Privacy
Draft: for legal review, not yet in force
Onchain data is public
Everything the Autopsy and the Patch show comes from public blockchain data that anyone can read. Searching a wallet reads that public data; it does not reveal anything that is not already onchain.
What we process off-chain, and why
We process six kinds of off-chain personal data, only for security, to keep the site running, to see how it is used and to run the Gravelist:
- IP addresses, to limit request rates and to stop abuse.
- Error logs, to find and fix faults. An error log can include the page you were on, your browser type and your IP address.
- Takedown requests sent to our X account, to handle a request to remove an epitaph, and to reply to it.
- Epitaph reports: the wallet address that signed a report, the signature and the reason, to count each wallet once and to review reported epitaphs.
- Gravelist entries: the wallet that signed the entry and its code, the X account's username and ID, the two posts, the account's follower count and creation date when you entered, and its Sorsa Score, to check the task, to keep one entry per wallet and per X account, and to pick the winners. The posts and the account data are public on X; we read them through the Sorsa API.
- Page views, counted by Vercel Web Analytics to see how the site is used: the page and its address, the referring site, your approximate location (country, region and city), and your browser, operating system and device type. It sets no cookies; a visitor is counted by a hash of the request that is discarded after 24 hours. A wallet address in a page's address is removed before the view is sent.
[For legal review: retention period for each, the hosting and monitoring providers that process them, and the legal basis; for Gravelist entries also Sorsa, and for page views Vercel, as processors.]
What you publish
A burial is public by design: the grave shows the burying wallet's address, the token, the date and the epitaph, and its hash is anchored onchain. An epitaph can be taken down; its text is then deleted from the site, while the onchain hash stays.
The Gravelist winners are listed on the site by X username only. Their wallets appear only in the winners file the Patch is verified with, in address order and without usernames.
What we never ask for
No accounts and no passwords. We never ask for your recovery phrase or your private keys, and we never DM you first.
Contact
Questions and requests: @graveonchain on X.