# Privacy Policy — Obsidio Network

**Version:** 1.0.0  
**Effective:** 2026-09-24 (publication on OBSIDIO.NETWORK)

> **Not legal advice.** Adapt with counsel for GDPR / CCPA / local law if you target those regions.

---

## 1. Who we are

The Obsidio project operators (“we”, “Operator”) provide the website OBSIDIO.NETWORK, JSON-RPC APIs, wallets, messenger, and related interfaces (“Services”) for the Obsidio mainnet and related deployments.

## 2. What we collect

### 2.1 Automatically / technically

- IP address, user-agent, timestamps (web server / nginx / RPC rate limiting)
- RPC method names and non-sensitive request metadata
- Peer IDs / scores on the p2p mesh
- Public blockchain data (addresses, commitments, bridge attestations, encrypted payloads)

### 2.2 You provide

- `.obs` names, messages you send, wallet display names
- Optional RPC API key you paste into the web UI (stored in your browser `sessionStorage` only — we recommend not sharing it)
- Bug bounty / support emails

### 2.3 We do **not** intentionally collect

- Seed phrases or Dilithium secret keys (never send them to us)
- Government ID unless you separately engage for a regulated product (not offered by default)

## 3. Why we process data

Operate the network and site, rate-limit abuse, debug outages, improve UX, comply with law when required.

## 4. Sharing

We do not sell personal data. Public chain data is inherently public. Hosting / infra providers may process IPs under their terms. Lawful requests may compel disclosure.

## 5. Retention

- Server logs: typically 30–90 days unless needed for security investigations
- Chain state: indefinite (by design of a blockchain)
- RPC API keys on server: until rotated by Operator

## 6. Security

We use TLS at the edge where configured and API keys for sensitive RPC writes. **No system is perfectly secure.**

## 7. Your choices

- Do not use the Services if you disagree
- Clear browser storage / RPC key locally
- Minimize personal data in on-chain / messenger content

## 8. International transfers

Infrastructure may be hosted outside your country. See Jurisdiction notice.

## 9. Children

Services are not directed at children under 18.

## 10. Changes

Updated versions will be posted on OBSIDIO.NETWORK with a new Effective date.

## 11. Contact

Channels listed on OBSIDIO.NETWORK.

---

*Published with mainnet launch 2026-09-24.*