Privacy & Data Handling

1. Our Commitment

SMPT Protocol is built on transparency and minimal data collection. We do not sell, rent, or trade your personal information. The protocol is designed to verify metadata, not to profile individuals. This policy describes what data we collect, why, and how you can control it.

2. Data We Collect

2.1 Public Blockchain Data
All verified mappings (ISRC, ISWC, split hashes) are stored on the Monad blockchain and are public by design. This data is pseudonymous but permanently visible.

2.2 Node Operator Information
If you run an SMPT node, we collect:

• Node ID (self‑assigned or generated)
• IP address (for peer discovery and network health)
• Stake wallet address (public key, not private key)
• Uptime and vote history (stored on‑chain)

2.3 API Usage
When you query the public API, we may temporarily log your IP address and requested endpoint for rate‑limiting and abuse prevention. Logs are anonymized after 7 days.

3. Cookies & Local Storage

The SMPT website uses no tracking cookies. We may store a simple session flag in your browser’s local storage only if you interact with the hash‑verification demo (no personal data).

4. How We Use Data

• To operate and improve the SMPT network
• To calculate node reputation and consensus weights
• To prevent abuse and ensure fair API rate limits
• To display aggregated network statistics (e.g. “12 active nodes”)

5. Data Sharing

We do not share personal data with third parties except:

• When required by law (subpoena, court order)
• With node‑operators’ explicit consent for network coordination
• Aggregated, anonymised stats (e.g. “total active stake”) may be published

6. Data Retention

On‑chain data (mappings, votes, stakes) is permanent. API logs are deleted after 30 days. Node IP addresses are stored only while the node is active and removed from active rotation 90 days after last seen.

7. Your Rights (GDPR / CCPA)

If you are located in the EU or California, you may request:

• Access to any personal data we hold (excluding on‑chain public info)
• Deletion of your node information (node will be delisted)
• Correction of operator‑provided details

To exercise these rights, contact privacy@traproyaltiespro.com from the email address associated with your node. We will respond within 30 days.

8. Security Measures

All API traffic is encrypted via TLS 1.3. Node communication uses libp2p with noise encryption. Access to server infrastructure is restricted to core maintainers and logged.

9. Children’s Privacy

SMPT is not directed at individuals under 16. We do not knowingly collect data from children.

10. Changes to This Policy

Material changes will be announced via the SMPT website and, for node operators, via the communication channels you provided. Continued operation after changes constitutes acceptance.