What we collect and why

What we collect

If you join the waitlist

Your email address, whether you joined as a participant or a builder, and the page you joined from. Builders can also give a project name and link. We use these only to contact you about Lytmus. We never share or sell them.

If you sign in with a wallet

Your public wallet address and when you signed in. Signing in means signing a message in your wallet: it costs nothing and sends no transaction. We never see your private key or recovery phrase.

If you link GitHub or X

The account's id, its username, when it was created, and when you linked it. We use these to show that you control the account and to apply launch rules, such as a minimum account age. The access the provider grants us is used once, to read those details, and then discarded, so we keep no access to your account. Unlinking deletes these details.

If you apply to launch

Your answers: the team's names, roles, backgrounds and handles, the product, code, token and terms you describe, and a contact email. Also the files you upload, and the GitHub and X accounts you have linked when you submit. We use these to review the application, to write to you about it and, if it is approved, to write the project's public dossier.

When you visit

Your IP address, which our server holds in memory for a few minutes to limit abuse and does not store. Our server logs record the time of each request and the page or API route it asked for, but not your IP address or anything you type into forms. Logs are rotated, so older entries are overwritten as new ones arrive.

Cookies

We set one cookie, and only once you sign in: a session cookie that keeps you signed in. It holds a random value, not your details. We use no analytics, advertising or tracking cookies, and the site loads no scripts or fonts from other companies.

Who else processes your data

We rely on a small number of providers, each of which processes data only as far as its service requires:

• Cloudflare delivers and secures the site. Every request, including your IP address, passes through its network.
• Our hosting provider operates the server and database on which this data is stored.
• Spacemail handles our email correspondence.
• GitHub and X authenticate you on their own sites when you link an account, under their own privacy policies.
• Anthropic. Applications are assessed with the assistance of Claude, Anthropic's AI model. For that assessment, a copy of the application and its files is processed on our reviewer's workstation and by Anthropic. We share it for that purpose only.

How long we keep it

• Waitlist entries: until you ask us to delete yours, or we no longer need it to contact you about Lytmus.
• Your account (wallet address and linked accounts): while the account exists. Sessions end after 30 days, or when you sign out.
• Applications and their files: only until the review is complete. Once we reach a decision, we delete the application, its files and every copy made for the review. If the project is approved, we keep only what we publish in its dossier.
• Server logs: until they are rotated out.

Your choices

You can unlink GitHub or X yourself on your account page. To get a copy of your data, correct it or have it deleted, write to [email protected]. For the waitlist, write from the address you signed up with. For an account, or an application still under review, tell us the wallet address; we may ask you to sign a message with it to confirm it is yours. What a published dossier says about a launched project stays public.

Changes

If what we collect or how we use it changes, we will update this page and the date at the top.