Privacy Policy

This Privacy Policy explains how Brail ("we", "us", or "our") handles information when you visit brail.app, connect a wallet, place predictions, or use related features. By using the platform, you agree to the practices described here. If you do not agree, please do not use the service.

Last updated: 7 July 2026.

Overview

Brail is a skill-based crypto price prediction product. You connect a self-custody wallet, pay a disclosed on-chain commitment fee when placing a call, and compete on accuracy and points — not on pooled wagering against other users' balances. We minimize personal data collection by design: we do not require your legal name, postal address, phone number, or traditional account registration to use core features.

Information we collect

The information we process depends on how you use the platform:

• Wallet address — when you connect via Privy or sign transactions, we associate activity with your public Ethereum address on Base (or Base Sepolia on testnet).
• On-chain transaction data — commitment fee transfers, reward claims, and refund transactions are public on the blockchain and may be indexed by us for settlement, rewards, and support.
• Prediction and profile data — tokens, exchanges, horizons, direction, outcomes, points, leaderboard stats, and optional display name or avatar you choose to set.
• Technical data — IP address, browser type, device information, and request logs collected by our hosting provider (for example Vercel) for security, abuse prevention, and reliability.
• Local storage — preferences such as dismissed notifications or theme may be stored in your browser; we do not use this to identify you across unrelated sites.

Information we do not collect

• Seed phrases, private keys, or recovery words — ever, under any circumstance.
• Exchange, email, or social-media passwords.
• Credit card numbers, bank account details, or payment credentials outside of wallet-signed ERC-20 transfers you initiate.
• Government-issued identification, unless a future regulated feature explicitly requires it and this policy is updated in advance.
• Precise geolocation beyond what is inferable from standard server logs.

How we use information

• Operate predictions — record commits, settle outcomes against live exchange prices, calculate points, and display your history and profile.
• Run rewards — aggregate weekly fee pools, publish Merkle claim roots, and verify on-chain claims.
• Improve the product — analyze aggregated usage patterns, fix bugs, and maintain platform security.
• Communicate — respond to support requests you initiate; we do not send unsolicited marketing email by default.
• Comply with law — respond to valid legal requests where required, and enforce our Terms against abuse.

Legal bases (where applicable)

Depending on your jurisdiction, we rely on: (a) performance of a contract — providing the service you request; (b) legitimate interests — securing the platform, preventing fraud, and improving features, balanced against your rights; and (c) consent — where required for optional features such as avatar uploads. You may withdraw consent for optional features without affecting core wallet-based use, subject to technical limitations.

Third-party services

We use trusted processors to run the product. They process data only as needed to provide their service:

• Privy — wallet connection and authentication; Privy's privacy policy governs their handling of wallet session data.
• Supabase — database and optional avatar file storage for profiles and platform analytics.
• Vercel — application hosting, edge delivery, and operational logs.
• Blockchain infrastructure — RPC providers and block explorers for reading public on-chain data.
• Exchange price APIs — we fetch public spot prices; we do not share your wallet identity with exchanges when fetching market data.

We do not sell your personal information to data brokers. We do not share wallet addresses with advertisers for cross-site profiling.

Cookies and local storage

We use strictly necessary cookies and browser storage for session continuity, wallet connection state, and UI preferences. We do not deploy third-party advertising cookies on the core application. You can clear site data in your browser at any time; doing so may disconnect your wallet session and reset local preferences.

Data retention

We retain prediction, points, and profile records while your account activity remains relevant to the service and as needed for rewards, disputes, and legal compliance. On-chain data is permanent on the blockchain and cannot be deleted by us. Server logs are rotated on a schedule appropriate for security monitoring. You may request deletion of optional profile fields (such as avatar or display name) by contacting us; core prediction history tied to your wallet may be retained where required for leaderboard integrity and audit.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or port certain personal data, and to object to some processing. Because the service is wallet-based, many requests can be fulfilled only in relation to off-chain data we control — not public blockchain records. To exercise rights, contact us using the details below. We may need to verify wallet ownership before acting on sensitive requests.

Security

We use industry-standard measures to protect off-chain data, including encrypted transport (HTTPS), access controls on infrastructure, and separation of privileged keys from application servers. No online service is perfectly secure; you are responsible for securing your wallet, device, and seed phrase. Report suspected compromise of the official site or impersonation to us promptly.

International transfers

Our infrastructure and processors may be located in countries other than yours. Where required, we implement appropriate safeguards for cross-border data transfers.

Children

Brail is not directed at anyone under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a minor has provided data, contact us and we will take appropriate steps to delete off-chain records where possible.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. Continued use after changes constitutes acceptance of the revised policy.

Contact

Questions about privacy: support@brail.app. Official site: https://brail.app. Related: Terms & Conditions at /terms and product documentation at /docs.