Privacy Policy — ONCHAIN TRADE DOJO
Last updated: 03 Jul 2026
1. Data Controller
The controller responsible for processing personal data on this platform within the meaning of the GDPR is:
2. What Data We Process
Depending on how you use the platform, we process the following categories of personal data:
- Account data: email address, password (hashed), username, registration date (managed via Supabase Auth).
- Trading and learning data: simulator trades, journal entries, quiz results, progress (XP, gates, level).
- AI interaction data: messages sent to the coach "CIPHER", chart-analysis requests, and learner profiles derived from them (e.g. detected behavioral patterns).
- Behavioral/mood data: the "Mental State" you may voluntarily log before a session in the 30-Day Survival Challenge (e.g. "calm", "stressed", "tired") — used solely for performance correlation within the challenge and never shared with any AI provider.
- Billing data: your Stripe customer and subscription ID once you subscribe to Pro/Pro Trader; full payment details (card number etc.) are processed exclusively by Stripe, never by ONCHAIN DO.
- Usage data: truncated IP address, device/browser information, page views — only if you have given cookie consent for Google Analytics 4 (see Terms §14).
3. Legal Basis
We process your data on the following legal bases under Art. 6(1) GDPR:
- (b) — performance of a contract: providing your account, learning content, simulator and subscription.
- (f) — legitimate interest: fraud/abuse prevention, platform security, product improvement.
- (a) — consent: analytics cookies (Google Analytics 4), given via the cookie banner.
4. Recipients and Processors
To provide our service we use the following processors:
| Processor | Purpose | Location / Region |
|---|---|---|
| Supabase | Authentication, database (account, trading and learning data) | EU (Frankfurt) |
| Stripe | Payment processing for Pro/Pro Trader subscriptions | USA / EU (SCC) |
| Google Gemini | AI coach "CIPHER" (primary provider), chart analysis | USA (SCC) |
| Anthropic Claude | AI coach "CIPHER" (fallback provider) | USA (SCC) |
| Resend | Transactional and re-engagement emails | USA (SCC) |
| Google Analytics 4 | Anonymized usage statistics (consent-based only) | USA (SCC) |
| Vercel | Platform hosting | USA / EU (SCC) |
For transfers to the US (Google, Stripe, Google Gemini, Anthropic Claude, Resend) we rely on each provider's EU Standard Contractual Clauses (SCCs) as an appropriate safeguard under Art. 46 GDPR.
5. Retention Period
We store account-related data for as long as you use your account. Once you delete your account (Account settings → Danger Zone), your personal data is deleted without delay, except where retention is legally required (e.g. German commercial/tax-law retention obligations for invoice data, §257 HGB, §147 AO).
6. Your Rights
As a data subject, you have the following rights:
- Access to the data we process about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR) — available any time, self-service, via Account settings
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on legitimate interest (Art. 21 GDPR)
- Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)
To exercise any of these rights, simply email onchaindo@gmail.com.
7. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning you takes place. XP, levels and badges are purely gamified progress indicators with no decision-making effect (see Terms §5).
8. Cookies
For information on the cookies we use and your consent, see §14 of our Terms & Conditions.