenticate users and secure accounts;
Process and respond to your requests, queries, and proofs;
Communicate with you about updates, security alerts, and support;
Monitor usage, detect abuse, and prevent fraud;
Comply with legal obligations and enforce our terms;
Conduct analytics and research to improve features and performance.

3. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

Performance of a contract — to provide the Service you request;
Legitimate interests — to operate, secure, and improve the Service;
Consent — where required (e.g. certain cookies, marketing communications);
Legal obligation — to comply with applicable law.

4. How We Share Information

We do not sell your personal information. We may share information with:

Service providers: hosting (e.g. cloud infrastructure providers), analytics, error monitoring, email delivery, and customer support tools, acting as our processors.
Blockchain networks: any data you submit on-chain is, by nature, public and immutable.
Affiliates: entities under common control with us.
Legal and safety: when required by law, subpoena, or to protect rights, property, or safety of users or the public.
Business transfers: in connection with a merger, acquisition, financing, or sale of assets.
With your consent: in any other case where you direct us to share information.

5. Data Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. On-chain data cannot be deleted.

PIEs, programs, and other metadata associated with Atlantic queries are retained for 2 days, after which they are automatically deleted. During this retention period, anyone who knows the query_id can access this information.

6. Cookies and Tracking

We use cookies and similar technologies for:

Essential purposes (authentication, session, security);
Preferences (locale, UI settings);
Analytics (understanding how the Service is used).

You can control cookies through your browser settings. Disabling essential cookies may impair Service functionality.

7. Data Security

We implement reasonable technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Transfers

We may transfer, store, and process your information in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses to protect your information.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal information we hold about you;
Correct inaccurate or incomplete information;
Delete your personal information;
Restrict or object to certain processing;
Port your data to another service;
Withdraw consent where processing is based on consent;
Lodge a complaint with a supervisory authority.

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before responding.

10. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. Third-Party Links and Services

The Service may contain links to third-party sites or integrate with third-party services (e.g. wallets, RPC providers, block explorers). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date. Material changes will be communicated through the Service or by other reasonable means. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:

Email: hello@herodotus.dev