Privacy policy.

Who is responsible

Bullaire World operates BULLAIRE and is the controller of your personal data under the EU General Data Protection Regulation (GDPR). Contact us about anything in this policy at admin@bullaire.world.

What we collect

• Account data: your email address, used to sign you in and to deliver research.
• Membership records: membership status, start and end dates, and payment status.
• Membership payment data: the fee due, any discount code used, and the Solana transaction signature you submit for your membership fee. We do not collect card or bank details, and we never hold funds for you.
• Sign-in data: a session token stored in your browser so you stay signed in. It is needed for the site to work and is not used for tracking.
• Usage data: if we enable Cloudflare Web Analytics, aggregated, cookie-free statistics such as page views. These are not used to identify you.

Payments on Solana are public by design. The sending wallet, amount and time of your membership payment are permanently visible on the blockchain, and no one, including us, can delete them.

Why we use it and our legal basis

• To provide your membership (signing you in, verifying your membership payment, giving access, emailing research): necessary to perform our contract with you.
• To keep the service secure and prevent misuse: our legitimate interests.
• To keep payment and accounting records: our legal obligations.
• To tell you about membership changes, such as renewal reminders: performing our contract with you. We will only send marketing emails with your consent, and you can opt out at any time.

Service providers

We use a small number of providers who process data on our behalf:

• Supabase: database and account sign-in, including sending sign-in emails.
• Cloudflare: website hosting and, if enabled, cookie-free analytics.
• Google Fonts: loads the typefaces used on the site, which means your browser shares your IP address with Google when a page loads.
• jsDelivr and unpkg: deliver the sign-in software library to your browser.

Some of these providers may process data outside the European Economic Area. Where they do, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses.

We do not sell your personal data, and we do not share it for advertising.

How long we keep it

• Account and membership data: for as long as you have an account, and for up to 24 months after your last membership ends, so that you can renew easily.
• Payment records: for as long as accounting and tax law requires.
• You can ask us to delete your account at any time (see below). Records we must keep by law, and data on the public blockchain, cannot be deleted.

Your rights

Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its use, and receive it in a portable format. Email admin@bullaire.world with the subject "Privacy request" and we will respond within one month.

You also have the right to complain to the data protection authority in the EU country where you live or work.

Security

We limit access to member data with database access rules, and sign-in uses one-time email links rather than passwords.

Age

BULLAIRE is for adults. We do not knowingly collect data from anyone under 18.

Changes to this policy

We will post any changes here and update the date at the top. If a change is significant, we will also tell members by email.