Privacy Policy

Last Updated: July 1, 2025

This Privacy Policy ("Policy") describes how Noders LLC, an Exempted Company incorporated in the Cayman Islands with Limited Liability ("Noders," "Company," "we," "us," or "our") collects, uses, processes, and protects personal information when you visit our website https://noders.team ("Website") or use our services ("Services").

By accessing or using our Website or Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Policy, please do not use our Website or Services.

1. Who We Are and How to Contact Us

Data Controller:
Noders LLC
Exempted Company incorporated in the Cayman Islands with Limited Liability
Registration Number: [To be inserted]

Contact Information:
Email: security@noders.team
Website: https://noders.team

Data Protection Officer:
For questions regarding data protection and privacy matters, please contact our Data Protection Officer at: security@noders.team

2. Scope and Application

This Privacy Policy applies to:

  • Visitors to our Website

  • Users of our Services, including our validator services and staking platform

  • Business partners and clients who engage with our professional services

  • Anyone who interacts with our products, services, or platforms

Age Restrictions:
Our Website and Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

3. Information We Collect

3.1 Information You Provide Directly

Contact and Communication Information:

  • Name, email address, phone number

  • Company information and role

  • Message content when you contact us through forms or support channels

  • Information provided during customer onboarding and KYC processes

Service-Related Information:

  • Validator delegation information

  • Staking preferences and transaction details

  • Technical support requests and related communications

  • Account credentials and authentication information

3.2 Information We Collect Automatically

Technical Information:

  • IP addresses (anonymized after processing)

  • Browser type, version, and operating system

  • Device identifiers and characteristics

  • Website usage patterns and analytics data

  • Cookies and similar tracking technologies

Blockchain and Performance Data:

  • Publicly available blockchain information related to validator operations

  • Network performance metrics and monitoring data

  • Validator signing information and network participation records

  • Delegation amounts and staking history (as available on public blockchains)

3.3 Third-Party Information

We may receive information from:

  • Google Analytics: Website usage statistics and user behavior patterns

  • Framer Platform: Website performance and hosting analytics

  • Business Partners: Information necessary for service delivery

  • Public Blockchain Networks: Publicly available transaction and validator data

4. How We Use Your Information

4.1 Service Delivery and Operations

  • Providing non-custodial staking services and validator operations

  • Operating and maintaining our staking platform

  • Processing transactions and managing validator delegations

  • Providing customer support and technical assistance

  • Monitoring network performance and security

4.2 Communication and Marketing

  • Responding to inquiries and support requests

  • Sending service-related notifications and updates

  • Providing information about our services and industry developments

  • Marketing communications (with your consent where required)

4.3 Security and Compliance

  • Protecting against fraud, security threats, and unauthorized access

  • Complying with legal obligations and regulatory requirements

  • Conducting KYC (Know Your Customer) procedures where necessary

  • Monitoring and improving security measures

4.4 Analytics and Improvement

  • Analyzing website usage and user behavior

  • Improving our services, website, and user experience

  • Developing new features and services

  • Creating aggregated, anonymized data for business insights

5. Legal Bases for Processing (GDPR)

For users in the European Economic Area, we process personal information based on:

  • Contract Performance: To provide our services and fulfill our obligations

  • Legitimate Interests: For security, analytics, and business operations

  • Legal Compliance: To meet regulatory and legal requirements

  • Consent: For marketing communications and optional services

6. Information Sharing and Disclosure

We may share your information with:

6.1 Service Providers and Partners

  • Cloud Service Providers: For hosting, storage, and infrastructure

  • Analytics Providers: Including Google Analytics for website analytics

  • Technical Partners: For service delivery and platform operations

  • Professional Service Providers: Including legal and compliance consultants

6.2 Legal and Regulatory Requirements

  • Government authorities and regulatory bodies when required by law

  • Law enforcement agencies for legitimate investigations

  • Legal proceedings and dispute resolution

  • Compliance with court orders and subpoenas

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction, subject to equivalent privacy protections.

