Less data than a newsletter signup.

What we collect

• Account. The handle and avatar you choose, the wallet address you connect, and the time you joined. No name, no date of birth, no ID document: VIG does not perform identity verification.
• Activity. The books you back, your seat, stake, and every settlement, plus the on-chain transaction hashes that prove them. The on-chain part is public by nature and cannot be deleted by anyone.
• Technical. IP address, browser and device type, and short diagnostic logs of the sign-in flow, kept to run and secure the service and to detect abuse. Logs of the sign-in flow contain stage names and error text, never keys or signatures.
• Referral and source. The invite code you joined with and, if you arrived from a link with a source tag, that tag. This is how referral bonuses and creator rooms are paid.
• Notifications. If you turn on push notifications, the subscription endpoint your browser gives us.
• Messages. If you write to us, your name, email and message, kept until the matter is closed.

What we do not do

• We do not sell personal data, and we do not share it with advertisers.
• We do not hold your funds, your private keys or your seed phrase. Only your wallet does. Anyone asking for them in VIG's name is not VIG.
• We do not track you across other sites. The app contains no third-party analytics or advertising code.

Who else touches your data

• Cloudflare hosts the site, the app and the database, and routes our email.
• The Base network records your stakes and settlements publicly, as any blockchain does.
• WalletConnect (Reown) relays the encrypted connection between the app and a mobile wallet when you choose that route.
• Coinbase handles card and bank purchases of USDC under its own privacy policy, including identity checks it is required to perform. VIG receives only a confirmation that a purchase completed.
• Sanctions screening. Every wallet address that connects is checked against the public Chainalysis sanctions oracle on chain. The check reads an address, nothing else.
• Marketing site only. The landing pages carry a Meta ad-measurement pixel that records page views; the app itself never does. When someone who arrived from an ad creates an account, our server reports one sign-up event to Meta with the IP address, browser type and Meta's own ad cookie, so the ad can be measured. Nothing about your wallet, positions or settlements is ever sent.

Cookies and storage

VIG uses no advertising cookies. The app keeps a session token, your preferences and pending-transaction records in your browser's local storage so that you stay signed in and no stake is lost if a page reloads. Clearing site data signs you out and nothing else.

Retention and deletion

Account and activity data are kept while your account exists. Technical logs roll over within days. Ask us to delete your account and we remove the handle, avatar, wallet link, positions and logs; settlements that already happened stay visible on chain, without your handle. Write to support@vighouse.app or use the contact form.

Your rights

You can ask what we hold about you, have it corrected, exported or deleted, and object to any use of it. Members in the EU, UK, California and other places with data-protection law have those rights in law; we extend them to everyone.

Children

VIG is for adults. We do not knowingly collect data from anyone under 18, and we close accounts we learn belong to minors.

Changes and who to ask

Effective 7 September 2026. When this policy changes, the date changes with it and material changes are announced in the app. The controller is Grid Storm Capital LLC, 159 N Wolcott St, Ste 133, Casper, WY 82601. Privacy questions: support@vighouse.app.