There is no account, so there is almost nothing to protect.

The controller for the purposes of the GDPR is Tomislav Buza, operating dex.acki.pro. Questions, or any request under the rights listed in §6: [email protected].

The site is hosted on a virtual server in the European Union, and served through Cloudflare, which acts as a processor for traffic delivery and denial-of-service protection.

Everything you configure here is stored in your own browser and never sent to us: your trading notes (their keys encrypted with a passphrase only you know), the addresses you ask the site to watch, your light/dark choice, and a few flags remembering which explanations you have already seen.

There is no server-side copy of any of it. We could not hand it over, sell it, or lose it, because we never receive it. The complete list — with what each item is for, its size, and a button that deletes all of it — is on the wallet page.

Under the ePrivacy rules this storage is what the law calls strictly necessary: it exists only to provide the thing you asked for, and none of it profiles you or follows you anywhere. That is why this site shows you no consent banner — there is nothing here to consent to. If that ever stops being true, the banner appears before the tracking does.

Your browser talks to dex.acki.pro and to nothing else. Market data, balances and season points are fetched by our server on your behalf and passed back — so the upstream services (indexer.dex.do, the Acki Nacki chain, rewards.dex.do) see our server, not you.

Like any web server, ours writes access logs: IP address, time, the path requested, and the browser’s user-agent string. They exist to keep the service running and to deal with abuse — the lawful basis is legitimate interest (Art. 6(1)(f)) — and they are rotated away after about 14 days. They are not used to build a profile, and they are not combined with anything else.

Cloudflare sits in front and processes the same request data to deliver the page and absorb attacks. Its own security cookie may be set on some requests; it carries no identity and is not used by this site.

No analytics, no tag manager, no advertising or marketing pixels, no A/B testing service, no session recording, no error-reporting service, no fonts or scripts loaded from a CDN, no newsletter, no data sold or shared, and no automated decision-making.

We never ask for a private key, a seed phrase or a note key — and the site could not use one if you pasted it. Connecting a wallet hands over a public address only.

Acki Nacki is a public blockchain. Every order, fill and balance belonging to an address is visible to anyone, permanently, whether or not you ever open this site — we read that data, we do not publish it. An address you paste here is not made any more public by pasting it, but neither can it be made private again.

The GDPR gives you the right to access, correct, erase, restrict, object to, and receive a portable copy of any personal data we hold about you (Arts. 15–21). In practice the only personal data we hold is what is in those server logs for a couple of weeks, so a request amounts to us searching them for your IP address.

Everything else is on your device and under your control: the delete button on the wallet page removes it immediately, with no request to anyone. You also have the right to complain to a supervisory authority — in Croatia, AZOP.

This site is not directed at children, and trading with real funds on a public chain is not an activity for them.

If the technical facts above change — if anything ever loads from a third party, or a cookie appears — this page changes in the same commit, and the date at the top moves with it.