Privacy Policy

Carbonized is software that talks to a public blockchain. Anything you send in a blockchain transaction is public and permanent: nobody, including us, can edit or delete it. Please read the next section before you register a company or trader profile.

• Your wallet address and every transaction you send: trades, auction bids, wrapping, minting and retirements. Retirement certificates include the free-text beneficiary statement you type.
• Company profiles: company name, legal entity ID and the Scope 1/2/3 emission figures you enter are stored in the registry contract and emitted in events. Anyone can read them.
• Trader profiles: name and country are stored in the registry contract and can be read by anyone.
• Contact details: your email address and phone number are not published. Only a salted hash of them is stored onchain, so the details cannot be read from the chain. The details and the random salt used to create the hash are kept in this browser (local storage) so you can prove them to a verifier; clearing your browser data removes them.
• Because the blockchain is immutable, onchain data cannot be deleted or corrected after the fact. Do not enter data you are not willing to publish permanently.

• Wallet connection: if you connect with WalletConnect (Reown), connection metadata is relayed through Reown's infrastructure under their own privacy policy. Injected browser wallets connect locally.
• Blockchain RPC providers: to read the chain and submit transactions, your browser sends requests (including your IP address and wallet address) to RPC endpoints such as the Robinhood Chain RPC, public node providers and, if configured, Alchemy.
• Local storage: your language, sidebar and notification preferences and, after registration, your contact details and salt are stored in your browser only.
• Analytics: if the operator has configured Umami analytics, page views are sent to that Umami instance. If it is not configured, no analytics script is loaded.
• Accounts and comments (optional): when enabled, you can sign in with Google to comment on blog posts. In that case your name, email address and profile picture from Google and your comments are stored in the operator's database. Sign-in is not required to use the marketplace.
• Optional backend: if the operator has configured a backend service, company registration details you enter (including email and phone) are also sent to it. Check with the operator whether one is configured.

We do not sell personal data. Data is necessarily disclosed to the third parties named above (blockchain nodes, Reown, analytics and sign-in providers when enabled) to make the service work, and public blockchain data is visible to everyone.

• The site is served over HTTPS and sets standard browser security headers. We never ask for or store your private keys or seed phrase; transactions are signed in your own wallet.
• The smart contracts have not been independently audited. Use the service at your own risk and never with funds you cannot afford to lose.

• Off-chain data (comments, account, optional backend records, analytics) can be requested for access or deletion by contacting us.
• Onchain data cannot be altered or deleted by anyone. You can avoid publishing personal data by using a fresh wallet and by not entering personal information in registration fields.
• You can clear this site's local storage in your browser at any time.

If you have any questions about your privacy or how we handle your data, please use our contact page.

We may update this policy. The date above shows the last revision; material changes will be announced on this site.