Effective 25 September 2026

Privacy Policy

1. Who is responsible

rhoods.xyz (“we”, “us”) runs rhoods.xyz and the app at rhoods.xyz/hood. This policy explains what data is involved when you use them. For how we handle it legally, see also our Terms.

2. Visiting the website

• Hosting logs. Our hosting provider records standard request data (IP address, browser user agent, the page requested, time) to deliver the site and protect it from abuse.
• Fonts. The site loads its fonts from Google Fonts, so your browser connects to Google, which sees your IP address.
• No tracking. We do not use analytics, advertising or tracking cookies, and we do not follow you across other sites.

3. Using the app

Signing in (Privy)

You sign in with an email address or a wallet through Privy. Privy receives your email address or wallet address and assigns you a user ID. If you sign in with email, Privy creates a wallet for you. Privy's own privacy policy covers how it handles this data. Privy stores its session in your browser.

Session tokens

When you unlock, our server checks your Privy session and asks the Senddy gateway for a short-lived access token. To do that it sends your Privy user ID to the gateway. We do not keep a database of users.

Private transactions (Senddy)

Shielding, private sends and withdrawals are processed by Senddy's services (a gateway, an attestor and a relayer). They receive what is needed to carry out your request: zero-knowledge proofs built on your device, signed deposit authorisations, and the public details of the transaction. Proofs reveal nothing about your private balance or who you send to. Like any web service, they also receive your IP address and browser details with each request.

Reading the blockchain

Your browser reads Robinhood Chain through an RPC provider and reads pool history from an indexer (Goldsky). Both see your IP address and the queries your browser makes, such as which deposit addresses it checks.

Connecting a wallet

If you connect a wallet through WalletConnect or Coinbase Wallet, those services relay messages between the site and your wallet and handle data under their own policies.

4. What stays on your device

• Private keys. Derived from your signature each time you unlock and kept in memory only. They are never stored or sent anywhere.
• Your private notes (the records that make up your private balance) are cached in your browser's storage, encrypted with a key derived from your signature.
• Small settings in your browser's local storage: that your wallet passed the signature check on this device, and which of your deposit addresses is current.

Clearing your browser data removes all of this. Your balance is not lost: the app rebuilds it from the chain the next time you unlock.

5. What is public on the blockchain

Blockchains are public and permanent. Anyone can see, forever:

• trades of $HOODS on the market, with addresses and amounts;
• deposits into the private pool: the deposit address, the token, the amount and the time;
• withdrawals out of it: the receiving address, the amount and the time.

What happens inside the private pool — your balance, and private sends between accounts — is not visible on chain. Nobody, including us, can delete or change on-chain data.

6. Sharing

We do not sell or rent personal data. Data reaches the service providers named above because the site cannot work without them. We may disclose data we hold if the law requires it; because your keys never leave your device, we cannot reveal your private balance or transactions, as we do not have them.

7. How long data is kept

Hosting logs and the request logs of the services named above are kept for a limited time for security and debugging, then deleted. Privy keeps account data for as long as your account exists, under its own policy.

8. Your choices and rights

• You can use the website without signing in.
• You can clear your browser data at any time.
• Depending on where you live, you may have rights to access, correct or delete personal data we hold. Contact us at info@rhoods.xyz. Requests about your Privy account can also go to Privy.
• On-chain data cannot be deleted by anyone.

9. Security

Keys are created and used only in your browser, the site sends a strict content security policy, and it cannot be embedded in other sites. No system is perfectly secure; protect your wallet, email and devices.

10. Children

HOODS is not for anyone under 18, and we do not knowingly collect data from children.

11. Changes

We may update this policy and will change the effective date above when we do. Significant changes will be noted on the site.

12. Contact

Privacy questions and requests: info@rhoods.xyz.