Privacy Policy
Last updated: Draft, pending legal review
This document is a draft awaiting legal review. It describes how the application currently behaves. If anything here conflicts with the Terms and Conditions, please contact us at hello@jamonbread.io before relying on it.
Who we are
1.1The controller of your personal data is GRANDMONTS DIGITAL ASSETS s.r.o., with its registered seat at Horova 1622/30, Žabovřesky, 616 00 Brno, Czech Republic, identification number 29762324, operating under the trading name JamOnBread. You can reach us at hello@jamonbread.io.
1.2JamOnBread is a marketplace for digital items on the Cardano blockchain. We do not hold custody of your assets and we do not execute transfers; those happen on the blockchain between you and your counterparty.
What we collect
2.1Your wallet address and stake address. These are recorded when you connect a wallet, and they are how your account is identified. They are pseudonymous rather than anonymous: activity on a public blockchain can often be linked to a person, so we treat them as personal data.
2.2Profile information you choose to supply. A display name, biography, avatar and banner image, and links to social accounts such as X, Discord, Telegram or a website. All of these are optional, all are public, and you can change or remove them at any time.
2.3Your IP address. Processed transiently to apply rate limits and protect the service from abuse. It is not used to build a profile of you.
2.4We do not collect an email address. The application has no field for one and stores none, so we cannot email you and do not send marketing.
2.5We do not use analytics or advertising trackers. There is no Google Analytics, no advertising pixel, and no third-party profiling on this site.
Cookies
3.1A session cookie, set when you sign in with your wallet. It keeps you signed in and nothing else. This is strictly necessary for a service you have asked for, so it is set without consent.
3.2A referral cookie (jam_ref), set only if you arrive through an affiliate link. It stores that affiliate's code so any commission can be attributed correctly. It is not strictly necessary, so we ask before setting it, and declining changes nothing about how the site works for you.
3.3We set no other cookies. Wallet extensions and other third-party software you use with the site are governed by their own policies, not this one.
Why we may process this, and on what basis
4.1To provide the service you have requested: keeping you signed in, showing your profile, and building transactions you choose to sign. The basis is performance of a contract.
4.2To keep the service available and secure, including rate limiting. The basis is our legitimate interest in preventing abuse.
4.3To attribute affiliate commission, where you arrived via a referral link. The basis is your consent, which you may withdraw at any time by clearing the cookie.
4.4To comply with legal obligations where one applies to us.
Who else sees it
5.1The blockchain. Anything you sign is published to the Cardano network, which is public and permanent. We cannot alter or delete it, and neither can you. This is the most important thing to understand about privacy on this site.
5.2Infrastructure providers we use to display the site: an image delivery service for NFT media, public IPFS gateways, and blockchain data providers. They receive only what is needed to serve a request.
5.3Your wallet provider, which is software you chose and which operates under its own privacy policy. We never receive your private keys or seed phrase.
5.4We do not sell personal data, and we do not share it for advertising.
How long we keep it
6.1Profile information is kept while your account exists. Removing it from your profile removes it from the site.
6.2IP addresses used for rate limiting are short-lived and are not retained as a log of your browsing.
6.3Blockchain records are permanent and outside our control, as described above.
Your rights
7.1Under the GDPR you may request access to your personal data, correction of it, erasure of it, restriction of processing, portability, and you may object to processing based on legitimate interests. Write to hello@jamonbread.io and we will respond.
7.2These rights apply to data we hold. They cannot apply to the public blockchain, which no one is able to edit or erase.
7.3If you believe we have handled your data improperly you may complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
Changes
8.1If this policy changes we will update the date shown at the top of this page.