Know what is public, private, and stored.

The application and contact

Bondline is maintained through the Bondline project repository. Its maintainers operate the website and social-service boundary. Use the contact page for the currently configured support channel. This notice does not claim a registered company, certification, or jurisdiction-specific compliance status.

Public on-chain data

Account addresses, Circle membership and invitations, commitments, stakes, deadlines, backing, evidence links, outcomes, and rewards are published on Monad. They can be read, copied, and indexed independently of Bondline. Blockchain records cannot be erased by deleting a profile or leaving this website.

An address is not your legal identity, but other information may link it to you. Do not put sensitive personal information in commitment descriptions or evidence URLs.

Profiles, images, and Circle identity

Display names, avatar choices, Circle missions, goals, and banners are stored in Supabase for display in the product. Uploaded avatar and banner images use a public storage bucket; knowing the URL can allow access outside the Circle. Use images intended for public display.

These fields are optional. Circle metadata is shared group content and may be updated by other members. Removing your profile cannot remove another member’s on-chain activity or shared records.

Circle conversation

Chat messages store the sender’s account, Circle address, message body, and time. The application checks signed-in identity and current Circle membership before reading or sending messages. This is access control, not end-to-end encryption: maintainers and database infrastructure can access stored messages.

Members can copy messages they see. Do not use chat for private keys, recovery credentials, confidential medical or financial records, or information you would not share with your group.

Cookies and browser storage

• An HttpOnly sign-in cookie lasts up to seven days. A short-lived nonce cookie lasts up to five minutes. They establish identity for private app features.
• Browser storage retains a Mera credential identifier, onboarding state, notification preferences, notification read state, and encrypted journal vaults. Signing or journal encryption keys are not deliberately persisted there. Journal plaintext stays in memory while open; saved notes lock when the page is hidden. Unsaved notes remain open until saved or discarded.
• The private journal is stored only on the device and is not uploaded by Bondline. Export an encrypted backup before clearing storage. Import requires the same account, network, domain, and available passkey; Bondline cannot recover a lost encryption key. An unlocked page or compromised device can expose notes.
• Preference and notification state is stored per account and deployment network on the device; it is not synced between devices.
• Clearing browser storage does not delete a passkey from your password manager or erase on-chain history. Passkey recovery belongs to your provider.

Infrastructure and retention

The application uses Vercel hosting, Supabase database/storage, Monad RPC infrastructure, and Envio event retrieval when configured. Requests may reveal ordinary connection data such as IP address, request metadata, and account addresses to infrastructure providers. Optional GitHub verification queries public GitHub data.

On-chain data is persistent. Off-chain profiles and messages remain stored until removed through available controls or a processed support request. Infrastructure logs and backups can follow provider retention policies; immediate deletion from every backup is not promised. Uploaded public URLs may have been cached by others.

The current build does not intentionally send behavioral data to a separate advertising analytics provider. Public activity metrics come from contracts and indexed events; they do not establish a count of unique real people.

Your controls

Settings lets you edit your profile, choose local notification preferences, export your current profile and up to the latest 2,000 messages you authored, and reset local preferences. The export does not include other members’ messages, passkeys, signing material, or provider secrets. If the message limit is reached, the file states that it may be incomplete.

For removal or access questions, contact the maintainers. Do not post private conversation content or secrets in a public issue. Where no private contact address is configured, ask for a private channel first. On-chain deletion and Bondline-operated passkey recovery are not available.