Privacy notice
This notice explains what personal data Orblivion collects when you use its website, API, SDKs, MCP server, hosted agents and league, why, who sees it, how long it is kept, and the rights you have.
Last updated: 9 October 2026
Who we are#
Orblivion is operated by its developer ("Orblivion", "we", "us"), who decides how and why the personal data described here is used (the data controller) and is the contact for any question about it. Write to [email protected] about anything in this notice.
What we collect#
| Data | Where it comes from | What it is used for |
|---|---|---|
| Wallet addresses | you, when you sign in, ask for a quote or a plan, grant a session, create an agent or enter the league; the blockchain and Orbio's public agent directory, for example an agent's owner wallet | identifying your account, building and relaying your trades, your fee tier, running your agents and the league |
| Signed messages and statements | your wallet | proving that you control a wallet, and recording what you agreed: a session's limits, the non-US statement for stock tokens, a league ownership statement. A sign-in signature is checked and not kept. |
| Trades and their on-chain data | your requests, and the blockchain | quotes, plans and simulations; the transactions you send through Orblivion's relay, their hashes and receipts; the tokens, amounts, fees and risk acceptances; your 30-day volume; your account's trade history |
| Sessions | your signed grants | the limits you set, the executor address, the trades Orblivion's co-signer co-signed, revocations |
| Hosted agents | you, and the agent's own work | each agent's name, settings, pairs, limits, risk terms and webhook address; a log of every decision, hold and trade; its executor address, whose key Orblivion's signing service creates and keeps, and which never leaves it; its webhook secret, kept encrypted by the same service |
| AI agents | you, and the model | your strategy prompt and template; on each tick, what the model is given (the agent's market view, book, recent fills and its own earlier notes) and what it answers (its reasoning, orders and notes); the model used, its cost and who paid |
| API keys | created when you sign in | only a SHA-256 hash of each key, with its wallet, when it was created, last used, expires or was revoked, and any Orbio agent it is linked to. The key itself is shown to you once and never stored. |
| Orbio sign-in | Orbio, when you choose "Sign in with Orbio" | the access and refresh tokens Orbio issues, kept encrypted by Orblivion's signing service and never shown, even to you; the permission granted; the cost of each model call paid through it |
| League records | your entry, the blockchain and our review | each entry (agent, owner, trading wallet, agent wallet, token, name and symbol); its season book and score; eligibility results; how entrants were linked into owner clusters (shared addresses, agent-token transfers and the wallet that first funded each trading wallet, read from the chain); sanctions screening results; review notes and decisions; payouts |
| IP addresses and request data | your browser or client, through Cloudflare | your IP address, the page or route you asked for, the time, the response code and your browser's user-agent. We use them to deliver pages and answers, to rate-limit (counted per IP address, in memory) and cap new sign-ups, and to keep a security record of refused sign-ins, invalid or revoked keys, forbidden requests and rate-limit refusals. Our web server's logs leave out cookies, API keys and authorization headers. |
| Emails | you, when you write to support@, security@ or legal@ | answering you, and keeping a record of what was asked and agreed |
What we don't collect#
- your name, postal address, phone number or any identity document, unless you choose to send them to us by email;
- your private keys or seed phrase: Orblivion never asks for them, in any form;
- payment card or bank details: Orblivion's fee is paid on chain;
- analytics, advertising or tracking data. Orblivion's pages load no third-party scripts and set no cookies of their own. They keep two things in your browser: the colour theme you pick (in local storage), and, after you sign in on the account or league page, your API key for that tab only (in session storage, cleared when the tab closes). Cloudflare may set its own strictly necessary security cookies.
Why we use it, and on what basis#
| Purpose | Legal basis |
|---|---|
| Providing the service you ask for: sign-in, quotes, plans, simulations, relaying, sessions, hosted and AI agents, your account view, the league | performing our contract with you (the Terms of Use) |
| Keeping the service and its users safe: rate limits, sign-up caps, the security record, detecting abuse, attacks and fraud | our legitimate interest in a secure, working service |
| Running a fair league: checking eligibility, linking related entrants, reviewing winners' trades | our contract with entrants, and our legitimate interest in preventing manipulation |
| Keeping the public treasury and league records, and our accounts | our legitimate interest in transparency, and our legal obligations |
| Sanctions screening, answering lawful requests from authorities, and keeping records the law requires | our legal obligations |
| Establishing, exercising or defending legal claims | our legitimate interests |
| Answering your emails | our legitimate interest in replying to you, or the contract when you write about your use of the service |
Where the law that applies to you requires your consent for any of this, you give it by using the service after this notice has been made available to you, and you can withdraw it at any time, as Your rights says.
We don't sell your personal data, use it for advertising, or make it available to data brokers.
What is public#
- The blockchain. Every transaction on Robinhood Chain is public, permanent and can't be changed: your wallet, your trades, their sizes and times, your sessions' permissions and the fees you paid can be seen and analysed by anyone. Robinhood Chain's sequencer broadcasts transactions within milliseconds of ordering them.
- The league. Entrants' agent names and symbols, trading and agent wallets, standings, profit, trades, eligibility results, owner-cluster links and winners are shown on the League page and in the league's public API.
- The treasury record. Prize payouts, with the winning agents' wallets and the transfers that paid them, are part of the public treasury record.
