Data Processing
Last updated August 24, 2026
Personal Data Processing Notice
GOXY Word Vault Protocol — arg.goxy.ai
Effective Date: May 26, 2026
This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") to inform you about how your personal data is processed when you access or interact with the GOXY Word Vault Protocol platform.
1. Data Controller
GOXY Word Vault Protocol Operated at: arg.goxy.ai
For data protection inquiries, contact: 01101101.01100101+support@goxy.ai
Note: The GOXY Word Vault Protocol operates as a decentralized skill-based word guessing game on the BNB Smart Chain. Certain on-chain data processing occurs through immutable smart contracts outside the direct control of the platform operator.
2. Categories of Personal Data Processed
2.1 Blockchain Wallet Addresses (Pseudonymous Data)
Your public wallet address, submitted when connecting your wallet (e.g., MetaMask) to interact with the platform.
2.2 On-Chain Transaction Data
Transaction hashes, guess submissions, timestamps, and associated blockchain records generated through your interaction with GOXY Word Vault smart contracts on BNB Smart Chain Mainnet.
2.3 Server Access Logs
IP addresses, browser user agent strings, access timestamps, and request metadata automatically collected when you access arg.goxy.ai.
2.4 Local Storage Data
A consent acknowledgment flag stored in your browser's localStorage to record your acceptance of this notice.
3. Purposes and Legal Bases for Processing
| Data Category | Purpose(s) | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Wallet Addresses | To enable your participation in the skill-based word guessing game; to verify guess submissions and distribute prizes via smart contract | Art. 6(1)(b) — Performance of contract (participation in the game constitutes acceptance of platform terms) |
| On-Chain Transaction Data | To execute and record game interactions; to ensure transparency and verifiability of game outcomes | Art. 6(1)(b) — Performance of contract; Art. 6(1)(f) — Legitimate interest in maintaining auditable, tamper-proof game records |
| Server Access Logs | To maintain platform security; to detect and prevent fraud, abuse, or unauthorized access; to ensure technical functionality | Art. 6(1)(f) — Legitimate interest in platform security and integrity |
| Local Storage Consent Flag | To record your acknowledgment of this notice and applicable terms | Art. 6(1)(c) — Compliance with legal obligation (demonstrating GDPR compliance) |
4. Recipients and Third-Party Disclosures
4.1 Blockchain Network Participants
Your wallet address and on-chain transaction data are publicly visible on the BNB Smart Chain, a decentralized public blockchain. This data is accessible to all network participants, block explorers (e.g., BscScan), and any third party querying the blockchain.
4.2 Smart Contract Infrastructure
Game logic is executed by immutable smart contracts deployed on BNB Smart Chain Mainnet. Price oracle data is obtained from PancakeSwap V3 decentralized exchange contracts.
4.3 Infrastructure Providers
Server access logs may be processed by hosting and infrastructure service providers acting as data processors under appropriate contractual safeguards.
4.4 Legal and Regulatory Authorities
Data may be disclosed where required by applicable law, court order, or regulatory request.
We do not sell your personal data to third parties.
5. International Transfers
5.1 Blockchain Data
By design, blockchain data (wallet addresses, transaction records) is replicated across a globally distributed network of nodes. This constitutes an international transfer of pseudonymous data to jurisdictions that may not provide an equivalent level of data protection to that of the European Economic Area.
Safeguard: Blockchain data is pseudonymous and does not directly identify you. The decentralized and immutable nature of blockchain technology means that standard GDPR transfer mechanisms (e.g., Standard Contractual Clauses) cannot be applied to on-chain data. Your participation in the platform constitutes acknowledgment of this technical reality.
