Signal Protocol is a decentralised event check-in and builder reputation layer. We operate a web application that connects to public blockchains (Solana, Avalanche) to record verified event attendance, issue NFT credentials, and compute reputation scores for builders in the Web3 ecosystem.
Signal is not a financial service, a data broker, or an advertising platform. Our sole purpose is to help communities verify real-world participation and build portable, on-chain identity.
Signal is designed to collect as little personal information as possible. The table below lists every category of data we handle and its source.
| Data | Source | Required? |
|---|---|---|
| Wallet public address | Provided by your wallet when you connect | Yes — core identifier |
| Event check-in records | Written to the blockchain when you check in | Yes — creates your reputation |
| NFT metadata (badge level, timestamp, event code) | Minted on-chain at check-in | Yes — part of your credential |
| Hackathon achievement claims (name, project URL, rank, notes) | Submitted voluntarily via the claim form | No — optional |
| Contact form submissions (name, email, message) | Submitted voluntarily via the footer form | No — optional |
| World ID verification status (boolean only) | Verified via World ID SDK — no biometric data stored by Signal | No — optional |
| IP address / browser metadata | Standard web server logs (Next.js / Vercel) | Automatic — see §6 |
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Verifying event attendance and minting NFTs | Wallet address, event code, organizer signature | Contract performance |
| Computing and displaying Signal Score and tier | On-chain attendance records, achievement points | Contract performance |
| Displaying the public leaderboard | Wallet address (shortened), score, tier | Legitimate interest |
| Reviewing and approving hackathon achievement claims | Claim form data (hackathon name, URL, rank) | Consent (voluntary submission) |
| Responding to support or general inquiries | Contact form: name, email, message | Consent (voluntary submission) |
| Preventing abuse and sybil attacks | Wallet address, on-chain transaction data | Legitimate interest |
We do not sell, rent, or share your data with advertisers. We do not use your data to train machine-learning models or for any purpose beyond what is listed above.
When you check in to an event, an attendance record is written to a public blockchain (Solana or Avalanche C-Chain). This record is permanent and irreversible — it cannot be deleted by Signal or by you.
| Field | Value | Visibility |
|---|---|---|
| Attendee wallet address | Your public key | Public |
| Event code | 6-character event identifier | Public |
| Check-in timestamp | Unix timestamp (seconds) | Public |
| Capacity slot | Integer slot number at time of check-in | Public |
| NFT mint address | The Metaplex NFT minted to your wallet | Public |
| Reputation score & tier | Computed score and tier enum | Public |
Hackathon achievement claims are stored in-memory on our server while pending review. Once approved, they are recorded on-chain as an Achievement NFT. Rejected claims are discarded. Contact form messages are forwarded by email and not retained in any database.
Signal integrates with several third-party services to operate. Each service has its own privacy policy which governs how they handle data.
| Service | Purpose | Data Shared |
|---|---|---|
| Solana / Avalanche RPC nodes | Reading and writing blockchain data | Wallet address, transaction data |
| Phantom / MetaMask / Wallet providers | Wallet connection and transaction signing | Wallet address — governed by your wallet's privacy policy |
| World ID (Worldcoin) | Optional sybil-resistance verification | Zero-knowledge proof only — no biometrics shared with Signal |
| Vercel | Hosting and serverless compute | IP address, request logs — see Vercel Privacy Policy |
| Metaplex | NFT minting standard on Solana | NFT metadata (public, on-chain) |
Signal does not control how third-party services process data. We encourage you to review their respective privacy policies before use.
Signal uses minimal cookies strictly necessary for the application to function (e.g. wallet session state). We do not use advertising cookies, cross-site tracking cookies, or third-party analytics platforms such as Google Analytics.
Our hosting provider (Vercel) automatically logs standard HTTP request data including IP address, user agent, and request path. These logs are retained for up to 30 days for security and debugging purposes and are not used for profiling or advertising.
Signal may store lightweight data in your browser's local storage (e.g. wallet connection preferences) to improve your experience. This data never leaves your browser and is not transmitted to our servers.
| Data Type | Retention Period |
|---|---|
| On-chain attendance records, NFTs, scores | Permanent — stored on blockchain, cannot be deleted |
| Achievement claims (pending) | Until reviewed (approved or rejected), then discarded |
| Achievement claims (approved) | On-chain permanently as an Achievement NFT |
| Contact form messages | Retained in email inbox — deleted on request |
| Server / Vercel request logs | Up to 30 days |
| Browser local storage | Until you clear your browser data |
Depending on your jurisdiction (including the EU/EEA under GDPR and Thailand under PDPA), you may have the following rights regarding your personal data:
| Right | How to exercise it |
|---|---|
| Access | Request a summary of off-chain data we hold about you by contacting us via the footer form. |
| Correction | If any off-chain data (e.g. a contact form message) contains inaccuracies, contact us to correct it. |
| Erasure | We can delete off-chain data we hold (e.g. pending claims, emails) on request. On-chain data cannot be erased. |
| Objection | You may object to processing based on legitimate interest by contacting us. We will review and respond within 30 days. |
| Data portability | Your on-chain data is already publicly accessible via any Solana or Avalanche block explorer using your wallet address. |
| Withdraw consent | You may withdraw consent at any time by ceasing to use Signal and disconnecting your wallet. This does not affect on-chain records already created. |
Signal is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete any off-chain information as quickly as possible.
We may update this Privacy Policy as the platform evolves. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will post a notice on the Signal homepage or notify you via X @Signal_thailand.
Continued use of Signal after a policy update constitutes your acceptance of the revised terms. We recommend reviewing this page periodically.
If you have questions about this Privacy Policy, wish to exercise your rights, or want to report a privacy concern, please reach out through any of the channels below:
| Channel | Details |
|---|---|
| Contact form | Use the form in the footer of any Signal page — we aim to respond within 5 business days. |
| X (Twitter) | @Signal_thailand |