Chia Network Inc. (“Chia,” “us,” “we”) respects your privacy. This Privacy Policy (“Policy”) explains how Chia collects, uses, and shares information that identifies or relates to a particular individual, directly or indirectly, including information referred to as “personally identifiable information” or “personal information” under applicable data privacy laws (“Personal Data”). This Policy applies to www.chia.net and any other Chia websites or applications on which it appears (“Chia Services”). It also explains your choices and rights regarding your Personal Data. Please read it carefully.
Your use of the Chia Services is at all times subject to our Terms of Use, which incorporates this Policy. This Policy does not cover the practices of companies we don’t own or control or people we don’t manage. Any terms we use in this Policy without defining them have the definitions given to them in the Terms of Use.
I Have a Question About This Policy; How Can I Reach Chia?
You may direct all questions and concerns about this Policy or questions regarding exercising your privacy rights to Chia Network Inc., 611 Gateway Boulevard, Suite 120, South San Francisco, California 94080, United States, Attention: Privacy, the data controller for Personal Data collected and processed in connection with the Chia Services. You may contact Chia Network Inc. via regular mail or email at privacy@chia.net.
What Information Do We Collect and How Do We Collect It?
(1) Information you may provide to us:
You may share information about yourself by corresponding with us, or filling in forms in the Chia Services, including information you provide when reporting a problem with the Chia Services, participating in the Chia beta testing program, or by corresponding with us by phone, email or otherwise.
(a) Wallet services:
Depending on which features, products, or authentication methods you choose to use, you may provide us with:
- First and last name – but you may use a pseudonym as your display name instead
- Email address
- Username
- Password hash
- Vault address and information
- Public keys
- Vault recovery phrase (this could only apply if you use a BLS recovery key because it is generated on the vault frontend. We do not collect private keys corresponding to passkeys or hardware signer keys)
- Vault recovery information
- Transaction information such as other wallet addresses
- Mobile device ID
(2) Information we collect about you:
We automatically log information about you and your computer when you visit the Chia Services, as explained in more detail below. This includes computer operating system type, browser type, and language, how long you spent on a page, access times, approximate location (based on IP address), and information about your use of and actions on the Chia Services.
(a) Log and Usage Data:
Like most websites, Chia automatically collects certain information when you use the Chia Services, both in server log files and through analytics tools such as Matomo. This information may include your internet protocol (IP) address, operating system, browser type, internet service provider (ISP), referring and exit pages, date and time stamps, clickstream data, and wallet services metrics (including your interactions with service features and content, your preferences, and technical errors). Some of this information, such as your IP address, may be considered Personal Data under applicable law, and we handle it in accordance with this Policy. We use this information to analyze trends, administer and secure the Chia Services, understand how visitors navigate and use the Chia Services, and improve our content and features. We may share information that has been aggregated or de-identified so that it does not identify any individual or device.
(b) Tracking Technologies
Chia Services use cookies and similar tracking technologies, including Matomo, which we use as a first-party analytics tool to understand site performance and usage with your consent where required by law. Because privacy regulations differ globally, the specific consent options and tracking tools presented to you may vary based on your approximate location, which we determine from your IP address.
You can manage your cookie preferences, opt in to or opt out of optional categories such as analytics cookies, or withdraw your consent at any time by clicking the “Privacy Settings” link in the footer of the applicable Chia Services. Strictly necessary cookies are always active. Through this interface, you can access a complete, dynamically updated list of all active cookies and tracking services, their specific purposes, and our legal basis for using them.
Additionally, our systems are designed to recognize and respect Global Privacy Control (GPC) signals transmitted by your browser as a valid opt-out request. As a secondary fallback, you may also restrict or permanently deny the setting of cookies by changing the settings of your Internet browser, though deactivating cookies may change the availability of some functions within the Chia Services.
You can learn more about how cookies work at: https://allaboutcookies.org/ (opens in a new tab).
