Privacy Policy

Isocast is operated by an EU-based sole developer, who is the data controller for personal data processed through the Service. You can reach us about privacy at [email protected].

• Wallet addresses & on-chain transaction data. When you pay, your public wallet address and the on-chain USDC transaction are processed. Consistent with EDPB Guidelines 02/2025 on blockchain, we treat wallet addresses and associated on-chain data as personal data — there is no blockchain exemption from data-protection law.
• IP address & user-agent. Our servers log IP addresses, user-agent strings, timestamps, and request metadata for security, abuse prevention, and operating the Service.
• Optional email. If you choose to give us an email address (e.g. for support), we process it for that purpose.
• Telegram chat IDs. If you set up Telegram delivery, we store the chat ID you register so we can push signals to it.

• Performance of a contract (GDPR Art. 6(1)(b)) — to process payment, deliver signals, and provide the Service you requested.
• Legitimate interests (Art. 6(1)(f)) — to secure the Service, prevent abuse and fraud, enforce rate limits, and comply with sanctions screening.
• Consent (Art. 6(1)(a)) — for analytics cookies. You can decline or withdraw consent at any time via the cookie banner.
• Legal obligation (Art. 6(1)(c)) — where we must retain records or screen against sanctions lists.

We use PostHog to understand how the site is used (e.g. page views, aggregate usage). PostHog analytics run only if you accept analytics cookies in our cookie banner. If you decline, we do not load PostHog and it does not capture your activity. You can change your choice at any time by clearing the banner setting; declining is honored.

We share data with the following categories of sub-processors, only as needed to run the Service:

• Hosting / infrastructure — to run the website and API.
• PostHog — product analytics (only with your consent).
• Coinbase CDP facilitator — x402 payment settlement.
• Telegram — signal delivery to your chat ID.
• RPC providers — to read and verify on-chain payment data.

Blockchain data is public and permanent. On-chain payment data — including your wallet address and transactions — is recorded on the Base network, which we do not control and cannot erase, alter, or rectify. This is an inherent property of public blockchains. Because of this, we minimize the personal data we place on-chain and keep off-chain records to the minimum necessary. Please consider this before transacting: rights of erasure and rectification cannot be applied to data that already exists on a public ledger.

Subject to applicable law, you have rights over your personal data. Under the GDPR you may request access, rectification, erasure, restriction, portability, and objection, and you may lodge a complaint with your supervisory authority. Under the California CCPA/CPRA you have the right to know, delete, correct, and to limit the use of sensitive personal information.

Do Not Sell or Share. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

To exercise any of these rights, email [email protected]. Note the immutability caveat above: rights cannot be applied to data already recorded on a public blockchain.

We retain personal data only as long as needed for the purposes above — to provide the Service, comply with legal, tax, and sanctions obligations, and resolve disputes — and then delete or anonymize it, except for data that is inherently permanent on-chain.

Our sub-processors may process data outside your country, including outside the EU/EEA. Where they do, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

We apply reasonable technical and organizational measures to protect personal data. No system is perfectly secure, however, and we cannot guarantee absolute security.

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Policy from time to time. When we do, we will revise the version and effective date above and publish the update at https://isocast.dev/privacy.

This Privacy Policy is effective as of 2026-07-03 (v1.0-draft).