Privacy Policy

This policy covers the Site. It does not cover the blockchain, your wallet software, or any site a link takes you to — none of which we operate. Section 7 explains why the blockchain deserves a section of its own.

The Site is permissionless and wallet-based. There is no registration, no account and no password, and we never ask for your name, email address or any identity document.

• Wallet address. When you connect, the page reads your public address to show your plots, rewards and stake. It is the same address the chain already publishes. It is held in your browser for the session; we do not store it on a server or link it to anything else.
• Technical request data. Our hosting provider logs the data every web server receives: IP address, request time, page requested, browser and device type, and referrer.
• Correspondence. If you write to us, we hold your message and the address you sent it from.

We never see your private keys or recovery phrase, and no part of the interface can move your funds. Every transaction is signed in your own wallet, by you.

The Site loads no analytics, no advertising or tracking pixels and no third-party scripts, and sets no cookies of its own. It communicates with this domain and with a blockchain node, and with nothing else. We do not sell or rent personal data, we run no advertising network, we do not profile you across sites, and we take no automated decisions producing legal effects about you.

Your browser's local storage records which wallet you connected so the page can reconnect on reload. It never leaves your device, and clearing your browser data erases it. It is not used for tracking.

• To provide the Site and let you reach the contracts — necessary to perform the contract between us, or to take steps at your request.
• To keep it available and secure, including detecting and preventing abuse — our legitimate interest in operating a service that works and is not attacked.
• To answer you when you write — our legitimate interest in responding to the people who contact us.
• To comply with the law when we are legally required to — legal obligation.

That is the complete list of purposes. There is no other use.

• Infrastructure providers, acting as our processors: the host that serves these pages and keeps the request logs, and the node provider that serves blockchain reads and sees the requests reaching its own service.
• Authorities, where we are legally compelled to disclose, or where disclosure is necessary to establish, exercise or defend legal claims, or to address fraud, abuse or a threat to safety.
• A successor, if the project is sold, merged or reorganised — under the commitments in this policy.

Our providers operate globally, so the limited technical data described above may be processed in countries outside your own, including outside the European Economic Area and the United Kingdom. Where that happens, transfers rely on an adequacy decision or on standard contractual clauses with appropriate safeguards. You may ask us which apply.

Blockchain data is different in kind: it is replicated to every node worldwide by design, and no transfer mechanism governs or can govern it. See below.

Everything you do in the orchard is public, permanent and outside anyone's control — including ours.

Every plant, claim, stake and transfer is written to Robinhood Chain with your address attached. Anyone can read it, index it, and connect it to everything else that address has ever done, on this chain or another. It cannot be edited, hidden or deleted by us, by you, or by any authority, and no request under any privacy law can remove it. This is how public blockchains work, and it applies to every address you use here.

If an address is ever linked to your identity — by an exchange, a public post, a friend — that link reaches back through its entire history on the chain. Consider this before you connect a wallet you use elsewhere.

Host logs are kept only as long as they are useful for reliability and abuse prevention, and correspondence until the matter is closed and any legal retention period has run. We hold no other personal data to retain.

We use appropriate technical and organisational measures, the most effective of which is holding almost nothing: the less data exists, the less can be lost. No system is perfectly secure. On-chain data is public by design and permanent by design. Securing your wallet and keys is yours to do.

Subject to your local law, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent where processing rests on consent. To exercise any of these, write to support@orchard.gold. We answer within one month.

Two honest limits. First, we hold almost nothing, so most requests will find little to act on. Second, and more important: rights of erasure and rectification cannot be exercised against the blockchain by us or by anyone, because no one can alter it.

If you are in the EEA or the UK and believe we have handled your data wrongly, you may complain to your national supervisory authority. We would rather you told us first.

The Services are not for anyone under 18, or under the age of majority where they live. We do not knowingly process a minor's personal data, and will delete it if we learn that we have.

The Site links to services we do not operate — a block explorer, social accounts, wallet software. Their privacy practices are their own; read them there.

If this policy changes, the revised version appears on this page with a new effective date, and continuing to use the Site means the new version applies. Questions, requests and complaints: support@orchard.gold.