Monadic

Data & Privacy Policy

Monadic GmbH is the creator behind the projects Radicle (radicle.xyz) and Open Source Coin (oscoin.io). We take our user’s data and privacy seriously - and are committed to protecting the rights of our users.

This policy applies to all of our processing activities where we act as a data controller. In this policy, "we," "us," and "our" refers to Monadic GmbH, a company incorporated in Germany with its registered address at Pücklerstraße 17, 10997 Berlin. For more information about us, see the Imprint or the “Contact Us” section of this policy.

We may make changes to this policy every so often. When we do, we will change the “Last edited” date at the top of the page. We encourage you to review this policy regularly in order to stay informed about our information practices. If you do not agree to the revised policy, you should discontinue your use of our software and communities, as well as unsubscribe from our newsletter.

Data in a P2P Infrastructure

In Radicle, all code that you host on the network can be considered public. Because any contributions on the network is linked to a public key, all contributions can be verified as coming from a public key. If your public key is linked to personally identifiable information, like your git username or email, this information will also be publicly accessible.

IPFS is the peer-to-peer infrastructure on which users build Radicle programs. Any data you send may be replicated to an indeterminate number of computers. This data can only be deleted or edited on a per-computer basis. Radicle State Machine updates are written as IPFS objects, using IPLD to link between these IPFS objects, and lastly we use IPNS to give us persistent identifiers for RSMs that resolve to the current state.

We make this clear when we state in our documentation: “Radicle does not explicitly support private collaboration. All data, projects, and peer-to-peer communication is publicly available on the IPFS network to anyone who knows your project ID.” You can find more about this process within our documentation: Radicle FAQ.

How We Use Personal Data

When subscribing to the oscoin.io newsletter:

We collect and process the Personal Data that you provide to us for the purpose of subscribing to our email newsletter (via oscoin.io). This data may include:

  1. your email address
  2. the date and time of registration
  3. your IP address
  4. browser type

This data is collected and processed for the purpose of sending you our newsletter, updates on Monadic’s work to realize a more sustainable future for open source.

The legal basis for this processing is your consent as provided in the double opt-in confirmation part of our newsletter sign-up process. Your email address will be stored as long we have the consent to send you a newsletter.

When receiving our Newsletter:

If you have subscribed to our newsletter, each time you receive a newsletter from us, our third party service provider Pepo Campaigns collects data, including:

  1. the date and time you opened the email
  2. what (if any) links or URLs you accessed from our newsletter

This data is collected by our service provider, however, Monadic does not use this information. The legal basis for this processing is your consent as provided in the double opt-in confirmation part of our newsletter sign-up process.

When browsing the Radicle website:

If you go to the Radicle website, Google Cloud’s Stackdriver Logging collects your IP address, date and time of access, and browser type. Stackdriver Logging retains log entries for a limited time, known as the retention period. Information on retention periods can be found here. The legal basis for this processing is our legitimate business interests, namely monitoring and improving our website and the proper protection of our business against risks. However, we do not set cookies on a website user’s browser.

When downloading and using Radicle:

When you download Radicle, we collect and save your IP address and timestamp on our Google Cloud server. We use this information to know how many unique installs we have. The legal basis for this processing is your consent, provided by actively downloading our software.

When you contribute to the Radicle Garden or any other Radicle State Machine, you elect to publicly share the public key generated for you by Radicle, your git name, your git email, and the time you submitted the contribution. The legal basis for this processing is your consent, provided by the active submission of your public key and git name.

How We Use Third Party Applications

Formspree:

We use Formspree to collect subscriber emails for the Oscoin newsletter. Formspree then sends the subscriber’s email to an inbox at ProtonMail. Formspree complies with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States, respectively. Their privacy policy can be found here.

ProtonMail:

Once a subscriber enters their email address for the Oscoin newsletter, Formspree will send the email address to an inbox with ProtonMail. Their privacy policy can be found here.

Pepo Campaigns:

We use Pepo Campaigns to process the incoming email registrations for the Oscoin newsletter. They use Amazon Web Services (AWS) servers in Europe Region West (Ireland) to store our newsletter registration list and to process the email sending related operations. Their privacy policy can be found here.

Google Cloud:

We use Google Cloud to store log and database data as described under “How We Use Personal Data.” For further information and the applicable data protection provisions of Google Cloud, visit this site.

IPFS:

IPFS is the peer-to-peer infrastructure on which users build Radicle programs. Radicle State Machine updates are written as IPFS objects, using IPLD to link between these IPFS objects, and lastly we use IPNS to give us persistent identifiers for RSMs that resolve to the current state. For further information abd the applicable data protection provisions of IPFS, visit its parent company, Protocol Labs.

Links to Social Media:

On radicle.xyz and oscoin.io, we link to our social media profiles. Those services might also collect personal data. Please refer to their privacy policies for more information.

  1. Twitter
  2. IRC
  3. Telegram
  4. GitHub

Storing Your Personal Data

We retain your information only for as long as is necessary for the purposes for which we process the information as set out in this policy. However, we may retain your Personal Data for a longer period of time where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person.

Transferring Data Outside the EU

The oscoin newsletter subscription function is realized with the help of Formspree, which is based in the US. Formspree is certified under the EU-US Privacy Shield.

Furthermore, our use of IPFS means that any metadata associated with contributions made while using Radicle (including your git username and, potentially, you email address if it’s associated with your git username) is written to a blockchain, which means that it may be transferred and stored around the world.

User Rights Under GDPR

At Monadic, we take user rights and privacy seriously - and this philosophy is built into each one of our projects. We have limited the data collected to the absolute minimum we need to enable the projects to work for the user, while preserving their anonymity. Our third party service providers assure us that they take the appropriate security measures to prevent access to our newsletter subscriber list for any purpose other than our purpose of using it to inform supporters of our projects’ progress.

As a contributor on Radicle or a newsletter subscriber, we must inform you of your rights under Regulation EU 2016/679 (General Data Protection Regulation or “GDPR”). These rights include:

However, as IPFS is the peer-to-peer infrastructure on which users build Radicle programs, the deletion or editing of any contributions you make to your or other repositories on the network cannot be fully enforced. This is because IPFS is a decentralized network and it stores data committed to it (like Radicle State Machines, which Radicle users write to collaborate in the Radicle network) around the world. We can only ensure that data that is held by Monadic is permanently deleted.

Contact Us

This website is owned and operated by Monadic GmbH. We are registered in Germany under the commercial register number HRB 192171 B. Our registered office is located at:

Pücklerstraße 17
10997 Berlin
Germany

If you have any queries concerning your rights under this Privacy Policy, please contact us at company@monadic.xyz.