Privacy Policy

The SwissBorg Guardian (the “Platform”) is operated by SwissBorg (“SwissBorg”, “we”, “us”). This policy explains what personal data we collect when you use the Platform, why we collect it, and the rights you have over it.

We only collect what we need to run the Platform:

• Account & identity. Your email address, a securely hashed password, and your chosen username. If you sign in with X (Twitter) or Google instead, we store the account identifier they return and, for X, access tokens kept in encrypted form.
• SwissBorg payout details. If you link a SwissBorg account to withdraw BORG, we store the associated payout email, always encrypted, and never exposed back to the browser.
• Activity & progress. Your XP, contributor rank, BORG balance, daily login streak, avatar backdrop and equipped cosmetics, the quests you start and complete, chests you open, codes you redeem, your referral code and who referred you, your weekly BTC price predictions, and any peer-verification votes and trust score.
• Quest proof. Screenshots or links you upload as proof for community- or peer-verified quests.
• Financial records. An append-only ledger of XP and BORG balance changes, and your BORG withdrawal requests together with their audit trail.
• Technical & anti-fraud signals. A one-way hashed form of your IP address and a device fingerprint, used to detect duplicate or fraudulent accounts, plus an essential session cookie that keeps you signed in.
• Public activity. Some actions (e.g. completing a quest, ranking up, or a rare drop) appear under your username in the public activity feed, on leaderboards, and on your public profile.

• To create and run your account and the gamified contributor experience.
• To verify quest completion (including X/Twitter action checks) and award XP, BORG, and cosmetics.
• To prevent fraud, duplicate accounts, and abuse, and to keep the Platform secure.
• To process BORG withdrawals to your linked SwissBorg account.
• To operate public profiles, leaderboards, and the activity feed.

Where the GDPR applies, we rely on: performance of our contract with you (running your account and processing rewards); our legitimate interests (security and fraud prevention); your consent (where specifically requested); and compliance with legal obligations.

We do not sell your personal data. We share it only with:

• X (Twitter) and Google, when you choose to sign in with them or connect an account for quest verification.
• SwissBorg, to process BORG payouts to your linked account.
• Service providers (e.g. hosting and error monitoring) acting on our instructions, and authorities where required by law.

We keep your data for as long as your account is active. Quest-proof screenshots are automatically purged after a limited retention window once a submission is resolved. When you delete your account we irreversibly anonymise your record (see your rights below); immutable financial and audit entries are retained where we are legally required to.

You can access, correct, export, restrict, or object to the processing of your data, and you can erase your account at any time. Account settings include a self-service deletion that irreversibly anonymises your account (your username and personal identifiers are removed). To exercise any other right, contact us at privacy@swissborg.com.

We use a single essential session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

Passwords are hashed, sensitive tokens and your SwissBorg payout email are encrypted at rest, and IP addresses are stored only in hashed form. No system is perfectly secure, but we take reasonable measures to protect your data.

The Platform is not intended for anyone under 18, and we do not knowingly collect data from children.

We may update this policy and will revise the “last updated” date above. For any privacy question or request, contact us at privacy@swissborg.com.