Privacy Policy
This policy explains what information the websites and applications run by Olympus Association collect, why, and what you can do about it. It does not cover the Olympus protocol itself — a set of smart contracts on public blockchains. By using our websites and applications, you agree that we may collect and use information as described here. If you do not agree, please do not use them.
1. Who we are
Olympus Association, a non-profit association in Zug, Switzerland, is the data controller for the processing described in this policy.
Contact: communications@olympusdao.finance
2. What this covers
olympusdao.finance and its subdomains (the "Sites"), and other tools and applications the Association operates, including applications we run on platforms such as Discord.
It does not cover services we do not operate — wallets, block explorers, the governance forum, social platforms, or any other third party we link to or integrate with. Those are governed by their own terms, and we are not responsible for them. Where an application in the Olympus Discord server is run by someone else for their own purposes, their own policy applies rather than this one.
3. What we collect
We may collect:
- Wallet and transaction information — e.g. a one-way hash of an address you connect, and details of transactions you complete through the interface such as amounts, terms and transaction hashes.
- Usage information — e.g. how you interact with the Sites, technical information about your device, browser and connection, an approximate location derived from your IP address, and recordings of your session in which the text on screen is masked.
- Anything you send us — e.g. if you contact us through the support widget or otherwise, your email address and the content of your messages, including anything you choose to paste into them.
We may also look at activity that is publicly visible on blockchains, and associate it with the above. That information is public, is not created or controlled by us, and is available to anyone.
Our hosting and infrastructure providers may also keep standard technical logs.
We may aggregate or de-identify information so that it no longer identifies you, and use or share it for any purpose permitted by law.
4. Why we collect it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Understanding how the Sites are used so we can improve them, including session recordings | Consent |
| Keeping the Sites working, diagnosing problems, and protecting against misuse | Legitimate interests |
| Responding to your questions and support requests | Legitimate interests |
| Enforcing our terms and protecting our rights, our users and the public | Legitimate interests |
| Meeting legal and regulatory obligations | Legal obligation |
We do not use this information for advertising, and we do not use it to make automated decisions that produce legal or similarly significant effects.
5. Who we share it with
We may share information with:
- Service providers who help us operate the Sites, understand how they are used, and respond to you — including analytics, support, hosting, infrastructure and AI providers.
- Professional advisors, where necessary.
- Regulators, law enforcement or others, where we are legally required to, or where we consider it necessary to enforce our terms or protect our rights, our users or the public.
- A successor or counterparty in a merger, reorganisation, financing, dissolution or similar transaction.
We do not sell your data, and we do not share it with advertisers or data brokers.
6. Applications we use on Discord
This section covers the applications the Association uses in the Olympus Discord server — including those built, hosted or operated for us by others — such as a read-only tool that summarises activity for the core team, and tools that help keep the server safe.
What they do. Depending on the application, they may read messages posted in the public channels they have access to — including the content of those messages, information about who posted them and where, and basic profile and membership information from the server — and may store them, so that the team can produce internal summaries, search past discussion, and help keep the server safe and free of scams. We do this in our legitimate interest in staying informed about and protecting our own community. Message text may be processed by third-party AI providers through their commercial APIs.
Your choices. If you would prefer your messages were not included, or would like us to delete what we hold, email communications@olympusdao.finance or contact a core team member in the server.
7. Cookies
We may use cookies and similar browser storage for essential functions, such as remembering your cookie choice, and for analytics — set by providers such as PostHog and Google. Where a cookie preferences control is offered, you can change or withdraw your choice through it at any time. You can also clear or block cookies in your browser.
8. How long we keep it
We keep personal data for as long as it is needed for the purposes described in this policy, and for any period required by law. Once there is no longer a legal requirement or a legitimate purpose for keeping it, we delete or anonymise it.
9. Where it goes
We are based in Switzerland. Some of our providers may process data in the United States and elsewhere. Where required, we rely on recognised safeguards for those transfers, such as the European Commission's standard contractual clauses or an applicable adequacy decision.
10. Security
We use reasonable technical and organisational measures designed to protect this information, and we limit who can access it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You remain responsible for the security of your own wallet and keys.
11. Your rights
Under Swiss data protection law and, where it applies to you, the GDPR, you can ask us to give you a copy of what we hold about you, correct it, delete it, restrict or object to how we use it, or send it to you or another provider in a portable format. Where we rely on consent, you can withdraw it at any time; that does not affect anything done beforehand.
Email communications@olympusdao.finance. We will respond within the time applicable law allows, and may need to verify your identity first.
One limit. We cannot edit or delete information stored on a blockchain. Transactions, wallet addresses and holdings are permanent public records that nobody — including us — can alter.
You can also complain to a data protection authority.
12. Children
The Sites are not directed at children, and we do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will take reasonable steps to delete it.
13. Changes
We may update this policy. Changes take effect when the revised version is posted. Continuing to use the Sites after that means you accept them.
14. Contact
communications@olympusdao.finance Olympus Association, Zug, Switzerland