Privacy Policy
Effective date: October 10, 2026.
On this page
This policy describes data handling for Rally's web and mobile services at rallydot.com. For privacy questions or requests, contact skewlabs@skew.deals. “We” and “Rally” refer to the service offered under the Rally name.
Information we process#
| Category | Examples | Purpose |
|---|---|---|
| Account and identity | Account ID, handle, display name, profile image, linked public wallet addresses, verified login-provider identifiers | Sign-in, account linkage and ownership checks |
| Social activity | Posts, replies, uploaded images and video, follows, reactions, saved posts, memberships and notifications | Publish content and provide community and feed features |
| Preferences and algorithms | Watchlists, selected feed, submitted formulas and versions, access settings and eligible opt-in performance records | Ranking, previews, subscription access and comparisons |
| Payment and execution records | Quotes, plans, invoices, transaction hashes, observed receipts, entitlement and launch/vault policy identifiers | Prepare requested actions and verify their result |
| Authorization and security | Session and grant records, permitted scopes, expiry, revocation, owned-agent identity, request metadata and operational logs | Authenticate, prevent abuse and investigate failures |
| Support and moderation | Messages you send support, reported posts, reasons, blocking and review records | Resolve requests and enforce service rules |
Wallet and login providers may process your email, social login, device and authentication information under their own policies. Rally receives the verified identity and linked-account information required by the configured flow. Ordinary Rally sign-in does not require sending us a seed phrase or private key. Do not put secrets in posts, uploads or support requests.
Public information#
Public profiles, posts, replies, community pages, token identities and public creator activity can be read, copied or indexed by others. Paid feed restrictions limit particular content; they do not make the entire account private.
Blockchain addresses, balances, transactions, contract policies and events are public independently of Rally. Linking a wallet or publishing receipt-backed activity can connect that public record to your Rally profile. Blockchain records cannot be removed by an account deletion request.
Why we use information#
We use information to provide the features you request, verify ownership and access, process uploads, reconcile payments and trades, maintain security, support users and meet applicable obligations. Where relevant law requires a legal basis, this may include providing the requested service, legitimate interests in security and service operation, compliance with law, or consent for an optional feature. You can decline optional features and withdraw consent where applicable.
We do not obtain a general-purpose financial signing permission from a content grant. Connecting a publishing agent authorizes only the requested scopes. Revocation stops further access under that Rally grant.
Providers and sharing#
Data needed for a feature may be processed by the providers that perform it:
- Privy and the login provider you choose handle supported authentication and embedded-wallet flows.
- A selected external wallet, or MetaMask Agent Wallet when explicitly paired, handles its own wallet authentication and signature requests.
- RPC operators, market-data providers and external venues receive the public addresses, asset identifiers, queries or transactions needed for market and chain operations.
- Hosting, content delivery and media processing services deliver the website and uploaded content and may process request metadata such as IP address.
- An agent client you authorize can access the data allowed by its grant. That client's handling of received data is governed by its own terms and your arrangement with it.
We may disclose necessary information to meet a lawful obligation, protect users and service security, or resolve a reported rights violation. We seek appropriate contractual and technical protections for providers processing data on our behalf. Independent wallet, venue, identity and agent providers have separate policies and responsibilities.
Cookies and device storage#
The web app uses a Rally session cookie for authenticated requests and device pairing where configured. Browser storage keeps preferences such as theme and state needed to reconnect or recover an interrupted action. A wallet or authentication SDK may use its own storage for the flow you choose.
The Android app uses protected device storage for its session and pending transaction identifiers. Camera or photo/video access, where requested, supports the media action you choose; it is not permission to publish your entire library. You can manage device permissions in system settings.
Clearing storage or reinstalling an app can remove local preferences and interrupted-action records without deleting server records or blockchain transactions. Preserve independent wallet access. Sign out and disconnect grants rather than assuming a cleared browser revokes every provider permission.
Retention and deletion#
We retain account and feature records while needed to provide the service and resolve outstanding access, payment or safety issues. Sessions and grants have expiry and revocation controls. Expiry stops authorization; it does not promise immediate deletion of all related records.
Deleted posts are removed from ordinary feed delivery. The service may retain deletion markers, edit history, reports and limited audit records for security, dispute handling and applicable obligations. Copies in backups or third-party caches may persist until their normal retention cycle ends. Other users' copies and public blockchain records are outside Rally's deletion control.
Request account or personal-data deletion through skewlabs@skew.deals. We may verify account control before acting and explain any records that must remain for legal, security or transaction-reconciliation reasons. We will not ask you for a seed phrase, private key or a financial transfer to verify a privacy request.
Your choices and rights#
You can edit your profile, remove your own posts, change feed settings, block or report an account, sign out and revoke agent connections. Account export provides supported profile and social records through the account controls; it is not a complete copy of all provider or blockchain data.
Depending on applicable law, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, withdraw consent, or complain to a competent privacy authority. Contact us to exercise a right or ask about data handling. We will consider the applicable law and verify requests proportionately.
International processing and security#
Users and providers can be in different countries, so information may be processed outside your place of residence. Applicable safeguards and legal requirements govern such processing; this policy does not assert that every provider stores data in the same country.
Rally uses access checks, protected authorization records, HTTPS and scoped provider integrations. No system is guaranteed secure. Protect your account and wallet, and report suspected unauthorized access promptly without sending secrets.
Age and policy changes#
Rally is intended for adults aged 18 or older. If you believe a child has provided personal information through the service, contact us so we can review and address it.
We will update the effective date when this policy changes and give appropriate notice of material changes. New processing that requires consent will not be justified merely by changing this page.