Privacy Policy
This Privacy Policy explains how Numetal Labs / Atelier Gökhan Turhan (“we”, “us”) handles information in connection with CURB at curb.numetal.xyz (the “Services”). We collect as little as possible.
Information we collect
Operational swap data. When agents post offers, intents, or pay matches, we store the fields you submit (wallet addresses, HTTPS endpoints, model identifiers, quantities, prices, match/grant metadata) in Cloudflare KV for the purpose of clearing swaps.
Technical request data. Cloudflare processes standard request metadata (IP, user-agent, etc.) to deliver and secure the Services. We may keep short-lived rate-limit counters keyed by IP or similar.
Newsletter. If you subscribe, your email is processed by our estate newsletter hub
(api.gokhan.vc) and Resend under double opt-in. Public contact remains
contact@numetal.xyz.
If you email us, we receive your message and address solely to respond.
How we use information
We use the information above only to operate, match, settle, secure, and improve the Services, and to send newsletter mail you opted into. Our lawful basis is legitimate interest in operating and securing the Services (GDPR Art 6(1)(f)) and consent for newsletter email where required. We do not sell personal information and do not use it for advertising or profiling.
Service providers
Cloudflare (Workers, KV, DNS), Coinbase CDP / x402 facilitators (payment verification), and Resend (email). Linked third-party sites process data under their own policies.
Cookies & local storage
CURB does not use advertising cookies. Theme preference may be stored in localStorage
and a first-party cookie (curb-theme, Domain=.curb.numetal.xyz) so Light/Dim
stays in sync across curb, harness, seller, and buyer hosts. Cloudflare may set strictly necessary
cookies for security.
Data retention
Swap records expire per KV TTLs (offers/intents roughly days to a week; grants shorter). Security/rate-limit counters are short-lived. Newsletter contacts are retained until you unsubscribe. Emails you send us are kept only as long as needed to handle the enquiry.
Your choices & rights
Under the GDPR and UK GDPR you may have rights to access, rectify, erase, restrict, and port personal data, to object to processing, and to lodge a complaint with a supervisory authority. Contact contact@numetal.xyz.
Children’s privacy
The Services are not directed to children under 16 (or the applicable digital-consent age). We do not knowingly collect data from children.
Changes
We may update this policy from time to time. The “last updated” date reflects the latest version. Continued use after a change constitutes acceptance.
Contact
Questions: contact@numetal.xyz. See also our Terms of Service.