uuon.world / legal / privacy
Privacy policy
Last updated 10 October 2026
This policy covers uuon.world, its APIs (Gate, CENS, wallet sign-in) and support email. It describes what the systems do today.
Controller
[ENTITY], [ADDRESS]. Contact: support@uuon.world. [DATA PROTECTION OFFICER — name and contact, or statement that none is required]
What we process
| Data | When | Purpose · legal basis | Retention |
|---|---|---|---|
| Request data (IP address, URL, user agent, time) | Every request to uuon.world and the APIs; processed by Cloudflare, which runs the site | Delivering the site, security, abuse prevention · legitimate interests, Art. 6(1)(f) GDPR | [LOG RETENTION — Cloudflare Workers Logs for the current plan] |
| Wallet address, chain id; sign-in nonce with your IP address | Wallet sign-in (Sign-In with Ethereum) | Authentication, replay and rate-limit protection · contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f) | Nonce valid 10 min, then [NONCE DELETION SCHEDULE]; address kept with the account |
| Session token (only a SHA-256 hash is stored) | After wallet sign-in | Keeping you signed in · Art. 6(1)(b) | Expires after 24 h; [EXPIRED SESSION DELETION SCHEDULE] |
| GitHub id, username, name, email, avatar URL | Sign in with GitHub | Account and API key · Art. 6(1)(b) | For the life of the account |
| Email address | Requesting a free API key | Issuing and managing the key · Art. 6(1)(b) | For the life of the key |
| API key, usage counters | Using the APIs | Access control, quotas, billing · Art. 6(1)(b) | For the life of the account |
| CENS ledger entries, launch grant, purchase records (Stripe session and payment ids, pack, amount, currency, waiver and consent time) | Claiming, buying or spending CENS | Providing CENS; accounting and tax records · Art. 6(1)(b), Art. 6(1)(c) | The ledger is append-only. [STATUTORY RETENTION PERIOD for accounting records, e.g. under HGB/AO] |
| Support emails (sender, subject, message, thread) | Writing to support@, licensing@ or security@ | Answering your request · Art. 6(1)(b) or (f) | [SUPPORT RETENTION PERIOD] |
Payments
CENS purchases are paid on Stripe's hosted checkout page. Your card details go to Stripe and never reach our servers. We receive the session id, payment id, amount, currency and payment status. Stripe processes payment data under its own privacy policy, as [STRIPE ROLE: independent controller / processor — confirm].
Support email
Emails to support@ and licensing@ uuon.world currently go to the operator's own mailbox and are answered by a person. When the support system goes live, incoming messages are stored as tickets. It may suggest a draft reply using an AI model running on Cloudflare, and a person reviews every reply before it is sent. Reports to security@ always go directly to the operator.
No cookies, no tracking
uuon.world sets no cookies and stores nothing on your device; a sign-in session is held in the page's memory only. There is no advertising or cross-site tracking. If privacy-friendly, cookie-free Cloudflare Web Analytics is switched on, this page will say so. See Cookies.
Recipients and transfers
We use the service providers listed on Subprocessors. Some are based in the United States. Transfers rely on [TRANSFER MECHANISM per provider: EU–US Data Privacy Framework certification and/or Standard Contractual Clauses — verify for each].
Your rights
You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to withdraw consent at any time. Write to support@uuon.world. Ledger and accounting records that we must keep by law are restricted rather than deleted. You may lodge a complaint with a supervisory authority, for example [SUPERVISORY AUTHORITY for the controller's establishment].
Automated decisions
We make no decisions with legal or similarly significant effect based solely on automated processing. Rate limits and quotas are applied automatically to protect the service.