Website Privacy Policy

1. Who We Are

Conduit Hodlings Inc, doing business as Conduit ("Conduit," "we," "us," or "our"), operates the Website. Conduit builds open commerce products and publishes educational, business, and product information through the Website.

We try to collect only information that is useful for operating, securing, and improving the Website. We do not sell personal information or use Website information for cross-context behavioral advertising.

2. Information The Website Handles

Hosting and network information. When you request a Website page, Conduit and its infrastructure providers may process information such as your IP address, request time, requested page, browser or device information, and security, delivery, or performance diagnostics.

Website analytics. On public pages other than the legal and community request pages, we may collect sanitized page routes, explicit navigation and call-to-action selections, FAQ interactions, public Update identifiers, and bounded error categories. A pseudonymous identifier stored only for the Website may associate Website activity across visits. Section 5 explains the controls applied to this information.

Community requests. If you use the community request form when it is available, we handle the public npub and message you submit, plus your name or shop name. We use this information to review your request and respond through your public identity. Section 6 describes this process and its security controls.

Information you provide. We handle information you choose to send directly, such as email, support, business, or investor communications.

3. Browser Storage And Cookies

The Website may use origin-scoped browser storage to maintain a limited pseudonymous analytics identifier. You can clear this information using your browser controls, although doing so may reset Website analytics state.

Website analytics are limited to the conduit.market origin. We do not intentionally set a domain-wide analytics cookie for.conduit.market, and we do not pass the Website analytics identifier to Conduit Shop or Conduit Sell. The Website legal and community request pages do not initialize analytics or create new analytics storage. Analytics remain disabled there even if you arrived from another Website page. Infrastructure providers may use strictly necessary security or delivery mechanisms under their own policies.

4. How We Use Information

We use information to:

• operate, deliver, maintain, and secure the Website;
• publish and display public Updates;
• authenticate and authorize Website administrators;
• understand whether our educational and business content is useful and how effectively it directs visitors to Conduit's products;
• diagnose failures and improve Website performance;
• respond to communications and support requests;
• review community requests and arrange invitations;
• prevent abuse and protect Conduit and Website visitors;
• comply with applicable law and enforce our Website Terms.

5. Website Analytics

On Website pages other than legal, community, and administration pages, Conduit uses PostHog for limited Website analytics. Analytics may include a sanitized page route, explicit navigation and call-to-action selections, FAQ interactions, a public Update slug, a bounded error category, and a pseudonymous identifier stored only for the Website. PostHog and the network providers involved in delivering an analytics request may also process ordinary connection information such as IP address and approximate location derived from it.

We do not use session replay, automatic interaction capture, heatmaps, automatic collection of ordinary page or form content, anonymous person profiles, raw query strings, or automatic referrer and campaign collection. Website analytics are not used for third-party behavioral advertising. Conduit does not intentionally link the Website analytics identifier with Product App identity or activity.

Website analytics are disabled on this Privacy Policy, the Website Terms, their short aliases, community request pages, and restricted administration routes. Form values, public npubs, request identifiers, and delivery results are not sent to Website analytics. The Website also honors enabled Global Privacy Control and browser Do Not Track signals for analytics collection.

6. Community Requests

Community requests are optional and are not required to enter Shop or Sell. When the form is enabled, your submitted public npub, message, and name or shop name are sent to the community manager's review mailbox through Cloudflare Email Service. The mailbox and any follow-up correspondence are the review record. Sending a request does not subscribe you to a newsletter or automatically make you a community member.

The community manager reviews public activity associated with the npub and confirms that you control that identity before issuing an invitation. Your npub is public, but the Website does not publish your application. Do not submit a private key, payment details, an order, or other sensitive information through this form.

Cloudflare Turnstile helps protect the form against automated abuse. It processes browser and network signals, which may include your IP address, browser information, and the site you are visiting. Cloudflare describes this processing in its Turnstile Privacy Addendum. Turnstile and email delivery are separate from Website analytics.

The form service keeps limited abuse-control and duplicate-send records in Cloudflare D1. These contain keyed hashes, counters, status, and expiry times, not the submitted name, message, or raw npub. Rate controls use a 15-minute window and duplicate-send controls use a 24-hour window; expired records are removed during service cleanup. Raw form content and challenge tokens are not included in application logs or analytics. Hosting, security, and email providers still process the information needed to deliver and protect the service under their own policies.

7. Updates

Published Update content is intentionally public and may be indexed, cached, quoted, or republished by search engines and other third parties after publication.

8. Service Providers And External Destinations

We use service providers to operate the Website. These currently include Cloudflare for Website delivery and security, PostHog for limited Website analytics. These providers may process information on Conduit's behalf under their own service terms and privacy commitments.

When community requests are enabled, Cloudflare also provides Turnstile bot protection, the request handler, D1 abuse-control storage, and Email Service delivery. The review mailbox provider stores delivered requests and replies. This policy describes the form's processing when available; it does not mean that requests are open at all times.

The Website links to Conduit Product Apps and independently operated websites and community or social services, including Armada. When you follow a link, the destination's privacy policy applies. Links from the Website to Shop and Sell do not include the Website analytics identifier or campaign parameters.

9. Retention And Deletion

We retain Website analytics, security information, community review correspondence, administrator-account information, and Update records only as long as reasonably necessary for the purposes described here, including legal, security, backup, and operational requirements. Provider-controlled backups or security records may persist for a limited period after deletion from an active system.

Community requests remain in the review mailbox for as long as needed to review and respond, subject to the operational and legal requirements above. You may contact us to request deletion of information we control.

You can clear Website browser storage through your browser. Published content and information copied by search engines or other third parties may remain available after Conduit changes or removes the original Website page.

10. Your Choices And Privacy Rights

You may use Global Privacy Control or browser Do Not Track to disable Website analytics, clear browser storage, or avoid sending optional communications. Depending on where you live, you may also have rights to request access to, correction of, deletion of, or portability of personal information we control, or to limit certain processing. We may need to verify your identity before responding.

Some information may be maintained by an infrastructure provider, stored only in your browser, or copied from a public Update by a third party. Our ability to access, correct, or delete that information may be limited.

11. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the Website. No internet-based service, authentication system, or browser-storage mechanism can be guaranteed completely secure. Authorized administrators are responsible for protecting their email account, device, browser, and authentication links or credentials.

12. Children

The Website is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and address the request.

13. International Processing

Conduit and its providers may process information in the United States and other locations where they operate. Privacy and data protection rules may differ from those in your location.

14. Changes To This Policy

We may update this Website Privacy Policy as the Website or its data practices change. We will post the revised policy with a new last-updated date and provide additional notice where appropriate.

15. Contact

To ask a privacy question or submit a request, contact:

Conduit Hodlings Inc
3400 Cottage Way, Suite G2, PMB 23234
Sacramento, CA 95825
Email: contact@conduitbtc.com