Public RPC privacy policy

1. Scope

This policy applies to requests sent to the WelshDAG public RPC endpoint at rpc.welshdag.trade. Other WelshDAG services and third-party destinations, including wallet software, explorers, Telegram and mining services, may have separate data practices.

2. Information that may be processed

Cloudflare and WelshDAG server infrastructure may process or record:

• IP addresses and related network or security identifiers;
• request timestamps, JSON-RPC method names, response status, duration and size;
• HTTP headers and limited device or client metadata, such as user agent and origin;
• request content needed to execute the RPC call, including public wallet addresses, block identifiers or signed transactions submitted for broadcast; and
• security events, rate-limit decisions and diagnostic error information.

Blockchain transactions and wallet addresses may become publicly available on the BlockDAG network independently of WelshDAG.

3. Why this information is used

WelshDAG processes this information only as reasonably necessary to:

• deliver JSON-RPC responses and broadcast valid signed transactions;
• apply rate limits and maintain fair public access;
• detect, investigate and prevent abuse, attacks and service disruption;
• diagnose faults and monitor availability, performance and reliability; and
• meet applicable legal or security obligations.

Where UK data-protection law applies, this processing is generally based on WelshDAG's legitimate interests in providing and securing the public RPC service, and on taking steps requested by the user when responding to an RPC call.

4. Tracking classification

5. Service providers and disclosure

WelshDAG uses Cloudflare for DNS, TLS termination, reverse-proxy and security services. Cloudflare may process end-user traffic on its global network under its Privacy Policy. Hosting and network providers may also process limited infrastructure data to deliver and secure the service.

Information may be disclosed when reasonably necessary to investigate abuse, protect the service or its users, comply with law, or respond to valid legal process. WelshDAG does not sell RPC metadata.

6. Retention

WelshDAG keeps operational logs only for as long as reasonably required for rate limiting, security, fault investigation and service reliability. The exact period can vary depending on the type of record and whether it is needed for an active security incident, abuse investigation or legal obligation. Cloudflare controls its own retention practices as described in its policies.

Public blockchain data is not controlled by WelshDAG and may remain permanently available on the network.

7. Security and international processing

WelshDAG uses technical and organisational safeguards intended to protect operational data, including HTTPS transport, restricted origin access and infrastructure security controls. No internet service can guarantee absolute security.

Because Cloudflare operates a global network, request data may be processed outside the United Kingdom. Cloudflare describes its international-transfer practices and safeguards in its privacy documentation.

8. Your choices and rights

You may use another compatible BlockDAG RPC provider if you do not want to use this endpoint. Depending on where you live, you may also have rights to request access, correction, deletion, restriction or objection concerning personal data held by WelshDAG. Some requests cannot be fulfilled where data cannot reasonably be linked to an individual or is already recorded on a public blockchain.

9. Contact

For a privacy question or rights request, contact WelshDAG through the official WelshDAG Telegram community and ask to speak privately with an administrator. Do not post sensitive personal information in a public group.

10. Changes to this policy

This policy may be updated when the RPC service, infrastructure or legal requirements change. The effective date at the top of this page will be updated when material changes are published.