Legalprivacy policy · last updated 27 October 2026

Privacy policy.

We build privacy infrastructure, so we collect as little as we can. This page says exactly what we do collect, in the website and in the airdrop.

Who we are

The controller of the personal data described here is Sanect UK Limited (Company No. 17404397). It runs sanect.com and the Sanect Airdrop at airdrop.sanect.com. This policy applies UK data protection law (UK GDPR and the Data Protection Act 2018); if you are in the EEA you have the same rights.

This website (sanect.com)

sanect.com is an informational website. We do not run server-side logging of visitors beyond what our hosting and CDN providers keep for security and operation. The site loads fonts from Google Fonts, which may receive your IP address under Google's own policy. If you give us information voluntarily, such as an email for updates or a GitHub handle on a grant application, we use it only for that purpose.

The Sanect Airdrop

The airdrop is a service you sign in to. When you use it we process the following.

  • Your wallet address and the public on-chain activity linked to it, from which we calculate points (swaps, liquidity, bridging, staking, names, votes). This data is public on the blockchain.
  • Your email address, if you sign in with email: the address, the time of each sign-in, a hashed one-time code and link, and a session. For each sign-in request we also keep, for up to 7 days, the network (IP) address and a random browser identifier, to limit abuse. Each sign-in email shows you the approximate city, region, country and browser it was requested from.
  • Social accounts you choose to verify (X, Telegram, Discord, YouTube, LinkedIn, Medium): the account identifier, display name and proof link you provide, and the points they earned.
  • KOL applications: your X login is used once to read public numbers (followers, account age, post count); we store the handle, profile link, those numbers and our decision. We do not keep your X access token.
  • Referrals: which wallet referred which wallet, and the points that flow from it.
  • Records of our decisions: allocations, payouts and blocks, with the reason.

We do not ask for your name, address, date of birth or identity documents. We do not collect a MAC address (a website cannot read it).

Why we use it, and our legal basis

  • To run the airdrop you joined: calculate points, rank wallets, send sign-in codes and alert emails, review KOL applications, pay allocations. Basis: performing our agreement with you.
  • To prevent abuse and fraud: limits on sign-in emails, detection of self-referral and fake accounts, blocking wallets we find are farming the programme. Basis: our legitimate interest in a fair airdrop.
  • To meet legal duties, including a sanctions check on claim. Basis: legal obligation.
  • Alert emails about your own account and referrals, with a one-click unsubscribe in every one. Basis: legitimate interest; you can switch them off.

Cookies and tracking

The airdrop app uses only strictly necessary cookies: a session cookie when you sign in with email (30 days, HttpOnly), a random browser identifier used only to limit sign-in abuse (up to 365 days, HttpOnly), and short-lived cookies during an X login. It loads no advertising and no analytics scripts.

Some other Sanect web apps (for example the swap, the order book, the explorer and the staking app) currently load an advertising pixel from AdRoll and our own analytics script, which stores a visitor identifier in a cookie for up to 365 days across sanect.com subdomains. We are adding a consent choice for these; until it is live you can block them with your browser or a content blocker, and nothing in the airdrop depends on them.

Who else sees it

We use these providers to run the service. They process data only on our instructions, except where noted.

  • Hosting and network: Railway (servers and databases) and Cloudflare (CDN and security; sees visitor IP addresses and approximate location).
  • Email delivery: ZeptoMail by Zoho (sign-in and alert emails).
  • Wallet connection: Reown (WalletConnect), only if you choose to connect a phone wallet.
  • Eligibility lookups: Alchemy receives the wallet address you check, to read public activity on other chains.
  • Sanctions screening: a public on-chain sanctions list is queried with your wallet address.
  • Social platforms you choose to verify with (X, Telegram, Discord and others), under their own policies.

We do not sell or rent personal data. We may disclose data where the law requires it.

Transfers outside the UK

Some of these providers process data outside the UK, including in the United States and the EEA. Where required we rely on the UK's approved safeguards (adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses).

On-chain data

Everything sent to the Sanect blockchain, and the activity on other chains that the airdrop reads, is recorded on a public ledger that nobody, including us, can edit or delete. Points calculated from public activity can be rebuilt by anyone from the chain. For transaction privacy, use the shielded path described in the privacy architecture.

How long we keep it

  • Sign-in codes, with their network address and browser identifier: 7 days.
  • Email sessions: 30 days, or until you sign out.
  • Your email account and wallet link: until you delete it or the airdrop ends and we close the accounts.
  • Points, rankings and allocation records: for the life of the airdrop and then up to 12 months after the last claim window closes, to answer disputes and meet accounting duties.
  • Records of decisions (payouts, blocks): up to 6 years, as a financial record, with no email address in them.

Your rights

You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on our legitimate interest. To use a right, write to [email protected]; we answer within one month. If you are unhappy with how we handled it, you can complain to the Information Commissioner's Office (ico.org.uk).

Deleting your data

If you are signed in with email, go to airdrop.sanect.com/account and choose Delete my data. It deletes your email address, sessions and codes at once. You can also delete the personal data tied to your linked wallet (social records and the points they gave, KOL application details, referral alias) and, if you want, take the wallet out of the airdrop completely, which gives up its points and any allocation. Otherwise write to [email protected] from the same email address. What we cannot erase: the public blockchain, and points that anyone can rebuild from it unless you take the wallet out of the airdrop; our record of decisions, which contains no email address.

Automated decisions

Points and allocations are calculated by formula. We may block a wallet that our checks, confirmed by a person, show is farming the programme. You can ask for a human review of a block or an allocation at [email protected].

Children

The airdrop is not for anyone under 18, and we do not knowingly collect their data.

Changes

Changes are posted on this page with a new date; material changes are announced in our community channels.

Contact

Sanect UK Limited, [email protected]