1. Who is responsible
Zack Letang, using the author and promotional name ZLETZ, is responsible for the personal information described in this Notice.
- Website
- www.thehiddenledger.co.uk
- Privacy email
- privacy@thehiddenledger.co.uk
- Postal privacy contact
- Unit 172169, PO Box 7169, Poole, BH15 9EL
2. Scope and age
This Notice covers the public Website, Ledger Hunt accounts and claims, First Key delivery, optional Hall of Key Holders, support communications and eligible Phase Two access. A wallet, marketplace, blockchain explorer, social network or other linked third party has its own notice and may be independently responsible for information it collects.
The Hunt is intended for adults aged 18 or over. Hunt claims from children are not knowingly accepted.
3. Information that may be collected
Account and eligibility
- Email address, account ID, authentication records and preferences.
- Chosen display name or alias, country or region, language and time zone where provided.
- Age confirmation and limited additional evidence only where reasonably required by law or an eligibility dispute.
Claim and puzzle information
- Challenge code, submission time, answers, explanation and the reference information required by the claim form.
- Proof photograph and available technical metadata.
- Review notes, fraud indicators, clarification, decision, appeal and certificate number.
- Accessibility requests, which may reveal health or disability information if a participant chooses to provide it.
A claimant's face will not be required. Claimants should avoid bystanders and unnecessary personal information.
Wallet and NFT information
- Public wallet address, connection and signature result, selected network and delivery status.
- First Key number, token ID, contract address and transaction hash.
- Public ownership and transfer information obtained from Base, explorers, marketplaces or infrastructure providers.
The Website never needs and will never ask for a wallet seed phrase or private key.
Website, device and communications
- IP address, device and browser type, approximate region, security logs and consent choices.
- Pages viewed and claim-flow diagnostics, subject to cookie choices where required.
- Support messages, complaints and other communications.
Optional public and marketing information
- Hall alias, chosen profile text, optional country or region, Key number and publication consent.
- Marketing subscription, consent time, engagement and unsubscribe record.
4. Where information comes from
Most information comes directly from the participant. Technical information may come from devices and service providers. Public wallet and transaction information may come from the Base blockchain, explorers, marketplaces and infrastructure providers. A later token holder may give a wallet address when requesting support.
5. Why information is used
Run the Hunt
Create accounts, issue codes, receive claims, verify solutions, decide reviews and provide certificates. UK/EU basis: contract and steps requested before contract.
Deliver First Keys
Connect a wallet, sponsor initial gas, mint or transfer a token and troubleshoot delivery. Basis: contract and legitimate interests.
Provide Phase Two
Authenticate a Verified Solver, preserve non-transferable progress and unlock eligible content. Basis: contract and legitimate interests.
Protect integrity
Prevent duplicate claims, manipulated proof, account abuse, attacks, counterfeit tokens and fraud. Basis: legitimate interests and legal obligation where applicable.
Comply and support
Handle sanctions, legal requests, disputes, security, support and accessibility. Basis: legal obligation, contract and legitimate interests as applicable.
Optional publication
Publish a Hall alias or send marketing only under the separate choice and lawful basis shown at the time, normally consent.
Legitimate interests include operating a fair skill hunt, protecting participants and systems, maintaining an audit trail, preventing fraud, defending legal claims and improving the service. These interests are balanced against individual rights.
6. Manual decisions and integrity checks
Automated tools may flag duplicate accounts, unusual traffic, reused images, wallet risk or inconsistent submissions for human review. They will not make the final decision to reject a genuine Phase One claim without meaningful human review. A claimant may request an internal review under the Official Rules.
7. Public blockchain information
A claimant's name, email, proof photograph and puzzle answers are not intended to be written to the blockchain. A wallet address is linked to the off-chain account only as needed for delivery and custody records. A participant may use a fresh wallet to reduce unwanted linkage, provided its use is lawful and secure.
Eligible off-chain information may be deleted or unlinked following a valid request, but independent nodes, explorers, marketplaces and archives cannot be controlled by the Website.
