Pontos principais
- You do not need an account, a name, an email or a phone number to use rxn.gg. We never ask for your seed phrase or private key.
- There is no third-party analytics, advertising or tracking on rxn.gg. The site counts its own visits without cookies, keeping only totals.
- Your wallet address is public on the blockchain. We process it when you use features that need it — trading checks, points, referrals, agents, predictions, the bridge and the Telegram bot.
- Practice, settings, favourites and most of what you do in the Interface stay in your browser and never reach our servers.
- You can ask us for access, correction or deletion at hello@rxn.gg. What is recorded on a public blockchain cannot be deleted by anyone.
1Who we are
This Privacy Policy explains how RXN, the operator of rxn.gg (RXN, we), processes personal data when you use rxn.gg, the RXN apps, the RXN Telegram bot and the RXN MCP server (the Interface). The Interface is operated under the name RXN, which is the controller of that data and can be reached at hello@rxn.gg. We have not appointed a data protection officer or a representative in the European Union or the United Kingdom.
Contact for privacy matters: hello@rxn.gg. The hosted RXN MCP connector has its own short privacy notice, shown where you install it; this policy covers the rest.
2What we collect and why
We collect as little as the Interface needs. The table lists every kind of personal data we process, where it comes from, what we use it for, and the legal basis we rely on under the EU and UK General Data Protection Regulation (GDPR).
| Data | When and what | Why | Legal basis |
|---|---|---|---|
| Visit counts | When a page opens, it tells our server it was viewed, and every two minutes that it is still in front. The server turns your IP address and browser user-agent into a one-way code using a random value that changes every day and is deleted after two days, and only adds that code to a counter of distinct visitors; the code itself, your IP address and your user-agent are not stored. With the first view of a visit we also count the website that linked to us (its host name only, never the full address) and the campaign tag in the link, and we count the kind of page and article viewed, and whether a visitor opened the terminal, connected a wallet, became ready to trade or had a Guard set — all only as daily totals. If your browser sends Global Privacy Control or Do Not Track, nothing is sent. | To know how many people use the site and which links and steps work, without third-party analytics. | Legitimate interests (Art. 6(1)(f) GDPR). |
| Wallet address — trading checks | When you trade, the Interface sends your public address to our server to check it against the OFAC sanctions list and read your account’s state from Hyperliquid. | To comply with sanctions regimes, including those of the United States, and to make the terminal work. | Legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) where a sanctions duty under EU, UK or member-state law applies. |
| Wallet address — points, leaderboards and statistics | We read public Hyperliquid data on orders placed through RXN (with RXN’s builder code) and compute, per wallet, volume, fees paid and points. Points and leaderboard files listing wallet addresses are published on rxn.gg. | To run seasons, leaderboards and the operator’s statistics. | Legitimate interests (Art. 6(1)(f)): rewarding activity on RXN and showing it publicly. You can object (see Your rights). |
| Fairness checks | We analyse public Hyperliquid fills, counterparties and transfers of the wallets in the points and referral programmes — including wallets they trade or move funds with — to detect trading with oneself, rings of wallets and other artificial activity. Flagged activity earns no points or referral share. | To keep the programmes fair and prevent fraud. | Legitimate interests (Art. 6(1)(f)). |
| Referral programme | When you claim a partner link: your code and wallet address. When you join through one: your wallet address, the code and the time. Then weekly statements of volume and fees for partners and invited traders, payouts and their transaction hashes. | To attribute referrals and pay partners. | Performance of a contract (Art. 6(1)(b)). |
| Agent market | When you list an agent: its name, description, strategy text, markets, limits and your wallet address; the agent’s page shows your address (shortened) and the agent’s results and earnings publicly. When you run one: your wallet address, the agent, the loss limit and the period. | To show agents, count their results and pay creators. | Performance of a contract (Art. 6(1)(b)). |
| Share cards (rxn.gg/s/…) | When you share a card: the image and what it shows (market, side, return, day, and amounts only if you chose to show them), the partner code if any, and a one-way code of the key that lets you delete it. No wallet address and no position size. | To serve the link you shared. | Performance of a contract (Art. 6(1)(b)). |
| Predictions through AGG | When you sign in to trade prediction markets: a session cookie holding, encrypted, your wallet address and AGG’s session tokens (we keep nothing on the server); quotes you request (wallet, outcome, amount) for up to an hour; records of fees and order events. | To place your prediction orders and account for fees. | Performance of a contract (Art. 6(1)(b)). |
| Bridge, swaps and deposits | The addresses, chains, tokens and amounts of quotes you request, sent through our server to Relay; your address when you open your bridge history. | To get quotes and show your transfers. | Performance of a contract (Art. 6(1)(b)). |
| Telegram bot | If you link the bot: your Telegram chat ID, the wallet address you link, your alert settings and alerts, and the positions and fills of that address the bot watches. Your IP address is kept for 10 minutes to limit linking attempts. We do not store your Telegram name or username. | To send the alerts and messages you asked for. | Performance of a contract (Art. 6(1)(b)). |
| Messages to us | Your email address or Telegram account and what you write, when you contact us. | To answer you. | Legitimate interests (Art. 6(1)(f)). |
| Technical data | Our hosting provider records requests to the site (IP address, time, address requested — which can include a wallet address in some requests — and user-agent) in short-lived logs. To limit abuse, some features count requests by a hashed form of your IP address, or keep the IP address in memory for about a minute. | Security, abuse prevention and fixing errors. | Legitimate interests (Art. 6(1)(f)). |
You are not required by law to give us personal data. A wallet address is needed for trading checks, points, referrals, agents, predictions, the bridge and the bot, and those features do not work without it; everything else is optional.
