Data & Privacy Policy

A pink and orange flower blooming.

Last edited: 10 December 2020

Contents

  1. Data in P2P and Blockchain Infrastructures
  2. How We Use Personal Data
  3. How We Use Third Party Applications
  4. Storing Your Personal Data
  5. Transferring Data Outside the EU
  6. User Rights Under GDPR
  7. Contact Us

    Radicle Foundation is the creator behind the project “Radicle” (in particular the “Radicle Network”) (radicle.xyz). We take our user’s data and privacy seriously - and are committed to protecting the rights of our users.

    This policy applies to all of our data processing activities where we act as a data controller. In this policy, "we," "us," and "our" refers to Radicle Foundation, a foundation incorporated in Switzerland with its registered address at Suurstoffi 37, 6343 Rotkreuz. For more information about us, see the Imprint or the “Contact Us” section of this policy.

    We may make changes to this policy every so often. When we do, we will change the “Last edited” date at the top of the page. We encourage you to review this policy regularly in order to stay informed about our information practices. If you do not agree to the revised policy, you shall discontinue your use of our software and communities, as well as unsubscribe from our newsletter.

  1. Data in P2P and Blockchain Infrastructures

  2. While you could use Radicle to privately edit your own code on your computer, without sharing to the Radicle Network, all code that you share on the Radicle Network is to be considered public. Because any contribution on the Radicle Network is linked to a public key, all contributions can be verified as coming from a public key. If your public key is linked to personally identifiable information, like your git username or email, this information will also be publicly accessible.

    Data is disseminated through the Radicle Network via a process called gossip. That is, participants in the Radicle Network share and spread data they are "interested" in by keeping redundant copies locally and sharing deltas with peers. With Radicle, data is replicated across connected code repositories according to a “social graph” of contributors and maintainers, enabling source code and changesets to be disseminated according to use and value: the more peers who are interested in a certain project, the more available this project is made to the Radicle Network.

    It’s important to understand that any information you publish onto the Radicle Network is public by design. Because of the way gossip works, once you contribute to code on or share a repository with the Radicle Network, any information that is held in git (potentially your name, email, or public key) will be exposed. It is not possible to remove, revoke or rectify this information from the Radicle Network. This is because the Radicle Network is a decentralized (public) peer-to-peer network (not operated by us) which stores data committed to it around the world. Your use of a client and interaction with Radicle Network will lead you to interact with other Radicle Network participants; you should note that other participants on the Radicle Network may be able to determine certain things about you through your use of the Radicle Network. Radicle Foundation does neither collect this data from you nor process it in any other way.

  3. How We Use Personal Data

  4. When subscribing to the Radicle newsletter:

    When you subscribe to the Radicle newsletter, we collect personal data via our newsletter service provider MailChimp. This data may include:

    1. your email address
    2. the date and time of registration
    3. your IP address
    4. your browser type
    5. your language
    6. the preferred email format

    This data is collected and processed for the purpose of subscribing you to and sending you Radicle’s newsletter (via radicle.xyz) with updates on the project’s development as well as ensuring the security and reliability of the newsletter service.

    The legal basis for this processing is your consent as provided in the double opt-in confirmation part of our newsletter sign-up process. This data will be stored as long as we have the consent to send you a newsletter. If you wish to unsubscribe from our newsletter, you can do so by clicking on the link at the end of each newsletter or by sending us an email. You can read more about MailChimp’s data access as well as their legitimate interests in and purposes for collecting this data here.

    When receiving the Radicle newsletter:

    If you have subscribed to our newsletter, each time you receive and open a newsletter from us, our third-party service provider MailChimp collects data, including:

    1. your email address
    2. the date and time you opened the email
    3. your location, as indicated by your IP address

    This data is collected and processed by us for the purpose of ensuring the security and reliability of the service we provide as well as our legitimate interest in the effectiveness of and general user interest in our newsletters. Because our newsletter service is hosted by MailChimp, you can view more information about the data they collect and their legitimate interests in and purposes for collecting this data here.

    When browsing the Radicle website:

    If you go to the Radicle website, we do not collect any of your information as you browse. However, because our website is hosted by Github, user personal information from visitors to our website, including logs of visitor IP addresses, may be collected by Github to comply with legal obligations, and to maintain the security and integrity of the Website and the Service.

    When downloading Radicle:

    When you download Radicle binary files, Buildkite and Google Cloud servers may collect and save information regarding your computer, network, browser, and IP address. We do not collect, store, or process the information collected by Buildkite and Google Cloud. Regarding your use of Radicle, we do not process any of your personal data (see above: Data in P2P and Blockchain Infrastructures).

    When you join the Radicle Matrix server:

    If you want to join Radicle’s Matrix server to chat with us and the rest of the Radicle community, you will need to join it via a client. You have the option of creating a Matrix account on Radicle's server, hosted by Ungleich; if you do, we, via Ungleich, collect your user name, display name, email address (if you provided one to the client), and your IP address each time you access our Matrix server. When you join a chat room on our server, whether you have an account on our server or not, we collect your user name and display name. This information is collected in order to deliver the chat service and enable its features, as well as ensure the security and reliability of the service.

