Open Orbit — Privacy Policy
Version 3 · Effective October 12, 2026
Operator and controller: Aries Labs LLC, a Wyoming limited liability company.
1. The short version
The Site has no accounts, no cookies, no analytics, no advertising and no trackers. It never sees your keys. What it does see is your wallet address when you ask it to prepare a transaction, the offers you choose to publish on the Market, ordinary server logs, and whatever you send us in an artist submission or a privacy request. Bitcoin is public and permanent; we cannot change that, and we tell you below exactly where your address ends up.
2. Contact
Privacy requests: privacy@arieslabs.org. We answer within 45 days.
3. What we collect, why, and for how long
| What | When | Why (and our legal basis in the EEA/UK) | Kept |
|---|---|---|---|
| Your wallet address | When you connect a wallet and ask the Site to prepare a transaction (a listing, a fill, a cancel, an Honorary design or claim; during the public round, a mint) | To read your unspent outputs and pieces from the chain and build the transaction you asked for (performance of our contract with you) | In the records below; not otherwise stored |
| Acceptance record — the Terms version you accepted (recorded as its hash), your wallet address, the time, and the step that recorded it (connecting a wallet, or a mint pre-flight during the public round) | When you accept the Terms | To prove acceptance (contract; legitimate interest in defending claims) | Indefinitely |
| Published offers (the order book) — your signed listing document, which contains your address, the listed output and the price | When you list a piece | Publishing it is the service you asked for (contract) | Indefinitely as the Market's record; removed from the public board when closed |
| Market records — listing, fill and cancel events, transaction ids, the readings the Site made and when | As the Market operates | To run the board, resolve disputes, and defend claims (contract; legitimate interest) | Indefinitely |
| Honorary design and text reservations — your address, the traits and text you chose | When you design | To build the collection and check uniqueness (contract) | Indefinitely; the text becomes permanent onchain when the piece is claimed |
| Server logs — network address, time, requested URL, headers, response code. A URL can include a wallet address, an output or a transaction id | Every request | Security, abuse prevention, rate limiting, debugging (legitimate interest) | No fixed period: logs are capped at 500 MB and the oldest are deleted first; at present that reaches back about two days |
| Rate-limit counters — your network address and request counts | Page, Market, acceptance and submission requests | To enforce per-address limits (legitimate interest) | In memory only, never written to disk or logged; each count resets after one minute (pages) or one hour (the Market, acceptances and submissions), but an address can stay in memory until the server restarts |
| Artist submissions — what you send: collection details, links, contact details | When you submit | To read and curate submissions (contract; legitimate interest). Network addresses are not recorded with submissions | Indefinitely; deleted on request if the collection is not listed |
| Privacy requests — what you send us and our reply | When you write | To answer you and keep a record (legal obligation) | Three years |
| Browser storage on your device — your language choice and your Terms acceptance | As you use the Site | Convenience; it stays in your browser and you can clear it | Until you clear it |
We collect nothing else. No names, emails or identity documents are required to use the Site (artist submissions and privacy requests are what you choose to send). We do not infer anything about you, profile you, or build a record across sessions beyond the rows above.
4. Wallet addresses are personal data
A Bitcoin address does not name you, but once it sits next to a time, a network address, an acceptance record or a listing, it can identify you. We treat every wallet address we hold as personal data and protect it accordingly. We do not try to link addresses to people, and we do not publish network addresses.
5. Bitcoin is public — and so is the order book
5.1 Everything on the Bitcoin blockchain — addresses, outputs, transactions, amounts, pieces and the text on an Honorary piece — is public and permanent. Nobody, including us, can edit or delete it. The leaderboard, the Snapshot, the supply counter and the collection pages are derived from that public data.
5.2 A Market listing is a bearer offer that we publish. When you list, your signed offer — including your address, the output you are selling and your price — is served by the Site to anyone who asks for the order book, and may be copied by them. That is the nature of a self-custodial market: a buyer needs the document to fill it. Do not list from an address you want kept private.
6. Who else sees data
6.1 Chain services. To read the chain and prepare transactions the Site's server queries third-party services — currently the SUBFROST gateway, one or more public block explorers, and Unisat's API. Each receives the address, output or transaction id needed for the query, from our server, and never your network address. The signed transactions the Site relays — Market fills and cancels, from any wallet, and, during the public round, mints signed through a SUBFROST wallet — are sent to the SUBFROST gateway for broadcast, and we keep a copy of each. Their own policies govern what they keep.
6.2 Hosting. The Site runs on servers we rent from a hosting provider in the European Union. The provider processes data only on our instructions under confidentiality terms.
6.3 Your wallet. Your browser talks to your wallet software directly; we do not see that traffic. Your wallet provider's policy governs what it collects.
6.4 Legal. We disclose data when the law requires, to respond to valid legal process, to protect the Site, our users or the public from fraud, abuse or harm, or to enforce the Terms.
6.5 Business transfers. If Aries Labs is acquired or reorganized, the records in Section 3 may transfer with it under this policy.
6.6 No sale, no sharing for advertising. We do not sell personal data, share it for cross-context behavioral advertising, use it for profiling with legal or similar effects, or process sensitive personal data. We have not done so in the preceding twelve months. We do not knowingly hold data of anyone under 18.
7. Your rights
7.1 Wherever you are, you may ask us: what offchain data we hold about an address; to correct it; to delete it; to restrict or object to our processing of it; to receive it in a portable form; and to withdraw any consent. Residents of the EEA, the United Kingdom, California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with privacy laws have these rights by law; we extend them to everyone.
7.2 Verification by signature. Because we hold no identity documents, we verify a request about an address by asking you to sign a short message we provide with that address (BIP-322). We never ask for an identity document, a key or a seed phrase. An authorized agent may act for you if the signature comes from the address in question.
7.3 We answer within 45 days (extendable once by 45 days for complex requests, with notice). If we refuse a request, we say why, and you may appeal by replying; we answer the appeal within 45 days. We never discriminate against you for exercising a right.
7.4 Limits. Deletion applies to offchain data only; nothing on Bitcoin can be deleted by anyone. We may keep the acceptance record, Market records and legal correspondence where we need them to defend or establish claims, and we may keep what the law requires us to keep. We may refuse a request that is manifestly unfounded or excessive.
7.5 EEA and UK residents may complain to their supervisory authority. The Site does not target the EEA or the UK.
8. International transfers
Aries Labs is in the United States; the servers are in the European Union. Data moves between the two for the purposes above. For transfers out of the EEA or the UK we rely on the necessity of the transfer for the contract you asked us to perform and, where needed, standard contractual clauses with our providers.
9. Children
The Site is for adults. We do not knowingly collect anything from anyone under 18, and we delete it if we learn we have.
10. Security
The server never receives private keys, seed phrases or signing capability; it cannot spend anything. Connections use HTTPS. Secrets on our servers are held by path with restricted permissions, never in code. Logs are capped and roll over. No system is perfectly secure; if a breach affects your data we will notify you as the law requires, by posting on the Site and by any contact you have given us.
11. Do Not Track and Global Privacy Control
The Site sets no trackers and shares nothing for advertising, so there is nothing for a Do Not Track or Global Privacy Control signal to switch off. We treat both signals as a request to do what we already do.
12. Changes
We publish changes on this page with a new version number and effective date. A material reduction in your rights will be announced on the Site before it takes effect.