Privacy Policy

1. What this policy covers

This Privacy Policy explains how StableGuard ("we," "us") collects, uses, shares, and protects information when you use stableguard.org and any related services, APIs, or dashboards (together, the "Services").

2. What we collect

We collect three types of information:

A. Information you provide

• Account details: name (optional), email, password or SSO identifier
• Preferences: alerts, watchlists, jurisdictions of interest
• Support content: messages you send us

B. Information collected automatically

• Usage data: pages viewed, features used, timestamps, referring/exit pages
• Device/technical data: browser, OS, screen size, IP address, coarse location from IP, performance metrics
• Cookies/local storage: session tokens, analytics, preference cookies
• Opt-out signals: Global Privacy Control (GPC) and similar signals (we honor these)

C. Third-party and public sources

• Market/news/social feeds about digital assets (we index content and metadata; we don't claim ownership of third-party content)
• Authentication/analytics providers (see "Third-party processors")

We do not collect payment card numbers via the site at this time. If that changes, we will update this Policy and use a compliant processor. We do not intentionally collect precise geolocation, government IDs, or biometric/neural data.

Children's data: We do not knowingly collect data from children under 13 (US COPPA) or offer the Services to users under 16 in jurisdictions requiring consent. Parents may contact us to delete a child's data.

3. Why we process your data (legal bases)

We process data for:

• Provide the Services & account management (contract/legitimate interests)
• Security & fraud prevention (legitimate interests/legal obligation)
• Analytics & product improvement (consent/legitimate interests)
• Communications: service notices, onboarding, and—if you opt in—product updates (consent/legitimate interests)
• Compliance with applicable law and requests (legal obligation)

Where required (e.g., EU/UK), we rely on at least one lawful basis under GDPR/UK GDPR such as consent, contract, legal obligation, or legitimate interests.

4. Cookies and similar tech

We use:

• Essential cookies (login/session, security)
• Preference cookies (language, theme)
• Analytics (aggregate usage)
• Optional: A/B testing and performance metrics

You can control cookies in your browser. If you disable essential cookies, some features won't work.

5. Do we "sell" or "share" personal information?

We do not sell personal information. For California, "share" refers to cross-context behavioral advertising. If we engage in that in the future, you'll see a "Do Not Sell or Share My Personal Information" link and choices in Settings, and we will honor GPC as an opt-out signal.

6. Your privacy rights

Depending on where you live, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data
• Portability (receive a copy in a portable format)
• Opt-out of targeted advertising/cross-context sharing and certain profiling
• Opt-out of sale of personal information (we don't sell)
• Appeal a denied request (Virginia/Colorado and similar laws)
• Withdraw consent where processing is based on consent

California (CCPA/CPRA), Virginia (VCDPA), and Colorado (CPA) specifically provide many of these rights.

How to exercise your rights:
Email privacy@stableguard.org or use the in-product Privacy Request form (coming soon). We'll verify your request and respond within the timeframes required by law. You may use an authorized agent where permitted.

Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as a valid opt-out of sale/sharing/targeted advertising for that browser.

7. Data retention

We keep personal data only as long as needed for the purposes above, including maintaining your account, complying with legal obligations, resolving disputes, and enforcing agreements. When no longer needed, we delete or de-identify it.

8. How we share information

We share data only with:

• Service providers/processors who help us run the Services (cloud hosting, analytics, authentication, email, ticketing). They must follow our instructions and protect your data.
• Legal, safety, and compliance: to comply with law, enforce terms, or protect rights, security, and users.
• Business transfers: in a merger, acquisition, or asset sale, subject to safeguards and notice.

We do not allow processors to use personal data for their own marketing.

9. International transfers

If we transfer data across borders (e.g., to the US), we use appropriate safeguards such as Standard Contractual Clauses or other mechanisms recognized by applicable law.

10. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit (HTTPS), hardened cloud infrastructure, least-privilege access, and monitoring. No system is 100% secure; if we detect a breach affecting you, we will notify you and regulators as required by law.

11. Analytics, links, and third-party content

We may link to third-party sites and surface third-party content (news/social posts). Those parties have their own privacy policies. Interactions with third-party widgets, embeds, and outbound links are governed by those parties, not us.

12. Your choices

• Email preferences: opt out of non-essential emails via footer links or Settings.
• Cookies/Tracking: manage via your browser and our cookie controls; send a GPC signal to opt out where applicable.
• Account: you can update or delete your account in Settings or by contacting us.

13. Region-specific disclosures

• California: We provide the right to know, delete, correct, and opt-out of sale/sharing; we do not discriminate for exercising rights; you may use an authorized agent. See "Your privacy rights."
• Virginia: You have rights to access, correct, delete, portability, and to opt-out of targeted advertising, sale, and certain profiling; plus an appeals process.
• Colorado: You have rights to access, correct, delete, portability, and to opt-out of targeted advertising/sale/profiling; we honor universal opt-out mechanisms.
• EU/UK: See "Legal bases" and "International transfers." You may complain to your local data authority if you believe we have violated applicable law.

14. Do Not Track

We currently do not respond to browser "Do Not Track" signals, but we honor applicable universal opt-out signals like GPC for opt-out rights described above.

15. Changes to this Policy

If we make material changes, we'll post an update on this page and adjust the Effective Date. If required, we'll also notify you via email or in-app notice and obtain consent where necessary.

16. Contact us