Anonymous by design

Rumors never asks for your real name, and we never receive any biometric data. Human verification is done through World ID as a zero-knowledge proof: you prove you are a unique human without revealing who you are. We store only a cryptographic, per-app nullifier hash — an anonymous identifier that lets us enforce “one human, one account” without ever identifying you.

What we collect

• Account — a username you choose (not your real name) and a password, which is stored only as a salted hash.
• Human-verification status — your World ID nullifier hash and the verification tier you reached (device, selfie, unique human). No biometrics, no images.
• Your content — the posts, comments, reactions/votes and ticker subscriptions you create on The Wall.
• Safety data — reports and blocks you submit, and moderation events recorded when content is filtered, so we can keep The Wall safe.
• Recovery — if you generate a recovery phrase, we store only a hash of it so you can recover your anonymous account.
• Technical logs — standard server logs (including IP address) kept briefly to secure the service and prevent abuse.
• Authentication tokens — in the mobile app, a login token is stored securely on your device (Apple Keychain via secure storage); it is not shared with third parties.

What we do NOT collect

No real name, no biometric data, no contacts, no location tracking, no advertising identifiers, and no third-party analytics or ad trackers. We do not sell your data, and we do not build advertising profiles.

Public and permanent by nature

Posts you publish are visible to other verified members. To prove the antecedence of a scoop, each post’s content hash (not its content) is timestamped on the Bitcoin blockchain through public OpenTimestamps calendars. Because the blockchain is public and permanent, a hash that has been anchored cannot be erased, even after you delete the post — but the hash alone does not reveal the content or its author.

Who we share with

We share data only with the service providers strictly needed to run Rumors: World ID / the World Developer Portal to validate your human-verification proof, public OpenTimestamps calendars to anchor content hashes, and our hosting and email providers. We never sell your data or share it for advertising.

Your choices and rights

You can edit or delete your own posts at any time. You can permanently delete your account from your profile (confirmed with your password): this removes your account and your posts from Rumors. Depending on where you live, you may also have rights to access, correct, or export your data — contact us to exercise them.

Data retention

We keep your account data until you delete your account. Some records required for safety and abuse prevention (such as a banned human’s nullifier hash) may be kept longer to enforce bans. Content hashes anchored to Bitcoin are permanent by nature.

Children

Rumors is not intended for children. You must be old enough to use a financial-discussion community and to complete World ID verification.

Changes

If this policy changes materially, we will update this page. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy or a data request? Email contact@market-rumors.com.