Privacy Policy
Last Updated: July 31, 2026
1. Overview & Web3 Decentralization
CredChain ("we", "our", or "platform") operates as a decentralized interface for interacting with the Stellar Soroban smart contract network. We prioritize user privacy and minimize data collection. By design, Web3 interactions rely on public cryptographic addresses rather than personally identifiable information (PII).
2. On-Chain Public Records
When an institution registers or issues a credential on CredChain, the transaction data (including issuing wallet address, recipient wallet address, credential name, metadata URI, and timestamp) is recorded directly on the Stellar Blockchain. Blockchains are public ledger systems; once recorded, on-chain data is immutable, permanent, and publicly visible to anyone on the network.
3. Off-Chain Data & Local Storage
CredChain does not require account passwords, email addresses, or personal registration to verify credentials. The app utilizes local browser storage (localStorage) to maintain user preferences (such as dark/light mode themes) and client transaction history.
4. Shared User Feedback Collection
Optional feedback submitted through the Analytics portal is processed by our serverless API and stored in an encrypted cloud PostgreSQL database (Supabase). Submitted feedback includes the public wallet address (or "Anonymous User"), rating, category, and comment. No personal identifiers (IP addresses, real names, or emails) are tracked or sold to third parties.
5. Third-Party RPC & Node Providers
To interact with the Stellar ledger, the app connects to public Soroban RPC nodes (e.g. https://soroban-testnet.stellar.org) and Horizon gateways. These nodes operate under SDF policies and process public blockchain transactions.
6. Policy Updates
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated timestamp.