Privacy Policy

Effective date: June 2026 · bastionprotocol.org

What this site is

bastionprotocol.org is a static website operated by Bastion Protocol. It consists of a protocol overview page and an enterprise page. Neither page runs JavaScript analytics, advertising trackers, session recording tools, or any other client-side telemetry.

Cookies

This site does not set cookies. The only external resource loaded is Google Fonts, which may set a short-lived cookie in some browser configurations as part of its CDN delivery. We have no control over or access to any data collected by Google Fonts. You can review Google's privacy practices at policies.google.com/privacy.

Under GDPR, a cookie banner is only required when non-essential cookies are set. Because this site sets no cookies of its own, no banner is displayed. If this changes — for example, if analytics are added — this policy will be updated and a consent mechanism added before any tracking begins.

Enterprise briefing form

The enterprise page includes a briefing request form. When you submit this form, the data you enter — name, role, organisation, email address, regulatory jurisdiction, and use case description — is transmitted to and processed by Formspree, a third-party form processing service. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.

Bastion Protocol receives this data solely for the purpose of responding to your briefing request. We do not share your details with third parties. We retain briefing request data for no longer than 12 months, after which it is deleted. Submitting the form is entirely voluntary.

Server logs

This site is hosted on Cloudflare Pages. Cloudflare may collect standard server log data — including IP addresses, request paths, and timestamps — as part of its infrastructure operation, processed in accordance with Cloudflare's privacy policy. Bastion Protocol does not have direct access to individual-level Cloudflare log data.

Your rights

If you have submitted a briefing request form and wish to access, correct, or delete the personal data you provided, contact us at contact@bastionprotocol.org. We will respond within 30 days. If you are in the UK or EU, you have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

Changes to this policy

If we add analytics, tracking, or any other data collection mechanism to this site, we will update this policy and add appropriate consent mechanisms before doing so. The effective date at the top of this page reflects the date of the most recent update.

Questions: contact@bastionprotocol.org