3What we do not collect
- Your seed phrase or private keys. The RXN key is created and kept, normally encrypted, in your browser (see the Cookie Policy); we have no copy.
- Your name, email, phone number or identity documents — unless you write to us.
- Third-party analytics, advertising pixels, social-media trackers or fingerprinting. rxn.gg loads its fonts and scripts from its own servers; the only exceptions are WalletConnect, when you connect through it, and Cloudflare Turnstile in AGG’s sign-in check (see the Cookie Policy).
- Your practice trades, settings, layouts, favourites and saved markets — these stay in your browser (see the Cookie Policy).
- Your precise location. We do not use geolocation.
We do not sell your personal data and do not share it for cross-context behavioural advertising. The fairness checks above run automatically and decide whether activity earns points or a referral share; if you think one was wrong, write to us and a person will review it.
4Public blockchain data
Hyperliquid and the other blockchains you use through RXN are public. Your address, balances, positions, orders, trades and transfers are visible to anyone and are permanently recorded by those networks, not by RXN. Orders placed through RXN carry RXN’s builder code, so it is public that they came through RXN.
Because RXN does not control these networks, we cannot change or delete anything recorded on them. A wallet address is not your name, but it may be linked to you by anyone who knows it is yours.
6International transfers
Our providers may process data in the United States and other countries outside your own. Where GDPR applies, we rely on adequacy decisions (such as the EU–US Data Privacy Framework, for providers certified under it) or, for the others, the European Commission’s Standard Contractual Clauses (and the UK addendum), with the safeguards they require. Ask us for details of the safeguard used for a given provider.
7How long we keep data
| Data | Kept for |
|---|---|
| The daily value that turns IP addresses into visitor codes | Two days, then deleted. |
| Visit totals (no personal data) | About 13 months. |
| Points, leaderboard and statistics records | For the season and as long as the programme’s records need them. Published points and leaderboard files, and the record of public trade data they are computed from, are kept as a history of the programme. If you object or ask for erasure, we remove your address from future files and, where we can, shorten or remove it in the published history. |
| Fairness flags | For the season and as long as the programme’s records and any review need them. |
| Prediction fee ledger and order events | As long as accounting and tax law require. |
| Partner link click counts and abuse-limit counters | Click counts as long as the programme runs; abuse-limit counters minutes to hours. |
| Referral claims, joins, statements and payouts | For as long as the programme runs and then as long as accounting and tax law require. |
| Agent listings and runs | While the agent market runs, and as long as statements and payouts to creators need them. Withdrawing an agent stops new runs; its page and record stay, marked as withdrawn. |
| Share cards | One year, or until you delete them. |
| AGG session cookie / quotes | Seven days in your browser / up to one hour on our server. |
| Telegram bot records | Until you send /stop or block the bot. |
| Hosting request logs | No longer than 30 days. |
| Messages to us | As long as needed to deal with them, and no longer than two years unless law requires more. |
8Your rights
Depending on where you live, you may have the right to: access the personal data we hold about you; have it corrected; have it deleted; restrict our processing; receive it in a portable format; withdraw consent at any time where we rely on consent; and not be discriminated against for exercising your rights.
You can object at any time to processing based on our legitimate interests — including the publication of your wallet address on leaderboards and in points files. We will then stop, unless we have compelling legitimate grounds that override your interests, or need the data for legal claims.
To exercise a right, write to hello@rxn.gg. Because we do not know who owns a wallet, we may ask you to prove that an address is yours by signing a message with it — never by sharing a key. We answer within one month, which may be extended where the law allows. Deleting your data from our records does not delete anything recorded on a public blockchain, and may end features that need it (for example, referral payouts).
If you are in the EU or the UK, you may also complain to your local data protection authority.
9US state privacy rights
If a US state privacy law (such as the California Consumer Privacy Act) applies to you — for example, if you used the Interface from the United States despite the restriction: in the last 12 months we collected identifiers (wallet addresses, IP addresses, Telegram chat IDs), internet activity (visits, requests), commercial information (orders, fees, payouts) and inferences (fairness flags), from you, your browser and public blockchains, for the business purposes described in What we collect and why, and disclosed them to our service providers and, at your direction, to the independent services listed in Who we share data with; points and leaderboard files are public.
You may ask to know, delete or correct your personal information, and may use an authorised agent to do so; we will not discriminate against you for it. We do not sell or share personal information, do not use or disclose sensitive personal information, have not done so in the last 12 months, and have no actual knowledge of selling the data of consumers under 16.
10Security
We protect data with encryption in transit, restricted access, sealed (encrypted) session cookies, one-way codes in place of IP addresses where we can, and a strict content security policy that lets the site load scripts only from itself (except Cloudflare’s bot check in the separate prediction sign-in window). No system is perfectly secure; please report any vulnerability to us (see Contact).
11Children
The Interface is not for anyone under 18. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.
12Your choices
- Turn on Global Privacy Control or Do Not Track in your browser, and the site sends nothing to its visit counter. (These settings do not currently stop the attribution storage described in the Cookie Policy.)
- Clear the site’s data in your browser to remove everything it keeps there (see the Cookie Policy).
- Disconnect your wallet, turn the RXN key off, or revoke it on Hyperliquid.
- Send /stop to the Telegram bot, or block it.
- Delete a card you shared with its delete link.
13Changes to this policy
We will publish any change on this page with a new “Last updated” date and, for a material change, show a notice in the Interface.
14Contact
Privacy questions and requests: hello@rxn.gg, with “Privacy” in the subject.