7. International Data Transfers

As a global company, we may transfer personal information to countries outside your jurisdiction, including:

  • United States: For cloud services and analytics (with appropriate safeguards)

  • Cayman Islands: Where our company is incorporated

  • European Union: For users and service providers in the region

We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses for GDPR compliance

  • Adequacy decisions by relevant authorities

  • Other legally recognized transfer mechanisms

8. Data Security

We implement comprehensive security measures to protect your personal information:

Technical Safeguards:

  • Enterprise-grade infrastructure monitoring (Prometheus, Grafana, Loki)

  • Encryption for data in transit and at rest

  • Multi-factor authentication and access controls

  • Regular security assessments and penetration testing

Organizational Safeguards:

  • 24/7 monitoring by our DevOps team

  • ISO 27001 certification process (in progress)

  • Regular security training for staff

  • Incident response and breach notification procedures

  • Access controls on a need-to-know basis

9. Data Retention

We retain personal information for as long as necessary to:

  • Provide our services and fulfill contractual obligations

  • Comply with legal and regulatory requirements

  • Resolve disputes and enforce our agreements

  • Pursue legitimate business interests

Retention Periods:

  • Account Information: Duration of relationship plus 6 years for legal compliance

  • Communication Records: 3 years from last interaction

  • Technical Logs: 12 months (or anonymized thereafter)

  • Marketing Data: Until consent is withdrawn or 2 years of inactivity

10. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

10.1 General Rights

  • Access: Request copies of your personal information

  • Rectification: Correct inaccurate or incomplete information

  • Erasure: Request deletion of your personal information

  • Restriction: Limit processing of your personal information

  • Portability: Receive your data in a portable format

  • Objection: Object to processing based on legitimate interests

10.2 Consent and Marketing

Withdraw Consent: Opt out of marketing communications

  • Unsubscribe: Use unsubscribe links in marketing emails

  • Communication Preferences: Manage notification settings

To exercise your rights, contact us at security@noders.team. We will respond within one month (or as required by applicable law).

11. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies:

Essential Cookies: Required for website functionality and security
Analytics Cookies: Google Analytics for usage statistics and improvements
Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

12. Blockchain and Cryptocurrency Considerations

Non-Custodial Nature:
Our staking services are non-custodial, meaning you retain control of your private keys and assets. We do not have access to or control over your cryptocurrency holdings.

Public Blockchain Data:
Blockchain transactions and validator activities are publicly recorded and immutable. This public information is not considered personal data under this Policy, though it may be used for service provision and network analysis.

Validator Information:
Information about our validator performance, including uptime, rewards, and network participation, is publicly available on blockchain networks and cannot be deleted or modified.

13. Third-Party Links and Services

Our Website may contain links to third-party websites, including our validator profiles on various blockchain networks. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • Changes in our services or business practices

  • Legal or regulatory developments

  • Technological improvements

  • User feedback and best practices

We will notify you of material changes through:

  • Email notification to registered users

  • Website banner or prominent notice

  • Updated "Last Updated" date at the top of this Policy

Continued use of our Website or Services after changes constitutes acceptance of the updated Privacy Policy.

15. Jurisdiction-Specific Provisions

15.1 European Union (GDPR)

For EU residents, additional rights include the right to lodge complaints with supervisory authorities and specific protections for data transfers outside the EU.

EU Representative: [To be appointed if required based on business operations]

15.2 Cayman Islands (Data Protection Act)

Our operations comply with the Cayman Islands Data Protection Act (2021 Revision), which provides comprehensive data protection aligned with international standards.

15.3 Other Jurisdictions

We strive to comply with applicable privacy laws in all jurisdictions where we operate or serve users.

16. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: security@noders.team

Website: https://noders.team

Response Time: We aim to respond to all privacy-related inquiries within 48 hours.

For urgent security matters, please mark your email as "URGENT - SECURITY MATTER."

This Privacy Policy represents our commitment to protecting your privacy and personal information. We encourage you to read this Policy carefully and contact us if you have any questions or concerns.