Privacy Policy

Orba ("we", "us", "our") is a decentralized application deployed on the Arc blockchain. This privacy policy explains how we handle information when you use our website and services.

1. Information We Do Not Collect

Orba is a non-custodial, decentralized application. We do not collect, store, or process personal information such as your name, email address, or physical address. You interact with our services through a self-custody wallet (e.g., MetaMask, Rabby, or other EVM-compatible wallets).

2. On-Chain Data

All transactions you make on Orba are recorded on the Arc blockchain, which is a public, permissionless ledger. Your wallet address, transaction amounts, token launches, and trades are visible to anyone. This data is not controlled by Orba and cannot be deleted by us.

3. Local Storage & Cookies

We use browser local storage to remember your preferences (e.g., slippage settings, theme). We do not use tracking cookies or third-party analytics that identify you across sites.

4. RPC Requests

When you read blockchain data (balances, quotes, transaction receipts), your browser sends JSON-RPC requests to Arc RPC providers. These providers may log IP addresses and request metadata per their own privacy policies. We route reads through our own proxy first to minimize direct exposure.

5. Third-Party Links

Our site may link to third-party services (Circle faucet, Arc docs, Telegram). We are not responsible for the privacy practices of these external sites.

6. Children's Privacy

Orba is not directed to individuals under 18. Do not use our services if you are under 18.

7. Data Retention

We do not maintain user accounts or profiles. Off-chain data we may process (such as server logs for the RPC read proxy, indexer event records, and referral attributions) is retained only as long as necessary to operate the Service. On-chain data (wallet addresses, transaction history, token metadata) is permanent and cannot be erased by us or anyone else.

8. Third-Party Processors

In the course of operating the Service, your requests may be processed by:

• Arc RPC providers (Circle, dRPC, QuickNode, Blockdaemon) — to read blockchain state and broadcast signed transactions
• IPFS gateways — to retrieve token images and metadata referenced by token launchers
• Your wallet provider (e.g., MetaMask, Rabby) — which signs and submits transactions on your behalf

Each of these third parties has its own privacy practices governing IP addresses, request metadata, and device identifiers. We rotate across multiple RPC providers to reduce concentration of any one party's logs.

9. Security

We use industry-standard measures to protect the off-chain components of the Service, including TLS in transit, server-side rate limiting, and rotation of provider credentials. However, no system is perfectly secure. You are responsible for safeguarding your wallet's seed phrase and private keys — loss or compromise of these cannot be reversed by us.

10. Your Privacy Rights (GDPR & CCPA)

Depending on your jurisdiction (e.g., the EU/EEA under the GDPR, or California under the CCPA/CPRA), you may have rights regarding personal data we hold about you, including the right to access, correct, or delete it, and the right to object to or restrict certain processing.

Because Orba is non-custodial and does not collect identity-level personal data, these rights primarily apply to the limited off-chain data described above (server logs, indexer records, referral attributions tied to a wallet address). To exercise these rights, contact us at legal@orba.fun from the email associated with your inquiry and include the wallet address at issue.

Note: We cannot delete or alter on-chain data. Any "deletion" of on-chain activity is impossible by design — the Arc blockchain is an immutable public ledger.

11. International Data Transfers

The Service and its third-party processors may be located in jurisdictions other than your own. By using the Service, you acknowledge that your wallet address, IP address, and request metadata may be processed in the United States and other countries with differing data protection laws.

12. Do Not Track Signals

Orba does not respond to browser "Do Not Track" signals because we do not engage in cross-site tracking. We do not use advertising networks, retargeting pixels, or third-party analytics that profile you across the web.

13. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be reflected in the "Last updated" date above.

14. Contact

For privacy-related questions or to exercise your data rights, contact us at legal@orba.fun or via @orbafun.