RecheckablePrivacy
This site is about crypto projects, not about people. We collect as little personal data as we can. This page says what, why, for how long, and what you can do about it.
Who is responsible (controller)
The controller for personal data is Leviathan Technologies AB, org. no. 559578-8034, Täljövägen 5, 18592 Åkersberga, Sweden. Recheckable is published by Leviathan Technologies AB, org. no. 559578-8034, Täljövägen 5, 18592 Åkersberga, Sweden, info@recheckable.com. The publisher is editorially responsible and also develops other crypto products (see Methodology, “Interests”). Questions or requests about your data: info@recheckable.com.
What we store, why, and for how long
The legal basis for everything below is legitimate interest (GDPR art. 6(1)(f)): keeping the claim and correction functions free of abuse, and handling requests from the people who send them. You can object at any time (see “Your rights”).
| Data | Why | How long |
|---|---|---|
| A salted hash of your IP address when you start a claim, send a correction or submit a project. The address itself is not stored. The salt is a secret key on the server, so the hash cannot be turned back into an address by anyone else. | Rate limiting, to stop abuse. | Every IP hash is deleted or cleared after 30 days (claim attempts, claim challenges, corrections, submissions, listing requests). Expired claim challenges are deleted 30 days after they expire. Deletion runs automatically every night. |
| Claim data: the method (wallet signature, DNS record or file), the date, and the signer address or domain you used to prove control. | To check that the claimant controls the project, and to re-check that it still does. | While the claim is in force. We publish only the method and the date, never the signer address. When a claim is withdrawn or revoked, the signer address or domain is erased automatically 12 months later. |
| Messages you send through the corrections form or by e-mail, and the contact detail you choose to give. | To answer your request and keep a record of how we handled it. | Until the request is closed and for 12 months after; then the message, contact detail and role are erased automatically. The public change log keeps only what changed, not who asked. |
| Project submissions: project name, domain, addresses and your role. | To review the project. | While the review exists. |
| Listing requests: the domain, address or name you give, an optional project name and note. No e-mail address is collected for listing requests, and we do not reply to them. Also a salted hash of your IP address (never the address itself). | To decide whether to add the project. The hash limits abuse. | The IP hash is deleted after 30 days (nightly job). Nothing from a request is published. |
| Server logs at our hosting provider (IP address, time, page). | Security and operation. | [retention at the hosting provider: to be confirmed] |
We use no advertising or tracking cookies and no analytics. The only thing stored in your browser is your light/dark choice.
Reports are about projects
Reports describe projects, their code, contracts, domains and public documents. We do not publish personal names, personal GitHub account names, social profiles or wallet addresses of individuals; organisations are named. A team member is named only with their own consent, and consent can be withdrawn at any time. Project and person data are never sent to AI providers: they only receive extracted check results (category, check id, status, band, score, coverage). See Methodology, “AI-generated text”.
Who else handles data (processors)
- Hosting provider: [name, country, data processing agreement to be signed]
- E-mail provider for info@recheckable.com: [name, country, DPA to be signed]
- AI providers (check results only, no personal data): xAI, Anthropic, OpenAI. [DPAs and transfer mechanism to be confirmed]
We do not sell personal data and do not share it for marketing.
Your rights
You can ask us for access to the data we hold about you, for correction, for deletion, to restrict its use, and you can object to processing based on legitimate interest. Write to info@recheckable.com; we answer within one month. You can also complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to your national data protection authority.