GravitasPrivacy
What we collect, and what we do not
In force from 26 August 2026 · Version 1.0
This site sets no cookies, runs no analytics, and carries no advertising or tracking scripts of any kind. Nothing on it profiles you. Personal data reaches us in exactly two ways: you write to us through the contact form, or you are a member of a Shariah board using Majlis with credentials issued to you.
Everything below says who else sees that data and what you can require of us. If a sentence here ever stops matching what the software does, the software is what counts and the sentence is a fault — tell us and it gets corrected.
1. Who is responsible
The controller of the personal data described here, within the meaning of Article 4(7) of the General Data Protection Regulation (EU) 2016/679, is:
| Controller | Abdusamed Zelić, a natural person |
|---|---|
| Location | Republic of Croatia (European Union) |
| Contact | abdusamed@gravitasprotocol.xyz |
| Sites covered | gravitasprotocol.xyz, including /app, and majlis.gravitasprotocol.xyz |
Gravitas Protocol is not yet an incorporated company. It is a project run by one person, and saying otherwise would be the first false statement in a document whose whole value is that it is true. When a company is incorporated it will become the controller, this page will name it, and you will be told before that happens rather than after.
No data protection officer has been appointed. None is required under Article 37: the processing here is neither large-scale, nor systematic monitoring, nor of special categories of data.
2. The website
Reading gravitasprotocol.xyz requires nothing of you and leaves nothing behind
that identifies you.
- No cookies. The site sets none at all — not for analytics, not for preferences, not for anything. This is why you are not asked to dismiss a consent banner.
- No analytics and no tracking. There is no Google Analytics, no advertising pixel, no session recorder, no heatmap, no fingerprinting.
- No third-party scripts except the fonts described below.
Two things that are unavoidable
Hosting. The site is served by GitHub Pages (GitHub, Inc.). Like any web server, it processes the IP address and user-agent of every request in order to deliver the page and to defend itself against abuse. We do not receive those logs, cannot query them, and do not use them.
Fonts. Typefaces are loaded from Google Fonts, which means your browser makes a request to Google's servers and Google sees your IP address in doing so. The legal basis is our legitimate interest in a legible page (Article 6(1)(f)). If you would rather that request never happened, a content blocker prevents it and the page still reads correctly in a system font.
3. The contact form
The form at the bottom of the home page asks for your name, your organisation (optional), your email address, and whatever you write in the message. Nothing else is collected, and no hidden field is added to what you can see.
Submissions are delivered by Web3Forms, a form-relay service, which receives everything you typed in order to email it onward. It is a processor: it handles the message to deliver it and for no purpose of our own choosing.
If you would rather not involve it, the form offers a fallback that composes the same message in your own mail client and sends it directly to us — nothing passes through Web3Forms on that path. You can also simply write to abdusamed@gravitasprotocol.xyz.
Legal basis. Article 6(1)(b) where you are asking about a possible working relationship, since answering you is a step taken at your request before any agreement; and otherwise Article 6(1)(f), our legitimate interest in replying to people who write to us.
Consequence of not providing it. None, except that we cannot reply. Name and email are required by the form only because a reply needs somewhere to go.
4. The application and your wallet
The application at gravitasprotocol.xyz/app runs entirely in your browser. There
is no account, no sign-up, and no server of ours that it reports to.
- Your wallet address. If you connect a wallet, the application reads your address in order to show you the state of the chain and to build a transaction for you to approve. It is not transmitted to us, not stored by us, and not logged by us.
- Local storage. One value is kept in your browser: your choice of light or dark theme. It never leaves your device and you can clear it with your browsing data. Under the ePrivacy Directive this is strictly necessary to provide the service you asked for, which is why no consent is sought for it.
- Blockchain reads. The application queries a public Arbitrum Sepolia RPC endpoint. That endpoint, like any server you contact, sees your IP address. We do not operate it and receive nothing from it.
- Your wallet provider. MetaMask, Coinbase Wallet, WalletConnect and similar are independent controllers with their own privacy policies. We have no visibility into them and no control over what they collect.
We never ask for and never receive your private key or seed phrase. Nobody legitimate ever will, and anyone who does is stealing from you.
5. Majlis
majlis.gravitasprotocol.xyz is not a public application. It is used by members
of a Shariah board, each holding a credential issued to them, and by observers holding a
shared read-only credential.
| What | Why |
|---|---|
| Member identifier and a scrypt hash of the password | To attribute a decision to the member who took it. The password itself is never stored and cannot be recovered from the hash. |
| Deliberation, votes and written reasoning | This is the record. A governance decision without attribution and reasoning is not a record of anything, which is the entire purpose of the application. |
| Questions put to the comprehension assistant, with the answer and the member who asked | Kept so the board can see afterwards what was asked of the assistant and what it said. |
| IP address, briefly | Held in memory only, to limit failed sign-in attempts. Never written to the record and lost when the process restarts. |
Majlis includes an assistant that explains mechanism. When a member uses it, the text of the question and the context needed to answer it are sent to Anthropic PBC (United States) for processing. The answer, the question and the identifier of the member who asked are then written to the record.
