⚠ DRAFT — NOT YET IN FORCE. Awaiting ratification by SPHERING³ LLC. Not published and not linked from the live footer. Items marked OPEN require a founder decision before adoption.

Privacy Policy

CONTINUARIUM · THORIUM Reactor
Version 0.1 DRAFT — prepared 2026-08-12

1. The one thing to understand first

Anything you mint becomes public and permanent. It cannot be deleted — not by you, not by us, not by anyone.

This is not a policy choice we could reverse. It is a property of the permanent-storage network the Service is built on. Everything else in this policy is subordinate to it.

Decide what to mint on that basis. Do not mint anything containing personal information you may later want removed — yours or anyone else's.

2. Who we are

The CONTINUARIUM platform and THORIUM Reactor are operated by SPHERING³ LLC, the data controller for the personal data described here.

OPEN — founder decision required: entity address, and whether an EU/UK representative or Data Protection Officer is required given where users are accepted from.

3. Your artifact is processed in your browser

The Service is designed so that artifact processing and mint construction happen client-side, in your browser. Our servers are not required to receive, hold, or inspect your artifact content in order for a mint to complete.

The practical consequence: the content of what you mint is not collected by us as part of normal operation. It goes from your browser to the permanent-storage network. Where an optional server-assisted path is used, it is disclosed at the point of use.

4. What we collect

Category	What	Why
Account data	Email address; authentication credentials	To create and secure your account
Mint metadata	RAD Creator Name, artifact hash, timestamp, tier selected	To produce the provenance record. Written permanently on-chain — see §6
Transaction data	Amount, status, processor reference	To take payment and keep required financial records
Technical data	IP address, browser/device type, timestamps, error logs	Security, abuse prevention, and diagnosing faults

We do not sell personal data. We do not use it to build advertising profiles.

OPEN — founder decision required: confirm the payment processor and whether card data ever transits our infrastructure. Drafted on the assumption it does not and the processor is the controller for card data.

5. Why we are allowed to process it

To perform our contract with you — account, minting, payment.
Our legitimate interests — securing the Service, preventing abuse, and fixing faults.
Legal obligation — tax, accounting, and lawful requests.
Your consent — where we ask for it specifically, which you may withdraw at any time.

6. On-chain data: public, permanent, irrevocable

The provenance record written when you mint — including the RAD Creator Name you supply and the artifact itself — is written to a public permanent-storage network. It is readable by anyone, worldwide, indefinitely.

We have no technical ability to erase, amend, or restrict it. No one does. A deletion request that names on-chain data cannot be honoured, by us or by any other party.

This directly limits the erasure and rectification rights described in §9. We state that plainly rather than implying a right we cannot deliver.

The RAD Creator Name is the field most likely to carry personal information. You choose what goes in it. A pseudonym is a legitimate choice, and the moment before minting is the only moment at which that choice can be made.

7. Who else receives data

Permanent-storage and blockchain networks — receive the artifact and provenance record. Public and permanent (§6).
Optional redundancy providers (such as IPFS networks and Cloudflare R2) — receive a copy of the artifact where you select a tier that uses them. Their own privacy terms govern that copy. We present these services; we do not operate them. See Terms of Service §5.
Payment processor — handles payment.
Infrastructure and email providers — hosting, delivery, and security, acting on our instructions.
Legal recipients — where we are compelled by valid legal process.

Selecting a redundancy tier places a copy with an independent provider. That copy exists on their systems under their terms, and their handling of it is not something we control or warrant.

8. How long we keep it

Account data — for the life of your account, then deleted or anonymised within a defined period after closure.
Transaction records — for the period required by tax and accounting law.
Technical logs — a short rolling window sufficient for security and diagnostics.
On-chain records — permanent. Not subject to any retention period, ours or anyone's.

OPEN — founder decision required: exact retention periods. Deliberately left unstated rather than invented, since a published number becomes an enforceable commitment.

9. Your rights — and their real limits

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal data, and to complain to a supervisory authority.

These rights apply to data we hold and can act on — your account, transaction, and technical data. We will honour them there.

They cannot apply to on-chain data, which we cannot erase or amend. This is a limit of the technology, not a refusal. It is why §1 asks you to decide carefully before minting rather than afterwards.

10. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access control, and monitoring. No system is perfectly secure, and we do not warrant that ours is.

We will never ask you for a private key, seed phrase, or wallet passphrase. Any message that does is not from us.

11. International transfers

Our providers and the storage networks operate globally, so your data will be processed outside your country. Permanent-storage networks are distributed by design and are not confined to any jurisdiction.

OPEN — founder decision required: transfer mechanism for EU/UK users (Standard Contractual Clauses or equivalent), if such users are accepted.

12. Children

The Service is not directed to children, and we do not knowingly collect their personal data. Given the permanence described in §6, this matters more here than on an ordinary service.

OPEN — founder decision required: minimum age (commonly 16 or 18). Recommend 18, given irreversibility.

13. Changes

We may update this policy. Material changes will be marked with a revised version and date at the top of this page.

14. Contact

SPHERING³ LLC.

OPEN — founder decision required: privacy contact address.