Privacy Policy
TrancheLock is an experimental, non-custodial software prototype. This policy honestly explains what data is processed when you view the documentation, inspect live vaults, or interact with our Solana Devnet contracts.
No User Accounts or Personal Data Collection
TrancheLock does not require, solicit, or maintain user accounts. We do not collect names, email addresses, physical mailing addresses, phone numbers, passwords, government identifiers, or KYC/AML credentials.
- No User Profiles: The frontend does not store account profiles or user identities in any database.
- No Commercial Forms: There are no marketing newsletters, contact capture forms, or subscription gateways.
- No Sensitive Data: We never handle or request private keys, seed phrases, or financial banking credentials.
No Cookies or Behavioral Tracking
The TrancheLock website does not use cookies, tracking pixels, or cross-session user profiling technologies.
- Zero HTTP Cookies: No first-party or third-party cookies are set in your browser upon visiting the website.
- No Analytics SDKs: We do not integrate tracking suites such as Google Analytics, Meta Pixel, PostHog, or Mixpanel.
- No Browser Fingerprinting: The website does not generate device fingerprints or persistent local identifiers.
Public Blockchain Transparency
By design, transactions on the Solana blockchain (including Solana Devnet) are public, transparent, and permanent.
When an escrow vault is initialized or a tranche is released, transaction parameters are permanently recorded on the public Solana ledger. This includes:
- Public wallet addresses of the sponsor and agent
- The verifier oracle public key (
HyiP6tqP...) - Program Derived Address (PDA) vault keys
- Committed SHA-256 milestone test suite hashes
- Ed25519 verification signatures and transaction signatures
TrancheLock does not and cannot redact, encrypt, or delete public blockchain state. Anyone running a Solana node or inspecting block explorers can view confirmed ledger activity.
Hosting & Third-Party Infrastructure
Interactions with the website rely on standard distributed internet infrastructure:
The static web interface is served via Vercel's global CDN. Vercel processes standard server access logs (such as IP addresses and user agents) strictly for HTTP delivery and DDoS protection under their standard privacy practices.
When loading live vault data, read-only queries are routed to public Solana Devnet RPC endpoints (e.g. api.devnet.solana.com). RPC nodes process standard JSON-RPC queries.
GitHub Repository Interaction & Inquiries
TrancheLock is an experimental research prototype. We do not operate commercial customer service hotlines, marketing mailing lists, or private sales channels.
If you interact with the project via GitHub, any issues, comments, or repository contributions are processed directly by GitHub in accordance with GitHub's platform privacy policies.