Privacy Policy

We are committed to protecting and respecting your privacy and personal data and will only collect and use personal data in ways that are described here and ways that are consistent with our obligations and your rights under applicable law relating to the protection of personal data.

This Policy aims to give you information about how we collect and process your personal data when you visit our octez.js website at https://octez-js.tezos.com, including any subdomains related to our website (together, “our site”), regardless of where you visit from, including any data that you may provide through our site, its feedback widget or AI chat widget, when you submit testnet transactions, or when you otherwise interact with us.

Please read this Policy carefully and ensure that you understand it. This Policy explains our processing of personal data.

It is important you read this Policy together with any other Policy we may provide from time to time when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This Policy supplements other notices and privacy policies and is not intended to override them.

References to “you” or “your” are to you as an individual using our site or otherwise contacting us (whether on behalf of yourself, or another individual or organisation).

1. INFORMATION ABOUT US

1.1 Our site is operated by NOMADIC LABS, a simplified joint stock company incorporated under the laws of France and registered on the Paris Trade and Commerce Register under number 813 239 118, with its registered address at 46 Boulevard de la Bastille, 75012 Paris, France (“Nomadic Labs”, “we”, “us” or “our”). We are the controller responsible for the personal data we process in operating this site.

1.2 We are bound by applicable data protection laws in respect of the handling and collection of your personal data. If you have questions about this Policy or wish to exercise your data protection rights, please contact us at contact@nomadic-labs.com.

2. DATA WE COLLECT

2.1 No account or login. You do not need to create an account or log in to use our site. We do not request a name or email address through the feedback or AI chat widgets. However, personal data may be included in content you choose to submit, and technical identifiers may constitute personal data even without your name.

2.2 IP addresses. The feedback and ChatKit workers use your IP address transiently as a rate-limit key to prevent excessive requests and abuse. The key expires with the applicable rate-limit window, which is five minutes or 60 seconds, depending on the worker. These keys are not linked to your feedback, chat messages or session identity and are not retained long-term by those workers.

2.3 Feedback. If you use the feedback widget, we collect the page URL, page title and your vote (bad, neutral or good), together with any optional category and free-text feedback you submit. The widget does not ask for your name or email address.

2.4 AI chat. The ChatKit widget creates a random session user ID using crypto.randomUUID(). This is a session identifier, not an account or a persistent user identity. Your session identifier and chat message content are processed to provide the chat service. Message content is sent to OpenAI’s ChatKit API at api.openai.com. The octez.js worker does not itself log or store chat message content. Processing and retention by OpenAI are addressed below.

2.5 Google Fonts. Font files are loaded from fonts.googleapis.com and fonts.gstatic.com. These requests disclose your IP address and associated request information to Google in order to deliver the fonts. Our site does not attach an analytics payload to those requests.

2.6 Testnet transactions. If you submit a testnet transaction, the wallet addresses and transaction data you submit are communicated to the relevant testnet infrastructure and may be recorded on a public testnet. These data may be personal data where they can be linked to an individual. Please do not place personal or confidential information in a transaction.

2.7 Other contact. If you contact us directly, for example by email, we receive the contact details and other information you choose to provide so that we can respond to your enquiry.

2.8 Your choices. Please do not include passwords, private keys, recovery phrases, confidential information or unnecessary personal data about yourself or others in feedback or chat messages. Optional free-text fields and chat messages may contain personal data even though we do not ask for your name or email address.

3. THIRD PARTY LINKS AND SERVICES

3.1 Our site may include links to third party websites, plug-ins, and applications. Clicking on third-party links or enabling third-party connections may allow third parties to collect or share data about you. Third-party sites are not under our control, and we are not responsible for their content. When you leave our site, we encourage you to read the privacy policy of every website you visit.

3.2 OpenAI ChatKit. When you use the AI chat widget, your messages and session identifier are processed by OpenAI to provide responses. Its handling of this data is subject to the applicable service and data processing terms agreed with us. Information about OpenAI’s API data practices is available at https://platform.openai.com/docs/guides/your-data and its data processing terms at https://openai.com/policies/data-processing-addendum/. Our worker’s lack of chat logging does not mean that OpenAI does not store chat data. We remain responsible for our obligations as controller in relation to processing carried out on our behalf.

