Privacy Policy

When you connect a wallet to the Welsh Street Exchange (app.welshstreet.com) and sign the Terms of Service authorization message, we record your wallet address together with the date and time of that signature. The main website (welshstreet.com) and documentation site (docs.welshstreet.com) do not require wallet connection and do not collect user data.

This Privacy Policy explains what we collect, how we use it, and what we do not collect. The Welsh Street Exchange is designed with a minimal-data approach. We do not collect personal identifiers, IP addresses, or device fingerprints.

What We Collect

Digital Message Signatures: When you connect a wallet to the Welsh Street Exchange (app.welshstreet.com) and sign a digital message to interoperate with the smart contracts, we record the date, time, and wallet address associated with that signature. This step is required to use the Exchange.
Wallet Activity (App-Scoped): We record wallet addresses you connect to the Service and related on-chain actions taken in-app: swaps, providing/removing liquidity, claiming rewards, minting NFTs and STREET tokens, burning liquidity, locking liquidity, donating rewards, and transferring liquidity tokens. We may store associated transaction hashes, timestamps, token symbols/amounts, and pool identifiers to operate, secure, and improve the Service.
Transaction Logging: All protocol interactions are logged with the date, time, and wallet address for analytics, UX improvements, and protocol monitoring.
Public Blockchain Data: Blockchain data is inherently public. Anyone with access to the chain can observe transactions tied to your wallet address.

What We Do Not Collect

No names, emails, phone numbers, government IDs, or similar personal identifiers.
No IP addresses and no device fingerprinting.
No advertising or behavioral tracking cookies.
No tax, accounting, or reporting data. Users are solely responsible for recording and reporting their own transactions for tax or regulatory purposes.

Cookies

The Service uses only essential cookies required for security and functionality:

Session cookies: Maintain wallet connection state during your session
Security cookies: Prevent cross-site request forgery (CSRF) attacks

These cookies are strictly necessary to operate the Service and are exempt from consent requirements under GDPR Article 5(3).

Use of Data

We use the limited data collected to:

Provide core functionality (e.g., enabling swaps, liquidity management, and rewards).
Maintain security and prevent abuse.
Perform aggregate analytics to improve user experience and optimize the Service.

We do not sell, trade, or monetize user data.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal basis for processing your data is:

Contract Performance: Processing wallet activity is necessary to provide the Service you request.
Legitimate Interest: Analytics and security monitoring serve our legitimate interest in operating and improving the Service.

International Data Transfers

Blockchain data is inherently global. Off-chain logs may be stored on servers located outside your jurisdiction. We rely on standard contractual clauses and technical safeguards to protect data transferred internationally.

Retention

We retain app-scoped logs only as long as reasonably necessary for operations, security, or compliance, or as required by law.

Your Rights

Depending on your jurisdiction, you may have certain rights regarding your data:

Access: Request confirmation of what data we hold about your wallet address.
Deletion: Request deletion of logs associated with your wallet address (subject to legal retention requirements).
Portability: Request a copy of your data in machine-readable format.

To exercise these rights, contact us at admin@welshstreet.com with your wallet address and relevant transaction hashes. We will respond within 30 days or as required by applicable law.

Note: On-chain blockchain data is immutable and cannot be deleted. Rights apply only to off-chain logs stored in our database.

We may share data only with trusted service providers (e.g., hosting or security vendors) under contract and only for operational purposes. We may disclose data if required by law, regulation, or legal process, or to protect rights, safety, and the integrity of the Service.

Security

We implement reasonable administrative, physical, and technical safeguards; however, no system is perfectly secure. You remain responsible for safeguarding your own wallet, private keys, and seed phrase.

Changes

We may update this Privacy Policy from time to time. Material changes will be posted with a new “Last updated” date. Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.