Skip to main content
Last Updated: May 2026 The Checkpoint Protocol operates in a decentralized and permissionless manner. Although we may collect and process information about users of checkpoint.exchange, app.checkpoint.exchange, docs.checkpoint.exchange, or any other Checkpoint interface (collectively, the “Interface”) in accordance with this Privacy Policy, we do not have information about all protocol users beyond what is already publicly available and recorded on the blockchain. Because public blockchain networks are generally immutable, information written on-chain is typically not under Checkpoint’s unilateral control to alter or remove, although protocol smart contracts and oracle mechanisms may reflect updated information over time. This Privacy Policy (the “Privacy Policy”) explains how Checkpoint (“we,” “our,” or “us”) collects, uses, and shares information in connection with our Services as well as your rights and choices regarding such information. These terms apply to checkpoint.exchange, the Interface, and any other online location that links to this Privacy Policy (collectively, the “Services”). By using the Services, you also agree to our collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with the Terms of Use, you should not use or access the Interface or the Services. This Privacy Policy may be modified from time to time. Your use of the Site is at all times subject to the Terms of Use, which incorporates this Privacy Policy.

1. Information Collection

We may collect your name, contact information, and message content when you communicate with us, such as providing feedback or asking for support. If you voluntarily share additional information with us, you are solely responsible for it. We may collect the wallet address you use to connect to the Interface in order to block wallets and for security purposes. Additionally, we may collect details about the device you use to access the Site and Interface to optimize and troubleshoot any technical issues. Moreover, we may collect details on how you interact with the Interface and Services. Analyzing this data helps us improve the user experience. When you create or interact with offers, trades, escrow contracts, collateral deposits, escrow tokens, settlement contracts, oracle claims, or other protocol actions through the Interface, the associated transaction details (including involved addresses, market identifiers, offer identifiers, token or point amounts, collateral amounts, prices, fees, timestamps, settlement status, claim status, and other on-chain parameters) are recorded on public blockchain networks and may be publicly viewable and linkable to your wallet address. We may also collect, generate, index, display, or process related off-chain metadata where needed to operate, secure, troubleshoot, analyze, or improve exchange, escrow, settlement, oracle, and market features. The Services may also allow you to collect, view, accrue, claim, or otherwise interact with Checkpoint-created points, scores, badges, campaign records, or similar non-transferable metrics (“Checkpoint Points”). In connection with Checkpoint Points, we may collect, generate, receive, or display information such as wallet addresses, connected social or account identifiers you choose to provide, campaign participation, referral or invite data, eligibility criteria, point calculations, timestamps, endpoint responses, API requests, device or session information, and related anti-fraud, abuse-prevention, analytics, and support records. Some Checkpoint Points information may be publicly displayed through leaderboards, profiles, campaign pages, APIs, endpoints, or other Service features, and may be linkable to your wallet address or other identifiers you provide. For clarity, Checkpoint Points records are data records only. They do not represent cash, monetary value, property, digital assets, tokens, stored value, rewards currency, or any right to redemption, exchange, conversion, allocation, distribution, payment, or other benefit. Any future treatment, recognition, or use of Checkpoint Points, if any, is subject to the Terms of Use and may be determined, changed, suspended, or declined by Checkpoint, the Protocol, any DAO, any governance process, or any current or future team or contributor. If you choose to connect accounts, submit identifiers, use referral links, participate in campaigns, or interact with public or semi-public features, you understand that related information may be visible to other users or third parties depending on the feature. Please do not submit information that you do not want associated with your wallet address, profile, campaign activity, or public Service activity. If you use enhanced, paid, invite-only, promotional, or limited-access features such as Checkpoint Pro, Checkpoint Premium, or similar plans, we may collect and process information needed to provide and manage those features. This may include subscription or plan status, eligibility, usage limits, tracked wallet addresses, wallet lists, labels, preferences, alerts, historical data queries, exports, support requests, billing-related metadata, payment status, renewal or cancellation status, and fraud-prevention or abuse-prevention records. Payments may be processed by third-party payment providers, and we may receive limited payment or billing metadata from them; unless expressly stated otherwise, we do not collect or store full payment card details ourselves.

2. Use of Information

We may collect and use information for business purposes in accordance with the practices described in this Privacy Policy. Our business purposes for collecting and using information include: Operating and Managing Services
  • Providing, maintaining, and supporting the Services
  • Operating, calculating, displaying, auditing, correcting, or removing Checkpoint Points records and related campaign, leaderboard, endpoint, or API data
  • Detecting and preventing fraud, breaches, and harm
Improving Services
  • Monitoring the Services and fulfilling legitimate business purposes
Security and Compliance
  • Ensuring Interface security and integrity
  • Investigating and preventing wrongdoing
  • Detecting, preventing, and responding to bots, Sybil activity, manipulation, fraudulent claims, abuse, or other misuse of Checkpoint Points or related endpoints
Fulfilling Requests
  • Carrying out your specific instructions
Consent-Based Use
  • Utilizing information based on your consent
Additionally, non-identifiable information may be used as allowed by law. For details on your rights and choices regarding information usage, please refer to the “Analytics” or cookies-related sections below and to applicable regional rights (e.g., CCPA, GDPR).

