Summary
- We collect what we need to run bounties and pay people: your email, profile, submissions, payout address and transaction records.
- We collect device and network signals to stop one person from using several accounts.
- We don’t sell your data or use it for advertising.
- Payments on Stellar are public by nature. Your Tetra account isn’t.
What we collect
Information you give us
- Account: your email address, and your name and profile picture if you sign in with Google.
- Profile: username, name, bio.
- Payouts: the Stellar address and memo you withdraw to.
- Bounties: project details and logos, bounty descriptions, and your reviews and decisions.
- Submissions: the links and notes you submit, and any dispute you raise.
- Funding: the token you pay with and the refund address you give for cross-chain funding.
Information collected automatically
- Device ID: a random identifier stored in a cookie on your browser.
- Network and browser: IP address and browser user agent, recorded when you sign in, submit work, post a bounty, change payout details or withdraw.
- Activity: balances, ledger entries, withdrawals and the emails we send you.
How we use it
- To run Tetra: sign you in, show bounties, record submissions, move rewards and process withdrawals.
- To keep it fair: compare device IDs, IP addresses and payout addresses across accounts to detect people using more than one account, and to investigate disputes and fraud.
- To keep your money safe: email you a code before your payout address changes, tell you about sign-ins from new devices, and hold withdrawals briefly after a payout address changes.
- To contact you: login codes, and notifications about your bounties, submissions and payouts. You can turn notifications off in Settings; login and security codes are always sent.
- To meet legal obligations and keep accurate financial records.
Where the law requires a legal basis, we rely on performing our contract with you (running Tetra), our legitimate interest in preventing fraud and keeping the platform secure, and legal obligations.
What’s public
Your name, username and profile picture appear next to your activity: submissions, approvals, contest wins and the recent activity feed. Approved task submissions and contest entries (after winners are announced) are visible on the bounty page, including their links. Project names, logos and bounty details are public. Your email, payout address and balance are not.
Who we share it with
We share data only with service providers that help us run Tetra, and only what they need:
| Provider | What for |
|---|---|
| Hosting and database providers | Running the app and storing data |
| Resend or ZeptoMail | Sending login codes, security codes and notifications (your email address and the message) |
| Cloudflare Turnstile | If enabled, a bot check when you ask for a login code (browser and network signals Cloudflare uses to tell people from bots) |
| Cloudinary | Storing and serving project logos |
| Sign-in (if you choose “Continue with Google”) and Google Analytics (aggregated site performance and usage statistics) | |
| NEAR Intents (1Click) | Cross-chain funding: the deposit, amounts and your refund address |
| Vercel Web Analytics | Visitor counts on our waitlist page only, without cookies |
With the other side of a bounty: project owners see the name, username, links and notes of people who submit to their bounties, the answers to any questions they asked, the payout wallet given for bounties that pay into their app, and the screening flags on those submissions. We may also disclose information if the law requires it, to protect people from fraud or harm, or as part of a merger or acquisition (with notice to you).
Blockchain transactions
Deposits and withdrawals happen on public blockchains. Anyone can see Stellar transactions, including amounts, addresses and memos, and they can’t be deleted. We never publish which Tetra account an address belongs to, but someone who knows your address may connect it to your activity.
Cookies
- Session cookie keeps you signed in.
- Device cookie (
tetra_did) holds a random device ID used for fraud prevention. It lasts two years.
We don’t use advertising or cross-site tracking cookies. Blocking these cookies will sign you out and may flag your submissions for manual review.
How long we keep it
We keep your account information while your account is open. When you close it, we delete or anonymize your profile, but keep financial records (deposits, rewards, withdrawals) and related fraud signals for as long as the law requires, typically several years. We keep a record of the emails we sent you (type and delivery status) for troubleshooting.
Security
We use encryption in transit, limit access to people who need it, keep the treasury key out of our code and database, and record every money movement in an append-only ledger. No system is perfectly secure; if a breach affects you, we’ll tell you as the law requires.
Your choices and rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you, or get a copy;
- correct it (most of it you can edit yourself in Settings);
- delete it, subject to the records we must keep;
- object to or restrict some uses, and withdraw consent where we rely on it;
- complain to your local data protection authority.
To use these rights, email [email protected] from the address on your account.
Children
Tetra isn’t for anyone under 18, and we don’t knowingly collect data from children.
International transfers
Our providers may process data in countries other than yours. Where required, we use safeguards such as standard contractual clauses.
Changes
If we change this policy in a material way, we’ll tell you by email or on Tetra before the change takes effect.
Contact
Tetra, [email protected].