Privacy policy

randprotocol.org is run by Randprotocol Development LLC, a Wyoming limited liability company (30 N Gould St Ste R, Sheridan, WY 82801, USA), which this policy calls "we". It covers this website, the seed-sale accounts, the faucet waitlist, the tools that run in your browser and the public RPC. Rand Wallet, the apps, has its own privacy policy.

Effective 1 October 2026. Questions and requests: legal@randprotocol.org.

What we collect

Only what each service needs, and nothing for advertising or profiling.

Visiting any page

Your browser's requests pass through Cloudflare, which serves the site, and reach our server, which keeps an access log of each request (IP address, time, page, browser identifier) for 14 days. Fonts come from Google Fonts and rsms.me, which receive your IP address when your browser fetches them. We run no analytics, no advertising and no tracking cookies, and Cloudflare is configured not to add any script to our pages.

A seed-sale account

Your email address; your password, kept only as a salted scrypt hash; when you signed up, confirmed your email and agreed to the terms; the deposit addresses issued to you; the deposits to them that we read from public blockchains; your purchases; the RAND address and the refund address you save; and the allocation that results. A session cookie (HttpOnly, 30 days) keeps you signed in. Your IP address is used, in memory only, to limit how often an address can try to sign up or sign in; the sale service does not store it.

Email from us

We send the messages your account needs: the link that confirms your email, password resets, a receipt for each purchase, a notice whenever a payout or refund address on your account changes, and notices about the sale and your allocation or refund. They are sent through Resend.

The faucet waitlist

What you enter on the form: your name, your roles, your answers about privacy and what you would contribute, your email address, a social handle and, if you give one, a RAND address. We keep it on our server to decide grants of testnet RAND and to write to you about them, and we send the confirmation email through Resend.

The captcha

Sign-up, sign-in, password reset and the faucet form are protected by Cloudflare Turnstile, which inspects the browser making the request. Cloudflare's own privacy policy covers what Turnstile processes.

The public RPC

Requests to rpc.randprotocol.org and randprotocol.org/api/rpc are forwarded to a Rand node we operate. They are limited per IP address in memory, and they appear in the access log described above for 14 days.

What stays in your browser

The wallet generator (/address)

A new spend key and address are made in your browser, offline, and are not sent anywhere. Only if you choose to save the address to your sale account is the address, never the key, sent to us.

The balance viewer (/address, /account)

Your viewing key stays in the page. The page reads public chain data from randscan.org and from our RPC in bulk, so the requests do not reveal which notes or tokens are yours; randscan.org has its own policy.

Stored in your browser

Your theme, the address book you keep on /address, and the token ids you pin. They stay in your browser's local storage and are never sent to us.

Blockchains are public

A deposit you send to the sale is a transaction on Tron, Ethereum or BNB Smart Chain, visible to everyone and permanent. So are the deposit address and the address you sent it from. Transactions on Rand publish commitments, nullifiers and sealed envelopes, not amounts, senders or recipients, but whoever holds a viewing key can read that wallet's history. Nobody, including us, can delete data from a blockchain.

Why we use it

To provide what you asked for: your account, your purchases, your allocation and refund, and your faucet request. To keep the services safe and working: rate limits, the captcha, logs to investigate abuse and faults. And to meet legal obligations, including sanctions screening, accounting and responding to lawful requests.

Who else processes it

Cloudflare

DNS, the network in front of the site, and the Turnstile captcha.

DigitalOcean

The server that runs the site, the sale service and the faucet waitlist, in its Singapore region.

Resend

Sending the emails above.

Google Fonts, rsms.me

The site's fonts.

We do not sell personal data or share it for advertising. We disclose it to others only where the law requires it, or to protect the services and their users from fraud or abuse. Our server is in Singapore and some of these providers process data in the United States and elsewhere, so your data may be handled outside the country you live in.

How long we keep it

Access logs: 14 days. Sale accounts and their records: for the sale, the distribution of RAND and the refunds, and afterwards as long as the law requires us to keep financial records. Faucet waitlist entries: until the grants they ask about are decided, or until you ask us to delete yours. Backups of the server's data are kept for 30 days on the server and 90 days in an operator's copy, and expire on that schedule.

Your choices and rights

You can ask us for a copy of the personal data we hold about you, to correct it, to delete it, or to stop using it for a purpose you object to. Write to legal@randprotocol.org from the address on your account. We answer within 30 days. Some records we have to keep, for example the record of a purchase while the distribution and refunds are owed, or where the law requires it; if so, we tell you which and why. If you are in a country with a data protection authority, you may also complain to it.

Security

Every connection is encrypted. Passwords are stored only as salted scrypt hashes. The server accepts web traffic only from Cloudflare, and its data and backups are readable only by its administrators. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Children

The services are not meant for anyone under 18, and we do not knowingly collect their data.

Changes

We will post any change here with a new effective date, and email account holders about a change that affects their data. The terms of service cover the use of the services themselves.