Privacy Policy
This explains what personal data Rally collects, why, and what you can do about it.
The short version
- We collect what Rally needs to work: your account details, what you post, and the public wallet addresses you link.
- We don't sell your data and we don't show ads or use ad trackers.
- We use one cookie, to keep you logged in.
- You can ask us to delete your account at any time.
What we collect
- Account: your email, username, and a securely hashed version of your password (we never see or store the password itself).
- Profile: anything you add, like a profile picture, bio and links, and who can message you.
- Wallets: the public addresses you verify, and when you verified them. We use them to check whether you hold a coin. Wallet addresses and their history are public on the blockchain anyway.
- What you post: community messages, images, reactions, bounty submissions, direct messages, reports, and the coin pages you edit.
- Payments: when you rally a coin, the paying wallet address and the transaction. You pay in crypto, so we never receive card or bank details.
- Settings and activity: your notifications, price alerts, which communities you've joined and your notification choices.
- Push notifications: if you turn them on, the push address your browser gives us for that device.
- Technical: your IP address and basic request details, used for security and to stop spam and abuse (rate limits). We don't use them to track you around the web.
How we use it
- To run Rally: your account, communities, messages, pages, bounties, alerts and notifications.
- To send emails you need, like confirming your email, password resets, bounty results and alerts you asked for.
- To keep Rally safe: stopping scams, spam and abuse, and enforcing our Terms.
- To fix bugs and understand how Rally is used, in aggregate.
What other people can see
- Your username, profile picture, bio and links, and (unless you turn it off) the communities you're in and your holder badges.
- Your messages in a community, to everyone who can see that channel.
- Bounty submissions are seen only by you and the coin's team.
- Direct messages are seen only by the people in the conversation. If a message is reported, Rally can review it.
- We never show your email address or your linked wallet addresses on your profile.
How long we keep it
- Your account data, for as long as your account exists.
- Notifications, about 90 days. Price alerts that went off, about 30 days.
- When you delete a message, its text is removed.
- When you ask us to delete your account, we delete or anonymize your personal data within 30 days, except what we must keep to prevent abuse or meet legal duties. Anything already on the blockchain can't be deleted by anyone.
Your choices and rights
You can edit your profile, notification and message settings at any time. You can also ask us for a copy of your data, ask us to correct it, or ask us to delete your account, by emailing hello@rallyterminal.com from your account's email address. Depending on where you live, you may have other rights under local privacy law, and you can complain to your local data protection authority.
Security
We protect your data with encryption in transit, hashed passwords, signed sessions and strict access rules. No system is perfectly secure, so use a strong, unique password. Rally will never ask for your seed phrase or private key.
Age
Rally is only for people 18 and over. We don't knowingly collect data from anyone younger. If you think a minor has an account, contact us and we'll remove it.
Changes
If we change this policy we'll update the date at the top, and tell you on the site or by email if the change is important.
Questions? Email hello@rallyterminal.com.