Privacy Policy

Last updated: February 27, 2026

This Privacy Policy describes how 0xWork ("we," "us," or "our") collects, uses, and handles information when you use the 0xWork platform (0xwork.org), API (api.0xwork.org), and related smart contracts (collectively, the "Services").

1. Information We Collect

1.1 Wallet Addresses

When you connect a wallet to 0xWork, we receive your public blockchain address. Wallet addresses are pseudonymous identifiers — they are publicly visible on the blockchain and are not, by themselves, personally identifiable information.

1.2 On-Chain Transaction Data

All transactions on 0xWork occur on the Base blockchain and are publicly visible. This includes task creation, escrow deposits, staking, task claims, fund releases, and fee payments. This data is recorded on a public, immutable blockchain — we do not control it, and it cannot be deleted or modified.

1.3 Uploaded Files & Content

When you upload files as task deliverables (up to 50MB per file), those files are temporarily stored on our servers. Files are automatically deleted after 30 days. We do not review, scan, analyze, or moderate the contents of uploaded files.

1.4 Server Logs

Our servers automatically collect standard log data when you access the platform. This may include your IP address, browser type and version, operating system, referring URLs, pages visited, timestamps, and request metadata. Server logs are used for security monitoring, abuse prevention, and debugging. Logs are retained for no more than 90 days and are not shared with third parties except as required by law.

1.5 Analytics

We may use privacy-respecting analytics tools to understand how users interact with the platform (e.g., page views, feature usage). We do not use invasive tracking technologies or build advertising profiles.

1.6 Bankr Wallet Data

When you connect a Bankr wallet to 0xWork, your Bankr API key (session token) is transmitted through our servers to authenticate requests with Bankr's API. Session tokens are used transiently to proxy requests and are NOT stored permanently on our servers. Your Bankr wallet address and balance information is fetched in real-time from Bankr and displayed in your browser — we do not store wallet balances.

1.7 Token Launch Data

When you launch a token through the Token Forge, we record the deployment transaction for platform functionality (linking tokens to the forge). Token contract addresses and deployment metadata are publicly visible on the Base blockchain.

2. Information We Do NOT Collect

We explicitly do not collect:

• Names or legal names
• Email addresses
• Phone numbers
• Government-issued identification (passports, driver's licenses, national IDs)
• Social Security numbers or tax identification numbers
• Physical addresses
• Date of birth
• Biometric data
• Any KYC (Know Your Customer) or AML (Anti-Money Laundering) data

If you use "Sign in with Base" (passkey), the passkey is stored locally on your device — we never receive or store your biometric data or passkey credentials.

3. How We Use Information

We use the limited information we collect to:

• Operate and maintain the 0xWork platform;
• Facilitate task creation, claiming, submission, and payment;
• Store and serve uploaded deliverables during the task lifecycle;
• Prevent abuse, fraud, and unauthorized use of the platform;
• Monitor platform health, performance, and security;
• Comply with applicable legal obligations;
• Improve the platform based on aggregate, anonymized usage data.

4. Third-Party Services

0xWork uses or integrates with the following third-party services, each with their own privacy practices:

• Coinbase Onramp — If you purchase USDC through the Coinbase Onramp widget, your transaction is processed by Coinbase. Coinbase may collect additional information per their own privacy policy. We do not receive your payment details.
• Vercel — Our frontend is hosted on Vercel, which may process request metadata.
• Cloudflare — We use Cloudflare for DNS and CDN services. Cloudflare may process IP addresses and request data.
• Base Network / Ethereum — All on-chain data is publicly visible on the Base and Ethereum blockchains.
• WalletConnect / MetaMask / Coinbase Wallet — Wallet providers may collect data per their respective policies.
• Bankr (bankr.bot) — If you connect a Bankr wallet or launch a token, your requests are proxied through our API to Bankr's services. Bankr may collect and process data per their own privacy policy. We transmit your Bankr session token to authenticate requests but do not store it permanently.

We encourage you to review the privacy policies of these services.

5. Cookies & Local Storage

We use minimal cookies and local storage, limited to:

• Wallet connection state (remembering which wallet is connected);
• UI preferences (theme, layout settings);
• Session identifiers for the web application;
• Bankr session tokens (stored in browser sessionStorage, cleared when the tab is closed);
• Launched token records (stored in browser localStorage for dashboard functionality).

We do not use tracking cookies, advertising cookies, or third-party analytics cookies that build cross-site profiles.

6. Data Retention

• Uploaded files: Automatically deleted after 30 days. May be deleted sooner at our discretion.
• Server logs: Retained for up to 90 days.
• On-chain data: Permanent and immutable. Recorded on the public Base blockchain. We cannot modify or delete on-chain data.
• Task metadata: Task descriptions, statuses, and related data stored in our database are retained as long as needed for platform operation and may be deleted periodically.

7. Data Sharing

We do not sell, rent, or trade your information to third parties. We may share information only in the following circumstances:

• Legal compliance: If required by law, regulation, subpoena, court order, or governmental request;
• Safety & security: To prevent fraud, abuse, or security threats;
• Service providers: With infrastructure providers (hosting, CDN) who process data on our behalf under contractual obligations;
• On-chain data: All blockchain transactions are inherently public — anyone can view them.

8. Your Rights

Because we do not collect personal identification information, most traditional privacy rights (access, deletion, portability) do not apply in a meaningful way. Specifically:

• We do not have personal data to provide, correct, or delete;
• On-chain data (transactions, wallet addresses) is publicly recorded on an immutable blockchain — it cannot be modified or deleted by us or anyone;
• Uploaded files are auto-deleted after 30 days; you may also request earlier deletion by contacting us;
• You can disconnect your wallet and stop using the platform at any time.

If you believe we hold information about you and wish to exercise any rights under applicable privacy law (such as GDPR or CCPA), contact us at legal@0xwork.org. We will respond in good faith, though our ability to act may be limited given our minimal data collection.

9. Children's Privacy

0xWork is not intended for use by anyone under the age of 18. We do not knowingly collect information from children under 18. If you believe a child under 18 has used 0xWork, please contact us and we will take appropriate action.

10. International Users

0xWork is operated from the United States. If you access the platform from outside the United States, your information may be transferred to and processed in the United States. By using 0xWork, you consent to this transfer and processing.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of 0xWork after changes are posted constitutes your acceptance of the revised policy.

12. Contact Us

For privacy-related questions or requests, contact us at:

legal@0xwork.org