Privacy Policy
Last updated: 23 September 2026
In short: if you join the waitlist, we keep your email address, and your Discord handle if you give it, so we can invite you and send you news about Sapio. In the testnet apps, your wallet address and what you do in the testnet are recorded on our testnet chains, where anyone can see them. The website sets no cookies, and the apps store only what signing in and connecting a wallet need. To have your data deleted, write to privacy@sapio.network.
Who is responsible
Velvoe Labs AB (company registration number 559592-8853), Sweden, operates sapio.network, the Sapio waitlist and the Sapio testnet apps at app.sapio.network and quick.sapio.network, and is the controller of the personal data described in this policy.
Contact: privacy@sapio.network
The website and the waitlist
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Your email address, and your Discord handle if you give it | To keep the waitlist, confirm your sign-up, invite you to test Sapio, and send you updates and news about Sapio | Your consent, Art. 6(1)(a) |
| That you consented, and when you signed up | To be able to show that we have your consent | Legal obligation, Art. 6(1)(c) |
| The link parameters you arrived with, for example a campaign tag | To see which channels bring people to the waitlist | Legitimate interest, Art. 6(1)(f) |
| Usage data: pages viewed, referring site, browser, operating system, device type and country | To understand in aggregate how the website is used, and to improve it | Legitimate interest, Art. 6(1)(f) |
| Server logs: IP address, time and requested page | To run and secure the website | Legitimate interest, Art. 6(1)(f) |
The testnet apps
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Your wallet address and your testnet activity: stakes, positions, claims, deliveries and the test tokens you receive | To run the testnet competitions you take part in | Providing the service you use, Art. 6(1)(b) |
| If you request access: your wallet address, and the handle and contact channel you give us | To give you access and send you test tokens | Providing the service you use, Art. 6(1)(b) |
| If you publish a profile: the name, description, website and picture you choose | To show your profile publicly, for example on the leaderboard | Your consent, Art. 6(1)(a) |
| Crash reports: error type, app version, the page (without wallet addresses), network and browser type | To find and fix errors | Legitimate interest, Art. 6(1)(f) |
| Server logs: IP address, time and requested page | To run and secure the apps | Legitimate interest, Art. 6(1)(f) |
Testnet activity is public. We run the testnet chains, but anyone can read them through the apps' public interfaces, so wallet addresses and activity on them are visible to everyone. Records on a chain cannot be changed or deleted one by one; they are erased when that testnet is reset or shut down. Test tokens have no value.
Profiles can be edited or hidden in the app at any time, and we delete them on request. Pictures are published exactly as uploaded, so remove any location data from a photo before you upload it.
We do not sell personal data, and we do not use it to make automated decisions about you. The waitlist and the apps are not intended for children under 16.
Cookies and storage on your device
Website: no cookies and no other storage. Our analytics, Vercel Web Analytics, runs without them, so no identifier follows you from one visit to the next. Fonts, images and video are served from the website itself.
Testnet apps: only what the apps need to work. A sign-in cookie that holds nothing but an expiry time, while the apps are password protected; your wallet connection (the connected address and network) and the session data of the wallet libraries, so the connection survives a reload; and interface choices you make, such as the colour theme. Nothing is used for tracking or advertising, and crash reports are sent without cookies or identifiers.
Who processes the data
We use service providers that process personal data on our behalf, under data processing agreements:
- Vercel Inc., USA: website hosting and web analytics
- Neon Inc., USA: the waitlist database, hosted in the United States
- Resend Inc., USA: sending the confirmation email
- Railway Corporation, USA: hosting the testnet apps and their servers and databases
- PostHog Inc.: crash reports from the testnet apps, hosted in the EU (Frankfurt), with IP addresses discarded
The testnet apps also rely on services that handle data under their own terms:
- WalletConnect (Reown, Inc., USA): connecting wallets. Its library contacts Reown's servers when the app opens.
- The wallet you choose, for example MetaMask or Coinbase Wallet, and its connection service, when you connect it.
- CoinGecko: some token images are loaded from its image service.
We may also disclose personal data where the law requires it.
Transfers outside the EU/EEA
Several of these providers are based in the United States, and the waitlist database is stored there. These transfers are protected by the European Commission's Standard Contractual Clauses or, where the provider is certified, the EU–US Data Privacy Framework.
How long we keep it
- Waitlist details (email, Discord handle, consent record and link parameters): until you withdraw your consent or ask us to delete them, or until the waitlist closes, whichever comes first.
- Testnet records (on-chain activity and the apps' database): for as long as that testnet runs. A reset or shutdown erases them.
- Profiles: until you ask us to delete them, or the testnet ends.
- Access requests and server logs: kept for a short period by our hosting providers, in line with their standard retention.
- Usage data and crash reports: used only in aggregate or to fix errors, and deleted when no longer needed for that purpose.
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. You can withdraw your consent at any time; this does not affect processing that took place before you withdrew it. Records on a testnet chain can only be erased by resetting that testnet.
To use any of these rights, write to privacy@sapio.network. We reply within one month.
If you believe we handle your personal data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
Changes
If we change how we handle personal data, we will update this page and the date above.