Privacy Notice

The controller of your personal data is Hydromancer B.V., a private limited company registered in the Netherlands, with its registered office at Posthoornstraat 17, 3011 WD Rotterdam, the Netherlands. For any privacy question or request, contact us at data@hydromancer.xyz.

• Account data: your name, email address, and sign-in details when you create an account.
• Billing data: your plan, invoices, billing details, and transaction history. Card details are handled by our payment processor, and we do not store full card numbers.
• Usage data: API keys, requests made to our services, token consumption, IP addresses, and technical logs.
• Website data: pages visited, clicks, device and browser information, approximate location derived from your IP address, and a pseudonymous identifier. When you are signed in, this can be linked to your account.
• Communications: the content of messages you send us by email, Telegram, Slack, Discord, or other channels.

The blockchain data we provide through our services is public network data. Where it includes wallet addresses, we process it as part of providing the services.

Where we rely on legitimate interests, our interest is to run, secure, and improve a reliable service. You can object to this processing at any time (see section 8).

• Strictly necessary: cookies that keep you signed in and keep the website secure.
• Analytics: PostHog, used to understand how the website and services are used.
• Marketing: tags loaded through Google Tag Manager, such as X (Twitter) conversion tracking, used to measure our advertising.

Analytics and marketing cookies are not needed for the website to work. If you are in the European Economic Area, the United Kingdom, or Switzerland, we only set them after you accept them in our cookie banner, and you can change your choice at any time using the “Cookie settings” link at the bottom of every page. Elsewhere, you can block or delete them at any time through your browser settings.

We share personal data only with service providers that help us run Hydromancer, under agreements that require them to protect it and use it only on our instructions:

• Vercel — Website and API hosting
• Clerk — Account sign-up, sign-in, and authentication
• Our payment processor — Processing subscription payments
• PostHog — Product and website analytics
• Google (Google Tag Manager) — Managing website tags
• X Corp. — Advertising conversion measurement

We may also disclose data where required by law, to protect our rights, or as part of a merger, acquisition, or sale of assets. We do not sell your personal data.

Some of our providers process data outside the European Economic Area, including in the United States. Where they do, we rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

• Account and usage data: for as long as your account is active, and for a limited period afterwards to handle questions, disputes, or abuse.
• Billing and invoicing records: for 7 years, as required by Dutch tax law.
• Technical logs and analytics data: only as long as needed for security, troubleshooting, and analysis.
• Communications: for as long as needed to handle your request and our relationship with you.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time, without affecting processing that happened before.

To exercise any of these rights, email data@hydromancer.xyz. We respond within one month. You also have the right to lodge a complaint with a data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens — or with the authority where you live or work.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls. No system is completely secure, so please keep your credentials and API keys safe.

Our services are intended for businesses and adults, and are not directed at children under 16. We do not knowingly collect their personal data.

We may update this notice from time to time. The latest version is always available on this page, and we will notify account holders of material changes.