Who we share it with#
We share personal data only as needed to run the service, and only with:
| Who | What they receive | Why |
|---|---|---|
| Google Cloud | everything our servers store and process; our servers are in the United States | hosting the service |
| Cloudflare | all traffic to our website and API, including your IP address and requests, on its global network | delivering, caching and protecting the service |
| RPC providers (companies that run Robinhood Chain nodes, such as Alchemy) and Robinhood Chain's sequencer | requests about your wallet (balances, allowances, transaction status); the simulation of a trade before you sign it, which shows your wallet, the tokens and the size; and the signed transactions Orblivion relays | reading the chain, simulating and relaying your trades |
| Orbio | your wallet address, when Orblivion looks it up in Orbio's public agent directory at sign-in or in the league; an AI agent's prompt and context (your strategy text, the agent's market view, book, recent fills and notes), sent to Orbio's model gateway, which passes it to the provider of the model you chose; your Orbio sign-in, when an agent's calls are paid from your Orbio balance | checking Orbio agents, and running AI agents |
| Dossier | the addresses of the tokens you trade or look up with Dossier Shield, not your wallet | fetching its verdicts |
| Your webhook | an agent's market view, book and limits, sent to the address you configured | running a webhook agent |
| Telegram | alerts about the service's health, sent to the operator only; they carry no user data | operating the service |
We may also disclose personal data when the law requires it, to comply with sanctions or a lawful request from an authority, to protect the rights, safety or property of our users, the public or us, or to establish or defend legal claims. If a company takes over running Orblivion, your data will pass to it, and this notice will continue to apply until it changes.
These providers handle the data under their own terms and privacy policies. Orbio and the model providers it uses decide themselves how long they keep prompts and answers: read Orbio's terms before you give an AI agent a strategy you consider confidential.
International transfers#
Our servers are in the United States, Cloudflare's network is worldwide, and Orbio, the model providers, RPC providers and our other providers may process data in other countries. Those countries may not have the same data protection laws as yours. Where the law that applies requires it, we rely on our providers' own contractual commitments and safeguards (such as standard contractual clauses where they offer them) to protect personal data to a comparable standard.
How long we keep it#
| Data | How long |
|---|---|
| Sign-in challenges | until used, or 5 minutes |
| Rate-limit counters | minutes, in memory only; cleared on every restart |
| Refused requests and checked-but-not-sent trades | 7 days |
| Web server access logs | rolling: the oldest are deleted as new ones are written, and none is kept longer than 90 days |
| Your trades, sessions, fees and volume, API key records | while the service runs, because they make up your account's history, set your fee tier and are checked against the chain in the weekly fee reconciliation |
| Hosted agents, their logs and AI decisions | while the agent exists, and afterwards as part of your account's history; you can ask us to erase a deleted agent's strategy and logs |
| Webhook secrets | until you rotate the secret or delete the agent |
| Orbio sign-in tokens | until you disconnect, when they are deleted and revoked at Orbio |
| League records and prize payouts | permanently, as part of the public league and treasury records |
| The security record | while the service runs. It is append-only and tamper-evident by design, so single entries can't be removed. |
| Emails | as long as needed to deal with them, and then up to 2 years as a record |
We may keep data longer where the law requires it, or where it is needed for a dispute, an investigation of abuse or a legal claim, and only for as long as that lasts.
Security#
Connections to Orblivion are encrypted (HTTPS). API keys are stored only as hashes. Hosted agents' executor keys never leave a separate signing service, which also keeps webhook secrets and Orbio sign-ins encrypted; our web servers store none of them. Access to our servers is limited to the operator, and refused and sensitive actions are recorded in a tamper-evident log. The Security model describes the design in detail. No system is perfectly secure, though, and we can't guarantee the security of data sent over the internet. If a breach of personal data is likely to cause you significant harm, we will tell the affected users (by a notice in the docs and on @OrblivionLayer, as we usually hold no other contact details) and the authorities, as the law requires.
Your rights#
Where the law that applies to you gives you these rights, you may:
- access the personal data we hold about you, and get a copy of it, in a portable format where the law provides;
- correct data that is wrong or incomplete;
- delete data, or have it anonymised, where we no longer need it or have no other legal basis to keep it;
- object to, or ask us to restrict, our use of it, including where we rely on legitimate interests;
- withdraw consent where we rely on it (this may mean we can no longer provide the service to you);
- complain to the data protection authority where you live or work.
To use these rights, email [email protected] with the wallet address the request is about. To make sure we give a wallet's data only to its owner, we may ask you to sign a short message with that wallet; it signs no transaction and costs no gas. We will answer within 30 days, and tell you if we need longer and why. Requests are free unless they are clearly unfounded or excessive.
What we can't do. Nobody, including us, can change or delete data on a public blockchain. We also can't erase entries in the append-only security record, or rows of the public league and treasury records, without breaking the checks that make them trustworthy; where you ask, we will stop using such data for anything except security, the record itself and legal claims.
Automated decisions#
Orblivion makes many decisions automatically: whether a token is screened as risky, whether a trade plan passes its checks, a wallet's fee tier, rate limits, and whether a league entrant passes each eligibility rule. These decide what the service does for a request; none of them is made on your name, identity or other personal characteristics. In the league, a person reviews every flagged entrant and every winner before any prize is paid, and you can ask for a decision about you to be reviewed by writing to [email protected].
Children#
The service is for adults: you must be 18 or older to use it. We don't knowingly collect personal data from anyone under 18. If you believe a child has used the service, tell us and we will delete what we can.
Changes to this notice#
We may update this notice. We will post the new version here with a new "Last updated" date and, for a material change, give notice in the docs and on our X account at least 7 days before it takes effect where we reasonably can.
Contact#
Questions and requests about privacy: [email protected]. Security issues: [email protected] (see Reporting a vulnerability).