Privacy Policy

Last updated: December 2025

We believe in privacy as a fundamental right. We collect the minimum data necessary to make zkGrants work, and we don't sell your information to anyone. Ever.

The Short Version

  • We collect only what we need to operate the platform
  • We don't sell your data
  • Blockchain transactions are public by design
  • You can request deletion of off-chain data
  • No tracking pixels or invasive analytics

What We Collect

GitHub Information

When you sign in with GitHub, we receive:

  • Your GitHub username and profile information
  • Email address (for notifications, if enabled)
  • Repository access tokens (scoped to what you authorize)

We use this to identify you, fetch repository data, and verify PR authorship for claims.

Wallet Addresses

When you connect a wallet, we store your public address to associate it with grants and claims. Your private keys never touch our servers — wallet operations happen client-side.

Grant & Submission Data

Grant descriptions, submission metadata, and claim records are stored to operate the platform. Some of this data is also anchored onchain and is publicly visible by design.

Basic Analytics

We collect anonymized usage data (page views, feature usage) to improve the product. No personal identifiers, no fingerprinting, no cross-site tracking.

What We Don't Do

  • Sell or rent your personal data to third parties
  • Use tracking pixels or invasive cookies
  • Store your private keys or seed phrases
  • Share data with advertisers
  • Build profiles for targeted advertising

Blockchain Transparency

zkGrants operates on public blockchains (Ethereum and Solana). By design, the following is publicly visible:

  • Grant funding transactions
  • Claim transactions and recipient addresses
  • Proof submissions
  • Refund transactions

This is a feature, not a bug. Transparency ensures the system is trustless and verifiable. If you need privacy for funding, use a fresh wallet without linked identity.

Data Retention

Off-chain data: We retain account and grant data as long as your account is active. You can request deletion of your off-chain data by contacting us.

On-chain data: Blockchain transactions are immutable and cannot be deleted. This includes funded grants, claims, and any data anchored onchain.

Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of off-chain data
  • Export your data
  • Withdraw consent for optional processing

To exercise these rights, contact us at [email protected]

Third-Party Services

We integrate with:

  • GitHub — for authentication and repository data
  • Blockchain RPCs — for transaction submission and verification
  • Wallet providers — client-side integrations for signing

Each third-party service has its own privacy policy. We recommend reviewing them.

Changes

We may update this policy. Significant changes will be announced on the platform. Continued use after changes constitutes acceptance.

Contact

Questions? Concerns? Data requests? Reach us at [email protected]