Superfluid.org

Last updated: May 5, 2026

1. Controller

The Superfluid Foundation

PO Box 448, Elgin Court, Elgin Avenue

George Town, Grand Cayman, KY1-1106

Cayman Islands

Contact: [email protected]

1. Scope

   This policy explains how personal data is collected and used when you access or interact with this website.

2. Data We Collect

   3.1 Data you provide

   We may process personal data that you voluntarily provide, including:

   • Email address
   • Any information you include when contacting us

   3.2 Data collected automatically

   We may collect limited technical data necessary to operate the website, such as:

   • IP address
   • Browser and device information
   • Basic usage data (e.g. pages visited, timestamps)

3. How We Use Data

   We process personal data to:

   • Operate and maintain the website
   • Respond to enquiries
   • Ensure security and prevent misuse
   • Comply with legal obligations

   We do not use personal data for unexpected or unrelated purposes.

4. Legal Basis (EU/EEA Users)

   Where applicable, processing is based on:

   • Your consent
   • Our legitimate interests (e.g. operating and securing the website)
   • Compliance with legal obligations

5. Data Sharing

   We do not sell personal data.

   We may share data with service providers strictly as necessary to operate the website, under appropriate safeguards.

   6A. Infrastructure and Service Providers

   We may rely on third-party infrastructure and service providers to operate and maintain the website.These providers may process limited technical data (such as IP address or usage data) strictly as necessary to deliver their services.Such providers may include, for example:

   • Hosting and infrastructure providers (e.g. Vercel, Amazon Web Services)
   • Error monitoring or logging services (e.g. Sentry)
   • Analytics or technical performance tools (e.g. Matomo)
   • Communications or delivery services (e.g. SendGrid)
   • Development or operational tools (e.g. Airtable)

   These providers act under contractual obligations and process data on our behalf where applicable.

7. International Transfers

Your data may be processed in countries outside your own.

Where required, appropriate safeguards are applied.

8. Data Retention

Personal data is retained only:

• For as long as necessary for the purposes described above, or
• As required by applicable law

9. Security

We implement reasonable technical and organisational measures to protect personal data from unauthorised access, loss, or misuse.

10. Your Rights

Depending on your jurisdiction, you may have rights including:

• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Restriction or objection to processing
• Data portability
• Withdrawal of consent

To exercise your rights, contact: [email protected]

You may also have the right to lodge a complaint with a relevant data protection authority.

11. Legal Disclosure

We may disclose personal data if required by law or to protect our rights, users, or systems.

12. Technical Logs

For operational and security purposes, systems may generate logs (e.g. IP address, request data).

13. Changes to This Policy

We may update this policy from time to time.The latest version will always be available on this page.

14. Definitions