Privacy Policy

Your privacy matters. This policy explains what BSV Radar collects, how we use it, and the choices you have.

1. Information We Collect

We collect only what we need to run BSV Radar, by fair and lawful means and with your knowledge. Categories of information we may collect:

• Account identity — your display name, avatar, email address, and any public handle (e.g. Twitter/X, BAP identity) associated with the sign-in method you chose: Sigma (Bitcoin-backed BAP identity), Google, or GitHub.
• Profile data you provide — bio, website, social links, availability, pinned BSV addresses, and any other fields you fill in on your profile or for an organisation you administer.
• Content you submit — app listings, reviews, ratings, classifieds, replies, comments, chat messages, uploaded images, and moderation reports.
• Activity and engagement — favorites, upvotes, follows, reputation (XP) events, login streaks, notification preferences, and tour progress.
• Technical data — IP address, user agent, device type, referrer, and pages visited. Used for rate limiting, fraud detection, and aggregate analytics.
• Web push subscriptions — if you opt in, we store the push endpoint and keys your browser provides so we can deliver notifications.
• Cookies and session storage — a NextAuth session cookie to keep you signed in, a referral-tracking cookie if you arrived via an invite link, a tour-state cookie, and anonymous identifiers used by our analytics tooling.

2. Third-Party Sign-In

When you sign in via Google, GitHub, or Sigma, we receive the profile data those providers expose: typically an identifier, your name, email, and avatar URL. We use this to create or link your BSV Radar account. You can disconnect a provider by deleting your account; we do not use your third-party credentials to access any other service.

3. How We Use Your Information

We use the information collected to:

• provide, operate, and improve the BSV Radar directory and community features;
• authenticate you, keep your session alive, and enforce rate limits;
• display content you submit to other users as you direct;
• compute reputation, award badges, surface recommendations, and personalise your feed;
• send transactional emails (notifications you've opted into, classified replies, weekly or daily digests) through our email provider;
• send push notifications if you've subscribed;
• detect and prevent fraud, spam, review manipulation, and abuse of the reputation system;
• understand how BSV Radar is used in aggregate, so we can fix bugs and improve onboarding, growth, and retention;
• comply with legal obligations and enforce our Terms of Service.

4. Service Providers and Subprocessors

We rely on a small set of trusted providers to run BSV Radar. Each is bound by its own terms and processes data on our behalf:

• Vercel — application hosting, edge functions, image/file storage (Vercel Blob), and deployment logs.
• Neon — PostgreSQL database hosting our account, content, and activity data.
• Upstash — Redis used for rate limiting, chat relay, and short-lived caches.
• PostHog — product analytics (page views, interaction events, optional session replay with form inputs masked). Hosted in the EU.
• Sentry — error monitoring and performance tracing.
• Resend — transactional email delivery.
• Google, GitHub, Sigma Identity — OAuth sign-in (only when you choose one of those methods).

We do not sell your personal data. We share personal data only where necessary to deliver the service, to comply with law, or to protect BSV Radar's or users' rights and safety.

5. Public Content

The following is visible to other users and indexable by search engines:

• your display name, avatar, bio, website, and social links on your profile;
• app listings, reviews, ratings, and classifieds you submit;
• upvotes, follows, and XP milestones as part of the public community graph;
• chat messages in global and per-app channels.

Your email address, session tokens, push subscriptions, private notes, and IP address are not shown publicly.

6. Data Retention

We retain personal information only for as long as we need it to provide the service or satisfy legal obligations. Inactive accounts may be deleted after an extended period of dormancy. We may keep minimal records of flagged abuse, spam, or review fraud after deletion to prevent repeated violations.

7. Cookies and Tracking

Essential cookies keep you signed in, preserve anti-CSRF state, and remember your preferences. Analytics tooling (PostHog) sets its own identifiers to measure aggregate usage; form inputs in session recordings are masked by default. You can block cookies in your browser, but some features — notably sign-in, chat, and rate-limited actions — require them.

8. Data Security

All traffic between your browser and BSV Radar is encrypted with TLS. Passwords are never stored by us: sign-in is delegated to Google, GitHub, or Sigma. Payment data is never collected or transmitted through our servers; paid classifieds are settled by you sending BSV directly to a published on-chain address and verified via public blockchain data. We follow commercially reasonable practices to guard against loss, theft, and unauthorised access, but no Internet service can guarantee absolute security.

9. Your Rights

You can:

• access and update your profile data directly from your account settings;
• request a copy of the personal data we hold about you by contacting bitcoinsvradar@gmail.com;
• request deletion of your account and the associated personal data;
• decline cookies or push notifications (some features may not work fully without them);
• if you are in the EEA, UK, or another jurisdiction granting you additional privacy rights (e.g. objection, restriction, portability), exercise those rights by contacting us.

10. External Links

BSV Radar links out to third-party apps, websites, and resources. We have no control over the content or practices of those destinations. Their privacy policies govern your interactions with them.

11. Children's Privacy

BSV Radar is not directed at children under the age of 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has provided us with personal data, please contact us and we will promptly delete it.

12. International Data Transfers

BSV Radar and its subprocessors operate in multiple jurisdictions including the United States and the European Union. By using the site you consent to the transfer and processing of your information in those jurisdictions, subject to appropriate safeguards.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the effective date at the bottom of this page. Continued use of BSV Radar after an update constitutes acceptance of the updated policy.

14. Contact

Questions about this Privacy Policy or your personal data? Email bitcoinsvradar@gmail.com.

This policy is effective as of April 23, 2026.