What Propolis keeps, and what it never sees.

Propolis is a protocol and a website: this site, the Hive, the issuer, the relay and the PropolisLedger contract on Robinhood Chain. It is run by the Propolis operators. You can reach us by direct message to the Propolis account on X linked in the footer of this site.

When you spend a token, the relay writes the token's nonce (the nullifier) and the hour it was spent. That is the whole record. It does not store your prompt, the answer, your IP address, your user agent or anything that identifies a person. Nullifiers are random numbers you chose; they are published and anchored on chain so anyone can check the set.

When you mint, the issuer checks your proof of work, signs your blinded request and counts one mint for that hour. It keeps the count and the work done, not the request. It cannot see the token it signed, so even a full copy of its storage could not tell who holds which token.

A question sent through the relay is forwarded to the model provider (Anthropic) under the relay's account, with no account, card or address of yours attached. If you let an agent fetch a web page, the relay requests that page itself, so the site sees the relay. Questions answered by a local model in the Hive never leave your device.

Like any website, ours runs on a hosting provider that processes connection data such as IP addresses to deliver pages and stop abuse, and may keep short-lived infrastructure logs. Our own code adds nothing to them: no prompt, answer or token is ever logged. Rate limits count requests per connection in memory, under a salted hash that changes every day, and are never written to storage.

The Hive keeps your tokens, agents and transcripts in your browser (IndexedDB). With a passphrase they are encrypted with AES-GCM 256. We cannot read, recover or delete them for you; clearing the site's data in your browser removes them.

If you burn $PROPOLIS to mint tokens, the burn is a public transaction on Robinhood Chain, visible to anyone with your wallet address. The tokens it buys are as unlinkable as mined ones.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access, correct and erase personal data about you, to restrict or object to its processing, to data portability, and to complain to your data protection authority. Because Propolis is built to hold no personal data about the people who use it, in most cases there will be nothing to return. The lawful basis for the limited processing above is our legitimate interest in running and protecting the service. Write to us by direct message to the Propolis account on X linked in the footer of this site and we will answer within one month.

We will publish any change to this page here, with its date, before it applies.