How we handle your data

Last updated: 2026-10-15

1. Who we are

CCPEDIA is operated by Unity Nodes. It is a read-only aggregator of publicly available Canton Network content (CIPs, forum, mailing lists, docs, whitepapers, blog, releases). No accounts, no logins, no profiles.

Contact: contact form

2. What we collect

Little, and none of it is used to identify you. Specifically:

For rate-limiting only: your IP address and the time of each request to a form, the chart pane on /vitals or the API. Stored in our SQLite database for up to 7 days, then automatically purged. We use it to stop one visitor from overloading the site. We don't link it to any identity.
Visit and usage logs: for each page view we record the page, the referrer, your browser's user-agent string, a session identifier from the ccpedia_sid cookie and a one-way hash of your IP address. The hash is keyed with a secret and the date, so we can count unique visitors per day but cannot recognise you across days, and the hash cannot be turned back into an address without the secret. Calls to the API and the MCP server are logged with the endpoint or tool, the parameters (which can include search terms), the user-agent and a session identifier: for a direct caller, a hash of the IP address and user-agent keyed with the same secret. The terms you type into search are logged on their own, with the time, the number of results and nothing that identifies you. All of these logs are deleted after 180 days, and only running totals are kept.
What you send through a form: the contact and partnership forms take your name, email and message, plus your IP address so we can act on abuse. We email it to ourselves, keep a row recording that a submission happened, and post a copy of the name, email and message to a private Discord channel so the enquiry is actually noticed. The IP is not sent to Discord. We keep the message for as long as we need it to answer you.
Project submissions: the form on the ecosystem page takes the project name, link, description, category and the contact and social details you choose to fill in, plus your IP address so we can act on abuse. We keep it for as long as we need it to review the entry.
Theme preference: light/dark, stored in your browser's localStorage. Never reaches our server.

We never ask for a name or an email to browse, only in the forms above where you choose to give them. We load no advertising tags and no cross-site trackers. Site statistics come from our own Plausible instance at stats.unitynodes.com, which sets no cookies, and errors are reported to our own tracker at errors.unitynodes.com. Both are run by Unity Nodes.

3. Third-party services

Some features send text you type to outside providers. They process it under their own privacy terms:

OpenAI (embeddings): your search terms, so results can be matched by meaning: privacy
Cloudflare Workers AI (reranking): your search terms with the candidate results, to put them in a better order: privacy
Groq: the question you type into the chart pane on /vitals: privacy
Anthropic: the same question, only when Groq cannot answer: privacy

We don't control how long they keep it. Don't put confidential information into any of these.

Separately, when you submit the contact or partnership form we post your name, email and message to a private Discord channel we control, so the enquiry is seen rather than buried. Discord processes it under its own privacy policy. Your IP address is not sent there.

4. Cookies

One first-party cookie, ccpedia_sid: a random identifier that lasts one year and ties your page views together in our own visit log. It holds nothing about you and is not shared with anyone. No marketing cookies, no third-party cookies. You can clear it in your browser at any time and the site works the same.

5. Your rights

You can ask us to show or delete whatever we hold on you: your rate-limit record (include the IP address you used), anything you sent through a form (include the email address you used), and your visit records (include the value of your ccpedia_sid cookie). Use the contact form. We'll reply within 30 days.

6. Security

Served over HTTPS. The site runs on a server we operate ourselves and the SQLite database lives on that server. We do not sell it, share it with advertisers, or hand it to anyone beyond the services named in sections 2 and 3.

7. Changes

If anything material changes we'll bump the date at the top. Continued use after a change means you accept the update.