3. Sharing and Disclosure of Information

We may share or disclose collected information as described in this Privacy Policy and for the purposes outlined in the “Use of Information” section above. We may share information with:
  • Affiliates: Including when they act as service providers or for their internal use
  • Professional Advisors: For audits, legal advice, and regulatory compliance
  • Service Providers: For business purposes like fraud prevention, security, data analytics, infrastructure, and similar services, bound by contractual obligations consistent with this Privacy Policy
  • Payment and Billing Providers: To process payments, manage subscriptions, handle billing support, prevent fraud, process refunds or chargebacks, and comply with payment, tax, accounting, and legal obligations
  • Legal, Safety, and Compliance Recipients: When we believe disclosure is reasonably necessary to comply with law, regulation, legal process, sanctions screening, security requirements, fraud prevention, abuse prevention, enforcement of our Terms of Use, or protection of the rights, property, or safety of Checkpoint, users, contributors, service providers, or others
  • Public or User-Directed Features: When you use features that are designed to display or share information publicly or with other users, including wallet-linked activity, campaign participation, rankings, leaderboards, profiles, API responses, or other information you choose to make available through the Services
Additionally, non-identifiable information may be shared (including aggregated or de-identified data) as allowed by law.

4. Third-Party Services

We may integrate technologies operated or controlled by other parties into parts of the Services. For example, the Services may include links that hyperlink to websites, platforms, and other services not operated or controlled by us. Please note that when you interact with other parties, including when you leave the Interface, those parties may independently collect information about you and solicit information from you. The information collected and stored by those parties remains subject to their own policies and practices, including what information they share with us, your rights and choices on their services and devices, and where they store and process information (e.g., in the U.S., EU, or elsewhere). We encourage you to familiarize yourself with and consult their privacy policies and terms of use. For example, by using a third-party wallet to engage in transactions on public blockchains, your interactions with any third-party wallet provider are governed by the applicable terms of service and privacy policy of that wallet provider.

5. Cookies Policy

We value your privacy and aim to be transparent about our use of technologies. This section explains how and when we utilize cookies on our Services. What types of cookies do we use?
  • Strictly Necessary Cookies: Essential for basic functionality, like page navigation and secure access. They do not typically collect personal information.
  • Analytical/Performance Cookies: Allow us to analyze how visitors use the Interface, enhancing functionality and performance.
  • Functional Cookies: Enable enhanced functionality and personalization. They may remember your preferences, such as your previously used wallet connection.
How to disable cookies? Most web browsers offer the option to enable or disable cookies. For detailed guidance on controlling, disabling, or deleting cookies, you can visit resources such as aboutcookies.org or consult your browser’s help documentation. Please note that disabling certain cookies may impact the functionality or performance of the Services.

6. Data Security

We implement reasonable administrative, physical, and technical security safeguards to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. Nevertheless, transmission via the Internet is not completely secure and we cannot guarantee the security of information about you in any capacity.

7. Data Retention

We retain collected information for as long as necessary to fulfill the purpose it was collected for, as stated in this Privacy Policy, and in compliance with applicable legal, regulatory, and operational requirements. We may retain certain records for longer where reasonably necessary for security, fraud prevention, abuse prevention, dispute resolution, legal compliance, auditability, enforcing our Terms of Use, maintaining campaign or Checkpoint Points integrity, or protecting the Services. Public blockchain data and other public records may remain available even if we delete or de-identify corresponding off-chain records that we control.

8. International Transfers

Your information may be transferred, processed, and stored in different jurisdictions, including the European Economic Area, the United Kingdom, and other locations. Data protection laws in these jurisdictions may differ from those in your home country. Using our Services or providing information signifies your consent to these transfers, as outlined in this Privacy Policy. Where required by law, we implement appropriate safeguards for such transfers.

9. Minors

Our Services are intended for general audiences, not children. To use them, you must be legally able to enter into an agreement. We do not knowingly collect personal information from children under the age of 18. If we become aware that we have collected personal information from a child under 18, we will take reasonable steps to delete such information.

10. Additional Disclosures for California Residents

This section applies solely to California residents. The California Consumer Privacy Act (CCPA) grants additional rights related to knowing, deleting, and opting out of certain uses of personal information. It also mandates businesses to provide notices and means for exercising these rights. For further details, review the “Information Collection” and “Sharing and Disclosure of Information” sections. We do not sell personal information as defined under the CCPA. To exercise your rights, contact us through the support channels listed on the Site and Interface. Be specific about the right you are invoking. We will confirm receipt within the timeframe required by applicable law (typically thirty (30) days) and respond in accordance with legal requirements. We may need to verify your identity before fulfilling your request.

11. Additional Disclosures for Data Subjects in the EU/UK

A. Roles

We act as a controller for the personal data you interact with on our Services.

B. Lawful Basis for Processing

We process data based on lawful bases including:
  • Consent
  • Contractual necessity
  • Legal obligation
  • Legitimate interests

C. Your Data Subject Rights

If you are in the EU/UK, you may have rights including access, rectification, erasure, restriction, objection, and portability of your personal data. You can also withdraw consent where processing is based on consent. Please note that we generally cannot modify or delete information stored on a public blockchain, as we do not control the underlying networks and their immutable ledgers. We can, however, manage certain off-chain records to the extent required by law. To exercise your rights, contact us through the support channels listed on the Site and Interface. Be specific about the right you are invoking. We will confirm receipt within the timeframe required by applicable law (typically thirty (30) days) and respond in accordance with legal requirements. We may need to verify your identity before fulfilling your request. We retain information as necessary for legitimate interests, legal compliance, and dispute resolution. If you have concerns about our compliance, you may contact us or your local data protection regulator.

12. Changes to this Privacy Policy

We reserve the right to revise and reissue this Privacy Policy at any time. Any changes will be effective immediately upon our posting of the revised Privacy Policy. For the avoidance of doubt, your continued use of the Services indicates your consent to the revised Privacy Policy then posted.

13. Contact Us

If you have any questions or comments about this Privacy Policy, our data practices, or our compliance with applicable law, please contact us through the support channels listed on the Site and Interface.