Do not put anything into the assistant that should not leave the board. It is there to explain how the mechanism works, and it is documented as refusing to give rulings.
Legal basis. Article 6(1)(b) — processing necessary to provide the service to the members who are using it — and Article 6(1)(f), our legitimate interest in a governance record that can be audited afterwards.
Majlis is hosted by Render Services, Inc., which processes request metadata including IP addresses in its platform logs.
6. What the blockchain keeps
If you send a transaction to the Gravitas contracts, your wallet address and the details of that transaction become part of the Arbitrum ledger. That ledger is public, worldwide, and replicated by parties none of us control.
No one can delete it — not us, not you, not a court. Your right to erasure under Article 17 cannot be satisfied against a public blockchain, by anybody, and any service that promises otherwise is misleading you. This is a property of the technology and it is why we say so here rather than in a footnote.
We do not write your personal data to the chain. What ends up there is what your own wallet signs and sends.
7. Who else processes your data
The complete list. There is nothing that does not appear here.
| Who | What they receive | Where |
|---|---|---|
| GitHub, Inc. (GitHub Pages) | Request metadata for the website, including IP address | United States |
| Web3Forms | Everything submitted through the contact form | Outside the EEA |
| Google LLC (Google Fonts) | IP address, when your browser fetches the typefaces | United States |
| Render Services, Inc. | Majlis hosting; request metadata including IP address | United States |
| Anthropic PBC | The text of questions put to the Majlis assistant | United States |
Your data is not sold, not rented, not used for advertising, and not shared with anyone beyond this list — except where we are required by law to disclose it, in which case we will tell you unless the law forbids it.
8. Transfers outside the EEA
Every processor above is established outside the European Economic Area, mainly in the United States. For the hosting providers and for Anthropic, those transfers are covered by the Standard Contractual Clauses under Article 46(2)(c) and, where the provider is certified, by the EU–US Data Privacy Framework.
The contact form is the exception worth knowing about. Anything you submit through it passes through Web3Forms, a relay we do not operate, before it reaches us. If you would rather that did not happen, the form offers a path that composes the same message in your own mail client, and writing to abdusamed@gravitasprotocol.xyz involves nobody but us.
You may ask us for details of the safeguards that apply to any specific transfer, and we will give you what we have.
9. How long anything is kept
| What | Kept for |
|---|---|
| Contact form messages | As long as the conversation is live, and up to 24 months afterwards. Then deleted. |
| Majlis governance record | Retained as the board's record. Its value is that it does not disappear. |
| Majlis assistant log | Retained with the record, for the same reason. |
| Theme and language preferences | In your browser, until you clear them. |
| IP addresses used for rate limiting | In memory only. Minutes, and gone on restart. |
| Host platform logs | By each provider's own retention policy, not ours. |
10. Your rights
Under the GDPR you may require us to:
- Tell you what we hold about you, and give you a copy (Article 15).
- Correct it where it is wrong or incomplete (Article 16).
- Erase it (Article 17) — subject to the blockchain limitation in section 6, which no one can work around.
- Restrict how we use it while a dispute about it is resolved (Article 18).
- Receive it in a portable form (Article 20).
- Object to processing based on legitimate interest (Article 21).
- Withdraw consent at any time where processing rests on consent, without affecting what was lawful before you withdrew it.
Write to abdusamed@gravitasprotocol.xyz. We answer within one month, as Article 12(3) requires, and there is no charge.
You may lodge a complaint with the Croatian supervisory authority:
Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
azop.hr ·
azop@azop.hr
If you live elsewhere in the EU, you may also complain to the authority in your own country.
11. Security
- Everything is served over HTTPS.
- Majlis passwords are stored as scrypt hashes with a per-member salt. We cannot read them and cannot recover them for you — a lost credential is reissued, never looked up.
- Failed sign-in attempts are rate-limited per address.
- Majlis is reachable only with a credential.
No measure makes a system safe, and claiming otherwise would be the kind of statement this page exists to avoid. The protocol has not been audited by an external firm; what is known to be open is published at docs/KNOWN-ISSUES.md.
12. Children
This is infrastructure for financial institutions and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us something, write to us and it will be deleted.
13. Changes
When this policy changes, the version and date at the top change with it. A change that materially affects how your data is handled will be announced on the site before it takes effect, not discovered afterwards.
abdusamed@gravitasprotocol.xyz. A question about your own data is answered by the person who wrote this page.