PRIVACY PROTOCOL
// DATA TRANSPARENCY REPORT //
BaseDare is proof-heavy, not privacy-light. We collect real-world proof because that is how BaseDare works — so this page tells you exactly what becomes public, what stays private, and what cannot be deleted once published. BaseDare is operated through basedare.xyz. Formal operating entity details will be added when available.
1. What We Collect
Location proof: QR + GPS check-ins — coordinates, distance from the venue, and timestamps. This is the core product, not a side effect.
Proof media: the photos and videos you submit as proof, plus captions and tags.
Wallet & session data: your wallet address, signed session proofs, and your @tag if you claim one.
Messages: venue room posts and direct messages you send are stored so they can be delivered.
Contact & intake data: if you submit a venue, partnership, or contact form, we keep the email and details you send.
Analytics & notifications: product analytics events, and a push token if you turn notifications on.
2. What Becomes Public
Your wallet address and every on-chain transaction are public on Base — that is how blockchains work. If you need stronger separation, use a fresh wallet.
Approved proof is public by design: it appears on the map, the venue page, the Board, and your proof receipt, together with your @tag and the venue.
Crossed paths: when you and another verified human check in at the same venue in the same window, you each become visible to the other as having crossed paths. That co-presence signal is what unlocks messaging.
Approved local tips and meetups you host are shown publicly with the details you provided.
3. What Stays Private
Direct messages are visible only to their participants. Rejected or pending proof is not public. Contact emails and business intakes go to the ops team, not the feed.
Raw GPS coordinates are used to verify presence; the public surface shows the venue, not your exact position. We do not track your location in the background — only at the moment you check in.
We do not sell your data, and we do not run third-party ad pixels.
4. Who Processes It
BaseDare runs on infrastructure partners that process data on our behalf: Vercel (hosting), Supabase (database), Pinata / IPFS (proof media storage), PostHog (product analytics), Telegram (ops alerts and community rooms), Coinbase / OnchainKit (wallet infrastructure), and Formspree (contact forms). Each receives only what its job requires.
5. What Cannot Be Deleted
On-chain transactions are permanent. Proof media published to IPFS is content-addressed and may persist on nodes we do not control, even after we unpin it. Receipts that people screenshot and share are out of anyone's hands.
Think before you submit proof: the unfakeable part is the product, and unfakeable cuts both ways.
6. Your Requests
You can ask us to delete or export the off-chain data we hold about you — profile, messages, pending proofs, contact records, analytics identifiers — and we will honor it for everything not permanently published (see section 5). BaseDare is for adults 18+; if we learn an account belongs to someone younger, we remove it.
7. Contact
Privacy requests, deletion requests, questions: use the contact page. A human reads it.