Blockchain AcademicsBlockchain Academics
btc$104,231.00+2.4%eth$3,891.00+1.8%sol$178.42-0.6%bnb$612.30+0.9%xrp$2.41+3.1%ada$0.8200-1.2%

Privacy Policy

Last updated: October 2026

1. Introduction

Blockchain Academics Ltd. ("we," "us," or "our") operates the Blockchain Academics platform at blockchainacademics.com and learn.blockchainacademics.com (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform.

2. Information We Collect

Information You Provide

  • Account information: Email address, display name, and profile details when you create an account
  • Wallet address: Public blockchain wallet address if you choose to connect a wallet for authentication or on-chain features
  • Communications: Messages you send us via contact forms, email, or support channels
  • Newsletter subscription: Email address when you subscribe to our newsletter

Information Collected Automatically

  • Usage analytics: Pages visited, time spent on pages, click patterns, course progress, and XP activity
  • Device information: Browser type, operating system, screen resolution, and device identifiers
  • IP address: Used for security, fraud prevention, and approximate geographic location
  • Cookies and similar technologies: See Section 4 below

3. How We Use Your Information

  • Provide, operate, and maintain the Platform and its features
  • Process account registration and authentication
  • Track course progress, XP, badges, and leaderboard rankings
  • Send newsletters, platform updates, and relevant notifications
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve content and user experience
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

4. Cookies

We use cookies and similar technologies for the following purposes:

  • Essential cookies: Required for authentication, session management, and security
  • Analytics cookies: Help us understand how users interact with the Platform (e.g., page views, navigation patterns)
  • Preference cookies: Remember your settings such as theme preference (light/dark mode)

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect Platform functionality.

5. Third-Party Services

We use the following third-party services that may process your data in accordance with their own privacy policies:

  • Privy: Authentication and wallet connection services
  • CoinGecko: Cryptocurrency market data displayed on the Platform
  • Vercel Analytics: Privacy-focused web analytics to understand Platform usage
  • Cloudflare R2: Content delivery and media storage

We do not sell your personal information to third parties. We share data with third-party services only as necessary to operate the Platform.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. Specifically:

  • Account data is retained for the lifetime of your account
  • Course progress and XP records are retained for the lifetime of your account
  • Analytics data is aggregated and anonymized after 24 months
  • Communication records (support emails) are retained for up to 36 months

Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Portability: Request your data in a structured, machine-readable format
  • Opt-out: Unsubscribe from marketing communications at any time using the unsubscribe link in our emails

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS) and at rest, secure authentication protocols, and regular security audits. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated via email or a prominent notice on the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

For privacy-related inquiries or to exercise your data rights, contact us at:

[email protected]

For general inquiries: [email protected]

12. Crypto API and MCP Server

This section applies when you use the Blockchain Academics Crypto API at api.blockchainacademics.com, the MCP server packages on npm and PyPI, or the API dashboard under /crypto-api. It adds to the sections above and does not replace them.

What We Collect

  • Email address: The only account detail we ask for. You give it to us when you request a free API key, pay for a plan through Stripe or sign in to the API dashboard with a sign-in link. We use it to issue your key, to sign you in and for transactional email: signup confirmation, sign-in links, quota and billing notices and security incidents. The key itself is shown once in your browser and is never sent by email.
  • GitHub or Google sign-in: If you sign in with GitHub or Google, we receive your verified email address and the provider’s account identifier. We do not receive your password, store no name, photo or profile data, and post nothing on your behalf.
  • IP address at signup: Used only to limit how many free keys one network can request per day. The counter expires after 24 hours.
  • API usage counts: For each API key we count calls per day by route and client type (REST, MCP package or browser), including how many returned an error. The counts enforce the quota and rate limit of your tier, show your usage on the dashboard and help us diagnose outages in aggregate. We do not log request bodies or query parameters that could contain personal data.

Cookies

Signing in to the API dashboard sets two cookies on .blockchainacademics.com, so that they work on this site and on the API host: bca_session, which holds your signed session (httpOnly, Secure, SameSite=Lax), and bca_csrf, a token the dashboard sends back with every change you make, such as rotating a key, to block cross-site requests. Both last seven days or until you sign out, and neither is used for tracking or advertising. During a GitHub or Google sign-in the API host sets one short-lived cookie, __Host-bca_oauth, for ten minutes to tie the sign-in to your browser. The API sets no other cookies.

Processors

Each receives only the data it needs for its job:

  • Stripe: Payments for paid tiers. Stripe receives your email, billing address and card details directly; we never see the card details.
  • Resend: Delivers our transactional email (signup confirmations, sign-in links, receipts and notices) and receives your email address and the message content. API keys are not in any email.
  • GitHub, Inc. and Google LLC: When you choose to sign in with them. Each confirms your email address to us and receives only the standard sign-in request; we send them nothing about your API usage.
  • Railway and Cloudflare: Railway hosts the API; Cloudflare provides the CDN and DDoS protection in front of it. Both receive standard HTTP request metadata, such as your IP address and user agent, in order to serve and protect the API.

We do not sell your email address or your usage data, and we do not use your usage patterns to train machine learning models.

Retention and Your Rights

Your email and key record stay for as long as your key is active. On request we delete the key, the email and any open session within the 30 days stated in Section 6; daily usage counts stay only as numbers that no longer identify you. Billing records stay for as long as tax law requires. The rights in Section 7 apply to this data too; write to [email protected].