(c) Mobile Applications:
If you download and install certain mobile applications and software we make available, we may receive information about your approximate location and mobile device, as applicable. We may also receive and collect information transmitted from your device for the purpose of providing you the relevant Chia Services, such as your username, email, and information regarding when you are logged on and available to receive updates, alert notices, or other push notifications, and when you report bugs or provide other information to us.
What Legal Basis Do We Have to Collect Your Information?
Chia collects and processes Personal Data only when we have a legal basis to do so. Depending on the Chia Services you use and where you are located, we rely on the following:
Contract. For wallet services, such as Chia’s wallet websites and mobile applications, we process your Personal Data as necessary to provide the Chia Services you request, including to register and manage your account or user profile, process orders and transactions, handle billing, and provide support. We may also process your Personal Data to negotiate or perform a contract to which you are a party.
Consent. Where required by law, including in the European Economic Area, the United Kingdom, and Switzerland, we rely on your consent to place non-essential cookies and similar technologies, such as Matomo analytics cookies, on your device. We also rely on consent for any other processing where we ask for it at the time of collection. You can withdraw your consent at any time, as described in Part 2(b) and Part 6. Withdrawing consent does not affect processing that took place before you withdrew it.
Legitimate interest. Where processing does not override your rights and freedoms, Chia relies on legitimate interest in operating our business. These include operating strictly necessary cookies, keeping our network and information systems secure, identifying and preventing fraud, improving and personalizing the Chia Services, and, where consent is not required by law, understanding how visitors use the Chia Services.
Legal obligation. We may process your Personal Data to comply with applicable law, regulation, court order, or other legal process, including to prevent, detect, and investigate security incidents and potentially illegal or prohibited activities.
Does Chia Share My Personal Data?
Chia does not sell your Personal Data. However, your Personal Data may be shared with others in accordance with this Policy in the following circumstances:
(a) Third-party service providers
Third-party providers employed by Chia to perform functions on our behalf may require access to Personal Data to perform their services. Such functions may include data analysis, payment processing, content transmission, and website analytics partners. However, all third-party providers must process Personal Data in accordance with this Policy and as permitted by applicable data protection laws. A current list of the cookies and analytics services used on our websites is available through the “Privacy Settings” link in the footer.
Our payment processing partners, such as Stripe, Inc., collect your voluntarily-provided payment card information as necessary to process your payment. Please see their respective terms of service and privacy policy for information on their use and storage of your Personal Data.
(b) Protection of Chia and others
Chia may release Personal Data to comply with the law or with regulatory obligations; enforce or apply our Terms of Use and other agreements; protect Chia’s rights, property, and safety; and protect the rights, property, and safety of others.
How Secure is My Personal Data?
Chia Services are designed with security in mind. We use encryption protocols and software to protect your Personal Data during transmission, and work to maintain electronic, physical, and procedural safeguards when collecting, storing, or disclosing your Personal Data.
We seek to protect your Personal Data from unauthorized access, use and disclosure using appropriate physical, technical, organizational and administrative security measures based on the type of Personal Data and how we are processing that data. You should also help protect your data by appropriately selecting and protecting your passkey, password and/or other sign-on mechanism; limiting access to your computer or device and browser; and signing off after you have finished accessing your account. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data over the internet or storing data is completely secure.
Can I Withdraw My Consent for Chia’s Processing of My Personal Data; Data Subject Rights?
If you consented to Chia’s processing of your Personal Data for a specified purpose, you may withdraw your consent at any time. Subject to applicable law, you have the right to request access to, correct, and delete your Personal Data, and to ask for data portability. You may also object to our processing of your Personal Data or ask that we restrict the processing of your Personal Data in certain instances. If you wish to do any of these things, please contact privacy@chia.net.
You may have certain applicable rights with respect to your Personal Data, including those set forth below. For more information about these rights, or to submit a request, please contact privacy@chia.net. Please note that in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision. In some cases, we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request.
- Access: You can request more information about the Personal Data we hold about you and request a copy of such Personal Data. You can also access certain of your Personal Data by logging on to your account.
- Rectification: If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data. You can also correct some of this information directly by logging on to your account.
