Version 1.0 · effective 2026-11-02 · sha256 b2536cd32c46b8586a1d64b6c1c58707a48fc710024bc17a50d8747c314852e6
Soukbase Privacy Policy
This policy says what data Soukbase, operator of soukbase.com ("Soukbase", "we") handles, why, who else sees it, and how long we keep it. Soukbase has no registered company, and one operator runs it. Contact for anything in this policy, including requests about your data: founder@soukbase.com. Not legal advice.
1. What is public and permanent
Payments run through the APIbase Integrator and produce public receipts that show the payer wallet address, the payout wallet address, the amount, the chain and the transaction hash. Blockchain records are public, and nobody, including us, can delete them. Wallet addresses and transaction hashes that we copy into our events journal are public data in the same way. Do not use a wallet that you do not want linked to your purchases or sales.
2. Data we collect
| Data | Why | Kept |
|---|---|---|
| Wallet addresses (seller payout wallet, reporter or payer wallet) | Identify sellers, check sanctions lists, verify reports against receipts | While the account exists and in the events journal (section 4) |
| Signatures and the signed message (EIP-4361): wallet, handle, document hashes, version, time; and, for the Integrator, the shop slug you connect, with the time and the result of the check | Prove that a seller accepted the documents and controls the wallet | While the seller account exists, and for the period the agreement may be disputed |
| Email address | Review replies, notices, reports and disputes | While the account exists |
| Display name (seller form) | Identify the seller on soukbase.com | While the account exists |
| Site or repository URL (seller form, optional) | Check that the seller owns the work | While the account exists |
| Country (seller form) | Sanctions and excluded-country checks | While the account exists |
| IP address of requests | Abuse prevention and rate limits | 30 days |
| Listing text and metadata (title, description, price, links, hashes) | Show the listing, review it, serve the feed | While live; rejected text for 30 days, then only a hash skeleton |
| Moderation records (checks, decisions, reasons, strikes) | Run review, appeals and repeat-violation rules | Reports and IP notices 3 years; other records in the events journal |
| Reports and IP notices, with the contact details of the sender | Handle disputes and takedowns | 3 years |
| Events journal (order, report, pause, restore, strike, decision, reason code, actor, time) | Append-only record of what happened | Indefinitely; it holds hashes and public wallet addresses only |
We do not collect private keys or seed phrases. We never ask for them. We do not store the goods or keys that sellers deliver, and there are no file uploads to Soukbase. The seller form remembers which browser wallet you chose last time in your browser's local storage: one wallet name, no address, never sent to us; clear your browser's site data to forget it.
3. Who processes data for us
- APIbase Integrator (https://apibase.pro/): runs checkout, delivery and receipts. It has its own privacy terms, and a seller's agreement with it is separate from ours.
- Telegram: the operator receives approval notifications there. They carry listing titles only.
- A model provider for moderation: we send listing text to check it against the rules. We treat the text as data to classify, not as instructions. We do not send account data such as email and wallet address for this.
- Hosting: our web server logs requests, including IP address, as described above.
We do not sell personal data. We do not state a storage region, because we have not made a promise about one.
4. Why we may process it
To run the catalogue and your account (contract); to prevent fraud, abuse and sanctions breaches and to keep records (legitimate interest and legal duty); to send you notices about your account (contract).
5. Your rights
Depending on where you live, you may ask to see, correct, delete or export your data, to object to processing, or to withdraw consent. Email founder@soukbase.com. A person answers, usually within 5 business days; one operator runs Soukbase. We cannot delete blockchain data or public Integrator receipts. We may keep what the law requires or what is needed to handle a dispute. You can complain to your local data protection authority.
6. Security and incidents
The catalogue does not store secrets or keys. Soukbase has no custody of funds. If a breach affects you, we will tell you by email as the law requires.
7. Children
Soukbase is not for people under 18, and we do not knowingly collect their data. We handle child sexual abuse material under /legal/aup.md.
8. Changes
Each version carries a number, a date and a sha256 hash in its first line. We give 30 days' notice by email for a change that reduces your protection, except where a change is needed at once to follow the law.