Privacy Policy

Last updated: November 12, 2025

Shaga Foundation (“we”, “us”, “our”) respects your privacy. This Policy explains how we collect, use, disclose, and protect information when you use our website and services.

1. Scope

This Policy applies to the Shaga Foundation website, its subpages (e.g., Standards, Explorer, SDE, Grants, Governance), and community channels we link to (Twitter/X, Discord). It does not cover third‑party sites we link to.

2. Information We Collect

Basic Usage Data: IP address, device/browser type, pages viewed, timestamps, referrers.
Cookies & Similar Technologies: Session cookies for site functionality; optional analytics cookies (see Section 7).
Community Interactions: If you contact us via X/Twitter or Discord, we may see your public profile/handle and any messages you send.
Dataset & Research Access (SDE): For requests to access datasets, we collect application details (name, affiliation, intended use) and audit logs.
Governance & RFCs: If you submit proposals or RFCs, we collect the submission content and public username/identifier.
Security & Integrity: Minimal logs to detect abuse, fraud, watermark challenges, or policy violations.

3. How We Use Information

Operate the Site: Provide pages, components, and features (e.g., Explorer metrics).
Improve Reliability & Safety: Diagnose issues, protect against spam/abuse, enforce Acceptable Use.
Analytics & Reporting: Understand aggregate engagement and performance; publish transparency metrics (non‑personal).
Compliance: Fulfill legal obligations and respond to lawful requests.
Communications: Respond to your inquiries via Twitter/X or Discord.

4. Legal Bases (EEA/UK)

We process personal data under:

Key Points:

Legitimate Interests: Site operation, security, non‑intrusive analytics.
Consent: Where required for non‑essential cookies or specific opt‑ins.
Legal Obligation: Compliance and lawful requests.

5. Data Sharing

We do not sell personal data.

We may share:

Service Providers: Hosting, security, analytics (bound by contracts).
Legal/Compliance: If required by law or to protect rights, safety, and integrity.
Aggregated/De‑identified Data: Transparency reports and research artifacts that do not identify individuals.

6. International Transfers

Data may be processed outside your country. We use appropriate safeguards (e.g., Standard Contractual Clauses) where required.

7. Cookies & Analytics

Essential Cookies: Required for core functionality.
Analytics (Optional): To measure engagement (e.g., page views, click‑through). Enabled only with consent where applicable.
You can manage cookies via your browser settings and consent controls.

8. Data Retention

Web Logs: Retained for a limited period necessary for security and operations.
Governance/RFC Submissions: Retained as part of public archives unless removal is required by policy/law.
SDE Access Records: Retained per audit and compliance requirements.
We minimize retention and delete/aggregate when no longer needed.

9. Your Rights (EEA/UK and similar regimes)

Subject to law, you may:

Access, correct, or delete your personal data.
Object to or restrict certain processing.
Withdraw consent where processing relies on consent.
Lodge a complaint with your data protection authority.
To exercise rights, contact us via our official channels (Section 13).

10. Children’s Privacy

Our site is intended for adults and professional audiences. We do not knowingly collect data from children.

11. Security

We use reasonable administrative, technical, and organizational measures to protect data. No system is fully secure; please use caution and avoid sharing sensitive information via public channels.

12. Third‑Party Links

Links to external sites (e.g., X/Twitter, Discord) are subject to their policies. Review those services’ privacy practices before use.

13. Contact

We handle inquiries exclusively via:

Shaga Foundation ↗

Please do not send personal or sensitive information via public posts or open channels.

14. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date and, where appropriate, additional notice on the site.

15. Acceptable Use & Governance References

Use of the site is subject to our Terms & Conditions and Acceptable Use guidance. Governance submissions, RFCs, and transparency artifacts must comply with rights, consent, and data‑handling standards.