Privacy
Last updated 2 November 2026 (UTC)
In short
The protocol stores what it needs to run bounties and verdicts, and nothing to follow you. There is no analytics, no advertising and no tracking on this site.
Your data under the GDPR
| Controller | The operator of Decompile Bounty Protocol, reachable through the contact and takedown form. |
| Wallet addresses | Payout wallets of submissions, and the addresses of backers as they appear in on-chain deposits. |
| Signed messages | The message a hunter signs with their payout wallet, and its signature. |
| Encrypted archives | Submitted sources, stored encrypted to the judge's key, with their sha256 commitment. A winning source is published in clear on its bounty page. |
| Verdicts | Verdict records and replay reports, which are public. |
| Requests | What you write in the contact and takedown form. |
| Legal basis | Performing the service you ask for (Art. 6(1)(b)); legitimate interest in keeping the service secure and verifiable (Art. 6(1)(f)). |
| Not collected | No analytics, no advertising identifiers, no tracking cookies, no profile. |
| Your rights | Access, rectification, erasure, restriction, objection and portability for the records we hold, and a complaint to your data protection authority. |
What is public by design
Deposits, payouts, refunds, bonds, burns and Memo records are Solana transactions. They are public and permanent, and nobody can delete them, the operator included. Verdicts and their reports are published so anyone can re-run them.
Where data is kept
The site and its records are hosted on Vercel; the judge machine runs on Fly.io; chain data is read through public Solana RPC nodes. These providers process data on the operator's behalf to run the service, and may do so outside your country.
How long
Records are kept for as long as the bounty they belong to is listed, so that every verdict stays verifiable. You can ask for an off-chain record about you to be erased through the form; on-chain records cannot be erased.
Wallets
The site never asks your wallet for anything until you click Connect wallet. Your wallet extension or app keeps its own data under its own policy.
Contact
For any privacy request, use the contact and takedown form and choose Privacy request.