5.2 Server Infrastructure
Server access logs may be processed by infrastructure providers located outside the EEA. Where applicable, transfers are protected by Standard Contractual Clauses (SCCs) or adequacy decisions.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Wallet Addresses (off-chain records) | Retained for the duration of active vaults plus 6 years for legal and audit purposes |
| On-Chain Transaction Data | Permanent and immutable — blockchain records cannot be modified or erased due to the inherent technical architecture of distributed ledger technology |
| Server Access Logs | 90 days, unless extended retention is required for security investigations or legal compliance |
| Local Storage Consent Flag | Until you clear your browser storage or withdraw consent |
7. Immutability of Blockchain Data — Important Notice
The BNB Smart Chain is a public, immutable, decentralized blockchain. Once your wallet address and transaction data are recorded on-chain, this data cannot be erased, rectified, or restricted by the platform operator or any single party.
This is a fundamental technical characteristic of blockchain technology, not a policy choice. Your right to erasure under GDPR Article 17 cannot be fulfilled with respect to on-chain data. By participating in the GOXY Word Vault Protocol, you acknowledge and accept this technical limitation.
Off-chain data (server logs, internal records) remains subject to your GDPR rights as detailed below.
8. Your Rights Under GDPR
Subject to applicable legal limitations, you have the following rights regarding your personal data:
| Right | Description | Applicability |
|---|---|---|
| Access (Art. 15) | Request confirmation of processing and a copy of your data | Applicable to off-chain data; on-chain data is publicly accessible via block explorers |
| Rectification (Art. 16) | Request correction of inaccurate data | Applicable to off-chain data only; on-chain data is immutable |
| Erasure (Art. 17) | Request deletion of your data | Applicable to off-chain data only; not technically possible for on-chain data |
| Restriction (Art. 18) | Request limitation of processing | Applicable to off-chain data only |
| Portability (Art. 20) | Receive your data in a structured, machine-readable format | Applicable to off-chain data; on-chain data is already publicly portable |
| Objection (Art. 21) | Object to processing based on legitimate interests | Applicable to server log processing |
| Withdraw Consent | Where processing is based on consent | Clear localStorage to remove consent flag |
To exercise your rights, contact: 01101101.01100101+support@goxy.ai
We will respond to valid requests within one month, extendable by two additional months for complex requests.
9. Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
A list of EU Data Protection Authorities is available at:
https://edpb.europa.eu/about-edpb/about-edpb/members_en
10. Requirement to Provide Data
10.1 Wallet Address
Provision of your wallet address is a contractual requirement for participation in the GOXY Word Vault Protocol. Without connecting a wallet, you cannot submit guesses or receive prizes. This is inherent to the blockchain-based architecture of the platform.
10.2 Server Access Logs
Collection of server access logs occurs automatically when you access arg.goxy.ai. This processing is necessary for security and legitimate operational purposes and is not optional.
10.3 Consent Flag
Acknowledging this notice via localStorage is required to use the platform in compliance with applicable data protection law.
11. Automated Decision-Making
The GOXY Word Vault Protocol does not engage in automated decision-making or profiling that produces legal effects or similarly significant effects concerning you.
Game outcomes are determined by the correctness of your guess submission compared to a fixed, deterministic answer hash stored in the smart contract. This is a skill-based verification mechanism, not automated profiling.
12. Nature of the Platform
The GOXY Word Vault Protocol is a skill-based word guessing game. Outcomes depend entirely on your knowledge, vocabulary, reasoning, and ability to interpret riddles or clues. There is no random number generation, lottery mechanism, or chance-based outcome determination.
Participation involves interaction with decentralized smart contracts on a public blockchain. You are responsible for understanding the implications of blockchain-based activity, including the public and immutable nature of on-chain data.
13. Updates to This Notice
We may update this notice to reflect changes in our practices or legal requirements. Material changes will be communicated via the platform interface. The "Effective Date" above indicates the most recent revision.
14. Contact
For questions regarding this notice or your personal data:
Email: 01101101.01100101+support@goxy.ai Platform: arg.goxy.ai
This notice is provided for informational purposes to fulfill GDPR Article 13 obligations. It does not constitute legal advice and does not create any contractual rights beyond those provided by applicable law.