3.3 Public testnets and Wallets. Testnet transactions may be publicly visible and may be processed by independent network participants, node providers and Wallet providers. Their processing is outside our control. You should review the privacy information of any Wallet or other provider you choose to use.

4. IF YOU FAIL TO PROVIDE PERSONAL DATA

4.1 You may browse the documentation without providing a name or email address. If you do not provide the information necessary for a requested function, we may not be able to provide that function or respond to your enquiry. Requests may be restricted where necessary for rate limiting or security.

5. PURPOSES FOR PROCESSING PERSONAL DATA

5.1 We will only use and process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to provide services or information to you or to perform the contract we are about to enter or have entered with you.

• Where we have a legal or regulatory obligation we must comply with.

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.

• Where we have your express consent to process your data.

7.2 Where we rely on legitimate interests, we do so only where your interests and fundamental rights do not override those interests.

7.3 We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. We will provide further information, and obtain consent where required, before using your data for an incompatible purpose.

7.4 Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

8. HOW WE MAY SHARE YOUR PERSONAL DATA

8.1 Professional advisors and authorities. We may share your personal data with professional advisors (e.g. lawyers, auditors and insurers) and with tax authorities, regulators and other authorities as required by law or where necessary to establish, exercise or defend legal claims.

8.2 Service providers. We may share your personal data with third parties that provide services to us, such as hosting and infrastructure providers, IT service providers, providers supporting the feedback functionality and OpenAI for the AI chat service. Google also receives requests directly from your browser to provide fonts, as described above. We do not use payment processors or analytics providers for this site.

8.3 Business Transfers. If we choose to sell, transfer, or merge parts of our business or our assets, or if we seek to acquire other businesses or merge with them, we may share your personal data with the third parties involved in the transaction. If a change happens to our business, the new owners may use your personal data in the same way as set out in this Privacy Policy.

8.4 Third-party data protection. We require service providers processing personal data on our behalf to protect it and process it only for specified purposes under our instructions and appropriate contractual terms. Independent third parties, such as providers processing data for their own purposes or public network participants, are responsible for their own processing. Referring to a third party’s terms does not remove our own obligations under data protection law.

8.5 International transfers. The providers described above may process personal data outside the EEA and/or the UK, including in the United States. Where we transfer personal data to a country without an applicable adequacy decision, we will use an appropriate transfer mechanism, such as the European Commission’s Standard Contractual Clauses and any additional safeguards required by law; where UK law applies, we will use an applicable UK transfer mechanism.

9. YOUR RIGHTS

9.1 Your personal data may be subject to different data protection laws depending on your location. We comply with relevant laws and uphold the rights afforded to individuals under those laws.

9.2 If you are an individual whose data we process under the GDPR and/or the UK GDPR, the following rights may apply to you:

• Right to access personal data;

• Right to rectification (Right to request correction);

• Right to erasure (Right to be forgotten);

• Right to restrict the processing of personal data;

• Right to obtain and reuse personal data;

• Right to object to processing of personal data;

• Right to withdraw consent: Where we obtain your consent to process your personal data, you can withdraw it at any time by contacting contact@nomadic-labs.com. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

9.3 You have the right to contact your local supervisory authority if you have concerns about how we handle your personal data.

10. RETENTION OF YOUR PERSONAL DATA

10.1 We shall hold on to your data for an initial period of 2 years or longer where necessary. If you have any further questions, please contact us at contact@nomadic-labs.com.

11. CHANGES TO THIS PRIVACY POLICY

11.1 We keep this Privacy Policy under regular review and may update it from time to time. We reserve the right to make amendments to our Privacy Policy at any time. Historic versions can be obtained by contacting us.

11.2 Unless otherwise provided in this Privacy Policy, it is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

This Policy was last updated on 9 October 2026.