Privacy Policy
Last updated: March 2026
Overview
Rewind X is a non-custodial web interface for interacting with smart contracts deployed on public blockchain networks.
This Privacy Policy explains what limited data is processed when you use this interface, and why.
This interface does not collect personal data for marketing, analytics, or profiling purposes. Data processing is limited to what is technically necessary to operate the interface.
What is processed and why
2.1 Cloudflare (Infrastructure & CDN)
This interface is served through Cloudflare, Inc., a third-party infrastructure and content delivery provider.
When you access this interface, Cloudflare processes:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Pages accessed
Purpose: Content delivery, DDoS protection, infrastructure security, and performance optimization.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).
Cloudflare's privacy policy: cloudflare.com/privacypolicy
2.2 Browser storage (localStorage / sessionStorage)
This interface uses browser storage strictly for product functionality.
What may be stored locally in your browser:
- Cached on-chain data (transfer states, rewind details) — temporary, 4h TTL
- Recently used recipient addresses — automatically stored locally after successful transfers for convenience, with a 14-day retention period
- Transaction references (TX hashes) — for UI state continuity
- NFT display state — for interface rendering
- Session flow state — tab-scoped, deleted automatically when tab closes
This browser-stored data stays on your device and is not sent to any Rewind X backend server for analytics, marketing, or profiling purposes.
This interface does not use analytics, advertising, or marketing cookies. Browser storage is used only where technically necessary for core product functionality and convenience features.
2.3 Blockchain data
All transfers, rewinds, and on-chain interactions are executed directly through your wallet on the public blockchain.
Wallet addresses and transaction data are publicly visible on-chain by nature. This interface does not collect, store, or process wallet addresses on any backend.
2.4 External resources
When the interface loads certain content, your browser makes standard requests to external services:
- IPFS gateway (ipfs.io) — for NFT image content
- GitHub CDN (raw.githubusercontent.com) — for token logo assets
These requests are initiated by your browser as part of normal interface operation. These providers may log your IP address as part of their standard CDN operation.
What we do not collect
- No analytics
- No marketing trackers
- No profiling
- No user accounts
- No form submissions
- No private keys or wallet secrets
- No signing data
- No user account database or application backend database
Technical error monitoring
We may activate technical error monitoring tools in the future to maintain interface stability and identify bugs.
If such tools are activated, this Privacy Policy will be updated before activation to reflect which service is used, what data may be collected, how that data is handled, and whether any data transfer outside the EEA occurs.
Until then, no error monitoring service is active.
Third-party services
| Service | Purpose |
|---|---|
| Cloudflare | Infrastructure, CDN, security |
| IPFS gateway (ipfs.io) | NFT image delivery |
| GitHub CDN | Token logo assets |
This interface does not use advertising networks, social media trackers, or analytics platforms.
Data transfers outside the EEA
Cloudflare operates infrastructure globally, including in the United States. Cloudflare states that it relies on appropriate transfer mechanisms, including Standard Contractual Clauses, for relevant international data transfers under GDPR.
Your rights under GDPR
If you are located in the European Economic Area, you have the following rights:
- Right of access — request information about what data is processed
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion where applicable
- Right to object — object to processing based on legitimate interest
- Right to lodge a complaint — file a complaint with your national data protection authority
Please note that blockchain transaction data is public by nature and cannot be deleted or modified through this interface.
For privacy-related questions, contact us at: contact.rewindx@proton.me
Data retention
- Cloudflare logs: Retained according to Cloudflare's own practices
- Transfer cache and similar locally cached interface data: Up to 4 hours
- Recently used recipient addresses stored locally for convenience: Up to 14 days
- Session storage: Deleted automatically when the browser tab is closed
- Blockchain data: Permanent by nature of public blockchain infrastructure
Changes to this policy
This Privacy Policy may be updated from time to time. Where appropriate, users will be notified of material changes through the interface.
© 2026 Rewind X