8. Who may receive information
Only information reasonably necessary for a task may be shared with Krystal for website hosting and email services; database, secure-storage, authentication, support, fraud-prevention, image-integrity, security-monitoring and audit providers; Base network infrastructure; wallet and gas-sponsorship services; Manifold and related token-metadata services; and professional advisers. Information may also be disclosed to courts, regulators, law enforcement, tax authorities or a genuine successor where lawful and necessary.
Wallets, marketplaces and blockchain explorers ordinarily decide their own purposes and may be independent controllers. Their terms and notices apply. Personal information is not sold or shared for cross-context behavioural advertising.
9. International transfers
The Hunt is intended for international participation, and providers or infrastructure may process information outside a participant's country. Public blockchain information is replicated globally by design. Where UK or European transfer restrictions apply to non-public information, an approved adequacy decision, contractual safeguards or another lawful mechanism will be used as required.
10. Retention
These periods may be extended for an active dispute, legal hold, fraud investigation or binding legal duty.
- Incomplete or rejected proof
- Six months after decision or appeal, then delete or irreversibly anonymise.
- Approved proof photograph
- 24 months after verification, then delete or irreversibly anonymise unless needed for an active dispute.
- Core account and claim record
- While the account or Phase Two entitlement is active, then up to six years for contract, fraud and legal-claim records.
- Key and custody linkage
- While needed to operate the service, then up to six years after account closure. Public blockchain records remain indefinite.
- Security logs
- Normally 12 months, longer for a documented security investigation.
- Support and complaints
- Normally 24 months after closure, or up to six years where needed for a contractual dispute.
- Optional Hall
- Until consent is withdrawn or the Hall closes, subject to public blockchain and lawful archive limitations.
- Marketing
- Until unsubscribe or withdrawal, plus a minimal suppression record.
11. Security
Proportionate safeguards are intended for off-chain information, including access controls, authentication, encryption in transit, restricted proof access, logging, backups, provider controls and deletion procedures. No internet or blockchain system can be guaranteed completely secure.
Participants should use a unique password, enable available multi-factor authentication, verify the official domain and contract address, and never disclose a wallet seed phrase or private key.
12. Cookies and similar technologies
The public Website does not require non-essential advertising cookies. The account and claim service uses strictly necessary session and security technologies for sign-in, challenge codes and claim submission. Analytics or marketing technologies requiring consent remain off unless the user makes a separate choice.
13. Hall and marketing choices
Hall publication and marketing will be separate, optional choices. Neither will be required to make a claim or receive a First Key. Consent may be withdrawn for future display or messages, although withdrawal cannot erase public blockchain records or make earlier lawful processing unlawful.
14. Individual rights
Depending on applicable law and residence, a person may have rights to information, access, correction, deletion, restriction, portability, objection, withdrawal of consent, human review of a qualifying automated decision, and complaint to a regulator.
To exercise a right, email privacy@thehiddenledger.co.uk. Proportionate information may be requested to verify identity and protect the account. Under UK GDPR the normal response period is one month, subject to lawful extension. Rights can be limited where information must be retained by law, is needed for legal claims, concerns another person or exists only on an immutable public blockchain.
15. Complaints and changes
Please contact the privacy email first so the issue can be investigated. A person may also complain to the UK Information Commissioner's Office or a privacy regulator in their country where they have that right. Contacting the Website does not remove a right to complain directly or seek a legal remedy.
This Notice may be updated when the Hunt, providers, technology or law changes. A material change affecting existing information will receive prominent notice and consent where required.
16. Contact details
- Controller
- Zack Letang / ZLETZ
- Postal address
- Unit 172169, PO Box 7169, Poole, BH15 9EL
- Privacy email
- privacy@thehiddenledger.co.uk
- Website
- www.thehiddenledger.co.uk
- Notice version
- 1.0
- Effective date
- 7 October 2026 at 18:00 UTC