Data & Privacy

How this app handles your information

TL;DR

We collect the minimum needed to process your application. Most data is deleted when your application is completed. No analytics, no tracking, no third-party ads.

What we collect

Wallet addressRequired for all options — used to create your $BAT token account on-chain and identify your application.
Social handlesOptional for Options A & C, required for Option B. Used only to contact you about your repayment obligation.
Telegram IDOnly if you connect Telegram for status notifications — we store an anonymous numeric chat ID, never your username. Used to send you updates, and to check whether the same Telegram account has already been used on another wallet (this program's main anti-abuse check). This is fully separate from the "social handles" field above — if you also submit your Telegram handle there as part of your application, that's covered by the row above instead.
Discord IDOnly if you verify a Discord account (optional, for instant approval on Option B) — you sign a free message to prove you own the wallet, then sign in with Discord. We store your anonymous numeric Discord ID and, if you're in the BatBrigade server, the date you joined it (used for a small risk-score credit and the membership requirement). We never store your Discord username, and we only ask Discord about that one server — never your other servers. The ID is also used to check whether the same Discord account has already been used on another wallet and, if a BatBrigade member bonus is paid, to make sure it is only paid once per account (we note which wallet received it). It is kept as long as that anti-abuse check needs it (like the Telegram ID above, it isn't cleared automatically when your application is purged).
MessagesIf a moderator writes to you about your application — or you reply or confirm something — the conversation is stored with the application and is shown to the wallet that applied and to staff (never to other applicants or sponsors). Confirming a message that asks for it is done by signing a free message with your wallet — no transaction — and that signature is only checked, not stored. Anything you wrote is deleted straight away if you withdraw the application; the whole conversation is deleted 30 days after the application's final outcome (or immediately if an approved-but-unsigned Option B application expires). Moderators' separate internal notes are never shown to you.
Application textYour reason/description for Options B and C — read by moderators during review.
On-chain dataWe query your public Solana wallet balance, transaction count, and BAT account status from the blockchain. This data is public by design.
Invite codeOption A only. The code is marked used and linked to your wallet to prevent re-use. If the code was issued by a community sponsor (see “Sharing with sponsors” below), your application is also visible to that sponsor.

Sharing with sponsors

Some Option A invite codes are funded by community sponsors — members who pay the on-chain cost of the codes they hand out. If you apply with a sponsor-issued code, that specific sponsor can see your application in order to approve or decline it: your wallet address, the social handles and any text you submitted, and its status. They cannot ban you, cannot see your risk score or internal moderator notes, and never learn anything about applications made with anyone else's codes. If you'd rather no sponsor sees your application, use the free public queue (Option C) or a code issued directly by the team instead.

What we do not collect

  • IP addresses (not stored, only used for rate limiting in memory)
  • Browser fingerprints, cookies, or device identifiers
  • Analytics or usage tracking
  • Private keys — we never ask for them and never need them
  • Telegram usernames — only an anonymous numeric ID is stored, never shared with anyone

How long we keep it

Options A & C — Free onboarding

Form data (reason, social handles) is deleted immediately after your application is approved and executed. We keep only: Application ID, timestamp, type, final status, and a partial wallet address for internal records.

Option B — Sponsored loan

Social handles are retained during the active loan period so we can reach you. Once your repayment obligation is fully settled, all form data is deleted. We keep only: Application ID, timestamp, type, final status, settled amount, and a partial wallet address.

Option B — Approved but never signed

If your Option B application is approved but you never complete the delegation signature, no BAT is ever sent to your wallet. After 30 days of inactivity in this state, the application automatically expires — form data is removed and the wallet address is shortened at that point — and you're free to apply again at any time.

Declined & withdrawn applications

If you cancel an application yourself (including switching to a different option — the old application is cancelled and its history carries forward), the form data you entered (your note and social handles) is deleted immediately. If an application is declined, its form data is retained for 30 days from that decision to support the cooldown and re-application process, then removed. In both cases the remaining record (status, flags and full wallet address) is retained for 30 days from the decision, after which the wallet address is shortened the same way as executed applications.

Internal moderator notes

Moderators can leave internal notes on an application while reviewing it — never shown to you or to sponsors. These are cleared automatically 30 days after your application reaches a final status (executed, settled, declined, withdrawn, or expired), regardless of application type.

Bug / Feedback reports

A report may include your wallet address (if connected), browser user agent, page URL, app version, and recent client-side error messages — used only to investigate and fix the issue. Once a report is closed, we automatically strip the user agent entirely and shorten the wallet address to a non-identifying XXXXX...XXXXX form, across the report and every reply on it.

Where data is stored

Application data is stored in Supabase (PostgreSQL). Wallet selection is stored locally in your browser's localStorage by the Solana wallet adapter to enable auto-reconnect on revisit — you can clear it at any time via your browser settings or by disconnecting your wallet. If you sign in to the Sponsor Panel, a short-lived session token (24 hours) is also kept in localStorage; clearing it simply signs you out.

Questions

Reach out via Telegram or the BatBrigade Discord.

← Back to app