The goal of Waku is widespread adoption of the decentralized web. Our challenge is achieving mass adoption while staying true to our principles, which include privacy and transparency.
We believe privacy is the power to selectively reveal oneself to the world. For us, it’s essential to protect privacy in communications.
Guided by our principles, Waku is designed to be a tool that allows you to protect your privacy and to process as little personal data as possible for the network to thrive.
Who we are
Our role in your privacy
Waku is the communication layer for Web3. Decentralized communication that scales. Private, secure, and it runs anywhere. Waku is being used by (i) Waku Connect: The communication layer for Ethereum. A tech stack enabling decentralized communication between DApps and people; (ii) Status: Status is a secure messaging app, crypto wallet, and Web3 browser built with state of the art technology; and (iii) WalletConnect: WalletConnect v2 is using Waku v2 for decentralized messaging infrastructure.
When Waku collects and processes personal data for our own purposes (which we don’t do often), such as Community support or to process your input and/or feedback left on our (social media) pages, Waku acts as the ‘data controller’ of information. This means we determine how and why your data are processed.
This means we process these data strictly on your behalf, and we will never process the data for our own purposes.
How and why we use your data
Under relevant privacy legislation, Waku can only use your data for certain reasons and where we have a legal basis to do so. Beyond the law, it’s our policy to store and process only those data that are essential for community support and to respond to your input on our social media pages and if necessary. Waku won’t process or store any data that we don’t need, and in such case, we only store personal data for the least amount of time needed for these purposes.
Here are the reasons why we process your data:
- Ethereum is a public blockchain
Ethereum is the community-run technology powering the cryptocurrency ether (ETH) and thousands of decentralized applications (DApps). Waku is the communication layer for Web3. Decentralized communication that scales. Private, secure, and it runs anywhere.
The Ethereum public network is accessible to anyone in the world with an internet connection. Anyone can read or create transactions on a public blockchain and validate the transactions being executed. Therefore, information you share on the Ethereum blockchain is public.
Please be aware that when sharing information on the ETH network it is stored publicly and immutably.
- When you you decide to run a node or implement Waku, you are the sole owner and possessor of your private keys and therefore responsible for their storage or loss. This means that Waku doesn’t know which keys belong to you and doesn’t process any personal data in this respect.
This means, that your private keys are stored by you in the way you decide, and Waku has no access to such private keys and doesn’t process any personal data in this respect.
Data processed through external (social media) pages:
Personal Data: Information you make public when you leave a comment or otherwise post something on our external (social media) pages- For example, Waku has pages on the following (social media) platforms:Facebook, Twitter, Instagram, YouTube,Reddit, GitHub, Discuss and Discord.
Purpose(s): We may use these data to:- Contact you via our (social media) pages- Process your input and/or feedback left on our (social media) pagesWe will explicitly not gather any more information about you or link your social media account to your chat name, ENS name, or IP-address.
Legal basis: Legitimate Interest:- Necessary to get in touch with you regarding your message- Process your input, respond to feedbackOur external (social media) pages are also controlled by the platform itself.Please check the social media privacy policies,to see how each platform handles your personal data.
Waku is an open-source project made by people all over the world. We have many ways to stay in touch, including via email and social media platforms.
Data processed when you contact us:
- Personal Data: Your chat name or ENS name and all (personal) data you share with using your message on social media platforms.- Your email address when you send us an emailPlease note: as a rule, your chat name is generated by you or on your own devices.Your chat name will only beKnown by us if you decide to contact us.
- Purpose(s): We use these data to:Contact you about your messageProvide you information and/or support.
- Legal basis: Consent and Legitimate Interest :- Necessary to contact you about your message to provide you the support you requested- You give your consent to being contacted by reaching out to us.
- Stored: As long as needed to resolve your concern.
How we work with third party processors
Waku won’t share your personal data with third parties.
However, Waku may engage (sub) processors that we trust to carry out the processing of personal data on our behalf. We only provide personal data to (sub) processors when necessary for them to execute the services they provide to us. We’ve established contractual agreements with all our (sub) processors ensuring that they may only process the personal data collected and processed by us within the scope of the contractual agreement and under no circumstances for other purposes.
As Data Controller: Waku may use (sub) processors to assist us in our services provided as data controller. Our use of processors is under contractual agreement and in accordance with privacy legislation.
As Data Processor: Waku may also use sub-processors to assist us in our services. Our use of sub-processors is under contractual agreement and in accordance with privacy legislation.
Exporting data outside the European Union
Waku may transmit personal data to parties outside the European Union, if one of our (sub) processors is established outside the European Union. Personal data will only be processed in countries or by parties that provide an adequate level of protection in accordance with European standards. The transmission of data outside the European Union will always happen in conformity with privacy legislation.
We’re serious about data security
Waku protects the personal data we process from unauthorized and unlawful access, change, disclosure, use, and destruction. For example, we take the following technical and organizational security:
We encrypt many of our services using SSL and other security measures.
We review our information collection, storage, and processing practices and handbooks, from time to time, to guard our systems against unauthorized access.
We restrict access to personal data to our contributors and all other parties we work with on a need-to-know basis, subject to strict contractual confidentiality obligations.
We perform periodic internal security audits.
A quick bite on cookies
Your choices and rights
As laid out in relevant privacy legislation, you have the right to:
Ask us to correct or update your personal data (where possible);
Ask us to remove your personal data from our systems;
Ask us for a copy of your Data processed, which may also be transferred to another data controller at your request;
Withdraw your consent to process your personal data (only if consent was asked for a processing activity), which only affects processing activities that are based on your consent and doesn’t affect the validity of such processing activities before you have withdrawn your consent;
Object to the processing of your personal data;
File a complaint with the Federal Data Protection and Information Commissioner (FDPIC), if you believe that your personal data has been processed unlawfully.
Status Research & Development GmbH
This document is: Waku_PP_June2022.