Privacy Policy

Who we are

The Onsend platform is operated by VANDERGRID MARKETS INC. (“Onsend”, “we”, “us”) — the same entity named in our Terms of Service, which govern your use of the Service alongside this policy.

Where a project (a “tenant”) runs a campaign on Onsend, that project is the controller of its community’s personal data and Onsend acts as its processor under our Data Processing Addendum. For the data we process for our own purposes — administrator accounts, billing, and platform security and abuse prevention — Onsend is the controller.

We ask for a wallet signature to sign you in. That signature proves you control the wallet; it is not a transaction and gives us no ability to move your funds. We never ask for a seed phrase or private key.

1. Data we collect

• Admin account data name, email, hashed password, session tokens, audit log of admin actions.
• End-user identity wallet address, optional linked social handles (Twitter, Discord, Telegram), display name and avatar URL if provided.
• Quest activity completion records, XP awarded, referral relationships, multiplier history.
• Anti-sybil signals IP address (hashed after 90 days per GDPR retention), ASN / data-centre flags, device fingerprint hash, referral graph patterns.
• On-chain reads token balances and stake positions inspected for quest verification. We do not write to chain on your behalf.
• Rewards-economy activity coin balances and transactions, rewards-shop redemptions, and randomized reward-box outcomes, where a tenant enables these features.
• Competitive-feature data participation and results in head-to-head challenges and community prediction pools. To confirm eligibility for these features we may also collect age or age-confirmation and approximate location / country (derived from IP).
• Cross-tenant anti-sybil network to detect coordinated fraud, hashed device-fingerprint and hashed IP signals, together with wallet addresses (which are public on-chain), may be matched against equivalent signals contributed by other tenants that participate in the network. Tenant participation is opt-in (default-on for new tenants) with a per-tenant opt-out.

2. How we use your data

• To verify quest completions and award XP.
• To prevent fraud via the anti-sybil engine.
• To generate analytics for tenant admins.
• To share aggregated, identifier-free signals with the Vandergrid Terminal data layer (per-tenant opt-out available in admin settings).
• To operate the rewards economy, coin balances, the rewards shop, and reward boxes, where a tenant enables it.
• To determine eligibility for and operate competitive features (head-to-head challenges and prediction pools), including age and jurisdiction eligibility checks.
• To evaluate anti-sybil signals across tenants not merely as aggregate analytics, in order to identify wallets and devices engaged in coordinated fraud, for tenants participating in the cross-tenant anti-sybil network.

3. Retention

• Raw IP addresses are SHA-256 hashed after 90 days.
• Audit log entries are retained for 1 year.
• Billing records are retained per Stripe’s data policies.
• On account deletion, identifiers are anonymised; numeric counts (XP, completion counts) are retained for analytics integrity.

4. Your rights

End users may request a data export via POST /api/me/export-data while signed in. Account deletion is available via POST /api/me/delete-account. Tenant admins can initiate user-level forgetting from the admin user detail page.

5. Third parties

We use the following processors:

• AWS (hosting, S3, SES email delivery)
• Neon (managed Postgres)
• Upstash (Redis cache + queue)
• Stripe (payment processing)
• Cloudflare (DNS, edge networking)
• Optional OFAC screening providers, currently the public OFAC SDN list; future versions may add Chainalysis.

6. Contact

Privacy questions: info@vandergrid.com.

See also our Terms of Service and our Cookie Policy.