    When you contribute to the Radicle Matrix server:

    Once you’ve joined Radicle’s Matrix server, you can participate in the public chat room by contributing messages and files. When you contribute to Radicle’s Matrix server, everyone who has joined the room will collect: your username, display name, message content, message files, and message date/time. When you communicate directly with another user via a private room, the user will collect: your username, display name, message content, message files, and message date/time. This information, collected in public chat rooms or in private rooms, is stored on our Matrix homeserver, which is hosted by Ungleich.

    This data is collected and processed by Ungleich for the purpose of delivering the chat service and features, as well as ensuring the security and reliability of the service we provide. You can view more information about how they handle this data here. If you wish to leave the Radicle server and delete all the data that was contributed by you, you can do so by sending us an email (ange@radicle.foundation).

  5. How We Use Third Party Applications

  6. MailChimp:

    We use MailChimp (based in the United States) to collect subscriber emails and to send out our newsletter to subscribers. The Foundation hereby informs you and you hereby acknowledge that the United States, in the view of the European Commission, does not ensure an adequate level of protection of personal data and that the personal data can be transferred to the recipients in the United States without any further safeguards; furthermore, during the newsletter signup process, the user consents to this transfer of personal data and confirms their understanding of the possible risks of such a transfer via the double opt-in confirmation part of the newsletter signup process. MailChimp’s privacy policy can be found here.

    Buildkite:

    We use Buildkite servers to store Radicle binary files. For further information and the applicable data protection provisions of Buildkite, visit this site.

    Google Cloud:

    We use Google Cloud Storage to store Radicle binary files. Our Google Cloud Storage is hosted on servers across the EU. For further information and the applicable data protection provisions of Google Cloud, visit this site.

    Github Pages:

    Our website, radicle.xyz, is hosted by Github, on Github Pages. User personal information from visitors to our website, including logs of visitor IP addresses, may be collected by Github to comply with legal obligations, and to maintain the security and integrity of the Website and the Service. For further information and the applicable data protection provisions of Github, visit this site.

    Matrix:

    We use Matrix for our chat protocol, which enables users to securely publish and subscribe to data. The Matrix Network is a decentralised and openly federated communication network. This means that a user's messages are stored on both the homeserver where they have their account and our Matrix homeserver, which hosts the Radicle community chat room where the user makes their contributions. For more information about how Matrix works, you can read their privacy policy here.

    Ungleich:

    We use Ungleich to host our instance of Matrix and our Matrix homeserver. A username and display name is collected to give a user access to the chat room on our Matrix homeserver, then all contributions by the user to the Radicle chat room are stored on our homeserver. Optionally, a user can create a Matrix account on our homeserver, in which case Ungleich may store an email for the purpose of recovering their password as well as the user’s IP address. Our Matrix homeserver is hosted in Ungleich’s own datacenter in Switzerland. For further information about how Ungleich handles security and privacy concerns, visit this site.

    Links to Social Media:

    On radicle.xyz, we link to social media profiles. Those services might also collect personal data. Please refer to their privacy policies for more information.

    1. Twitter
    2. IRC
    3. Telegram
    4. GitHub
  7. Storing Your Personal Data

  8. We retain your information only for as long as is necessary for the purposes for which we process the information as set out in this policy. However, we may retain your personal data for a longer period of time where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

  9. Transferring Data Outside the EU

  10. The Radicle newsletter subscription function is realized with the help of MailChimp, which is based in the United States (see above).

    Furthermore, any metadata associated with contributions made while using Radicle (including your git username and, potentially, your email address if it’s associated with your git username) may be replicated and stored around the world.

  11. User Rights Under GDPR

  12. At Radicle Foundation, we take user rights and privacy seriously - and this philosophy is built into each one of our projects. We have limited the data collected to the absolute minimum we need to enable the projects to work for the user. Our third-party service providers assure us that they take the appropriate security measures to prevent access to our newsletter subscriber list for any purpose other than our purpose of using it to inform supporters of our projects’ progress.

    As a Radicle newsletter subscriber and a contributor to the Radicle Community Matrix, you have the right to information, correction, limitation of data processing, deletion of personal data, objection, revocation of the declaration of consent under data protection law for the future and data transferability within the framework of the data protection law applicable to you and to the extent provided for therein (such as in the case of the GDPR). Please note that while we can delete your data from our Radicle Matrix homeserver, this does not apply to the data on Matrix servers run by others, including, potentially, the homeserver where you have your Matrix account.

    In addition, you have the right to assert your claims in court or to file a complaint with the responsible data protection authority. Switzerland's competent data protection authority is the Federal Data Protection and Information Commissioner.

    However, because of Radicle’s peer-to-peer, gossip-based infrastructure, the deletion or editing of any contributions you make to your or other repositories on the Radicle Network and any personal data made available to the public in this regard (see above: Data in P2P and Blockchain Infrastructures) cannot be (fully) enforced. This is because Radicle Network is a decentralized network and it stores data committed to it around the world. We can only ensure your rights regarding data as to which we qualify as a controller (data processed by the Radicle Foundation – see above: How We Use Personal Data).

  13. Contact Us

  14. This website is owned and operated by the Radicle Foundation. We are registered in the canton of Zug, Switzerland, under the commercial register number CHE405.696.942 [CHE-405.696.942 MWST]. Our registered office is located at:

    Suurstoffi 37
    6343 Rotkreuz
    Switzerland

    If you have any queries concerning the website or your rights under this Privacy Policy, please contact Ange Royall-Kahin at ange@radicle.foundation.