Legal
Privacy Policy
- This site sets no tracking cookies.
- No analytics are collected on any page.
- All fonts and scripts are self-hosted, so no third-party resource loads when you view this site.
- The only personal data collected is what you voluntarily submit via the enterprise briefing form.
What this site is
bastionprotocol.org is a static website operated by Bastion Protocol. It consists of a protocol overview page, an enterprise page, and this policy. No page runs JavaScript analytics, advertising trackers, session recording tools, or any other client-side telemetry. The animated background is rendered locally in your browser and transmits nothing.
Cookies
This site does not set cookies, and as of July 2026 it loads no third-party resources at all: fonts and scripts are served from bastionprotocol.org itself. Under GDPR, a cookie banner is only required when non-essential cookies are set; because this site sets none, no banner is displayed. If this changes (for example, if analytics are added) this policy will be updated and a consent mechanism added before any tracking begins.
Enterprise briefing form
The enterprise page includes a briefing request form. When you submit it, the data you enter (name, role, organisation, email address, regulatory jurisdiction, and use case description) is transmitted to and processed by Formspree, a third-party form processing service. This is the only moment any data leaves this site, and it happens only when you choose to submit.
Bastion Protocol receives this data solely to respond to your briefing request. We do not share your details with third parties. We retain briefing request data for no longer than 12 months, after which it is deleted. Submitting the form is entirely voluntary.
Server logs
This site is served via Cloudflare. Cloudflare may collect standard server log data (including IP addresses, request paths, and timestamps) as part of its infrastructure operation, processed in accordance with Cloudflare's privacy policy. Bastion Protocol does not have direct access to individual-level Cloudflare log data.
Your rights
If you have submitted a briefing request and wish to access, correct, or delete the personal data you provided, contact us at contact@bastionprotocol.org. We will respond within 30 days. If you are in the UK or EU, you have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.
Reporting security issues
Security researchers can find our disclosure contact in /.well-known/security.txt. We welcome responsible disclosure.
Changes to this policy
If we add analytics, tracking, or any other data collection mechanism to this site, we will update this policy and add appropriate consent mechanisms before doing so. The effective date at the top of this page reflects the most recent update.