Skip to content

Legal

Privacy notice.

What personal data this website collects, why, and what you can do about it. It covers the public website only; platform participants receive a separate agreement.

Last updated 7 October 2026

Who is responsible

ONE-CHAIN VBA, Oranjestad, Aruba, is the data controller for the personal data described here. For any question about your data, or to exercise your rights, use the contact form on the About page.

Contact form

When you use the contact form we collect your name, work email, optional organisation, the topic you choose and your message. We use this only to read and respond to your enquiry.

The message is delivered to our inbox by Resend, our email delivery provider, which processes it on our behalf solely to send it. We keep enquiry emails as long as needed to handle the request and for our own records, and delete them when no longer needed. We do not sell your data or share it for marketing.

Access application

When you request access to the platform we collect the details you enter in the application: your role, name, work email, organisation, title, country, optional phone number, the eligibility information for your role, your message, and your consent choices. If you arrived from a link on the pricing page, we also keep which participation type that link referred to. The short form on the homepage collects your email, role and consent only.

If you start from the email field at the top of the homepage, your address is held in your own browser for the moment it takes to open the application form, so you do not have to type it twice, and is cleared once the form has read it. It is not sent to us unless you go on to submit the application.

Applications are stored in a database operated for us by Cloudflare (D1) so the team can review them, and a notification is sent to us by Resend, our email delivery provider. Alongside your answers we record your browser type (the user agent your browser sends) and the country your request came from, which is derived from your IP address; the IP address itself is not saved with the application. Both are kept with the application to help us detect abuse. We may also send you an email confirming that we received it.

If you opted in, we may also send you occasional updates; you can withdraw that at any time by replying to any message. We keep applications while they are under review and for the duration of any resulting relationship, then delete them. We do not sell this data.

Submitting an application is not an offer of access, and nothing on this website is an offer or solicitation of any security or financial instrument.

Analytics and cookies

We use Google Analytics 4 to understand how visitors use this site — pages viewed, approximate location, device and browser type, and how you arrived. Google processes this on our behalf and may set cookies such as _ga and _ga_*.

Analytics is off by default. Google’s analytics script is not loaded, and no analytics cookies are set, until you choose “Accept all” in the cookie banner. You can change your mind at any time via “Cookie settings” in the footer; if you withdraw consent, analytics stops sending data. Cookies already set stay in your browser until they expire or you clear them.

Essential cookies needed for the site to function do not require consent.

Hosting and security

The site is served by Cloudflare, which processes technical data (IP address, request headers) to deliver pages securely and to protect against abuse. Server logs are retained briefly for security purposes.

The website and the database behind its forms are operated on our behalf by our web agency, RasTech. Applications are stored in a Cloudflare database located in the United States.

Cloudflare also provides privacy-first traffic statistics for this site (Cloudflare Web Analytics). It sets no cookies and does not identify or follow individual visitors; it counts page loads and measures how fast pages are, and it runs independently of the analytics choice above.

Your rights

You can ask us to access, correct, delete or export the personal data we hold about you, to restrict or object to its processing, and to withdraw consent where processing relies on it. Residents of the EU/EEA may also lodge a complaint with their local supervisory authority. Contact us using the details above and we will respond within the statutory period.

Changes to this notice

We will update this page when our data practices change and revise the date at the top. Material changes will be flagged on the site.