- Erasure: You can request that we erase some or all of your Personal Data from our systems.
- Withdrawal of Consent: If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time. For website tracking and cookies, you may instantly withdraw your consent by clicking the “Privacy Settings” link in the footer of the site and adjusting your preferences. For all other data processing withdrawals, please contact privacy@chia.net.
- Portability: You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
- Objection: You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
- Restriction of Processing: You can ask us to restrict further processing of your Personal Data.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first at privacy@chia.net so we can try to resolve your concern.
Additional Information for U.S. Residents
This Part applies to residents of the United States and supplements the rest of this Policy.
Personal Data we collect. In the past 12 months, we have collected the following categories of Personal Data, from the sources and for the purposes described in Parts 2 and 3:
- Identifiers, such as name, email address, username, IP address, device ID, and wallet addresses
- Account credentials, such as username and password hash
- Commercial information, such as transaction records
- Internet or other electronic network activity, such as browsing and interaction data collected through cookies and analytics tools like Matomo
- Approximate geolocation derived from your IP address
We disclose these categories to service providers for business purposes, as described in Part 4.
Sale and sharing. Chia does not sell Personal Data and does not share Personal Data for cross-context behavioral advertising or targeted advertising, as those terms are defined under applicable law. We do not knowingly sell or share the Personal Data of consumers under 16 years of age.
Sensitive Personal Data. We use account credentials only to provide and secure the Chia Services, and we do not use or disclose sensitive Personal Data for purposes that would require us to offer a right to limit its use.
Your rights. You have the right to:
- Know and access the Personal Data we have collected about you, and receive a copy in a portable format
- Delete Personal Data we have collected from you
- Correct inaccurate Personal Data
- Not be discriminated against for exercising any of these rights
How to exercise your rights. To submit a request, email privacy@chia.net. You can also opt out through the “Privacy Settings” link in the footer, or by turning on Global Privacy Control in your browser. We will need to verify your identity before responding to most requests, and we will respond within the timeframe required by applicable law. You may use an authorized agent to submit a request on your behalf. We may ask the agent for proof of their authority and ask you to verify your identity directly.
Appeals. If we decline your request, you may appeal by emailing privacy@chia.net with the subject line “Privacy Request Appeal.” If you are not satisfied with the outcome of your appeal, you may contact your state Attorney General.
Transfers of Personal Data from the EEA
Chia is based in the United States, and the Chia Services are hosted and operated in the United States and in other countries through Chia and its service providers. If you are located outside the United States, your Personal Data will be transferred to, stored in, and processed in the United States and other countries whose data protection laws may differ from those in your country.
When we transfer Personal Data from the European Economic Area, the United Kingdom, or Switzerland, we take the steps required by applicable law to protect it, including contractual safeguards with our service providers where required. You may request more information about these safeguards by contacting privacy@chia.net.
How Long Does Chia Keep My Personal Data?
We keep Personal Data only for as long as necessary to provide the Chia Services, to fulfill the purposes described in this Policy, or as required by law, such as for tax and accounting purposes. In particular:
- Account and wallet data is kept while your account is active and for a reasonable period afterward, as required to meet our legal obligations, resolve disputes, and enforce our agreements.
- Analytics data collected through Matomo is kept at the individual-visit level for up to 25 months and then deleted. We keep aggregated reports, which do not identify you, indefinitely.
- Consent records are kept for as long as needed to show that we obtained valid consent.
When Personal Data is no longer needed, we delete it or anonymize it so that it no longer identifies you. We may keep aggregated or anonymized information that does not identify you.
Children’s Privacy
The Chia Services are not directed to children, and we do not knowingly collect Personal Data from anyone under 16. If you believe a child has provided us with Personal Data, please contact privacy@chia.net and we will delete it.
Changes to This Policy
We may update this Policy from time to time. When we do, we will revise the “Updated on” date at the top of this page. If we make material changes, we will provide additional notice, such as a notice on the Chia Services or by email. Your continued use of the Chia Services after an update means you acknowledge the revised Policy.