Uniswap Privacy Policy

This document is the Uniswap Labs Privacy Policy (last modified April 22, 2024), governing data collection, use, storage, and sharing practices across Uniswap Labs products including the web app, mobile app, and browser extension, with no stated legal basis beyond general consent implied by use. The policy states that Uniswap Labs collects wallet addresses, transaction data, device identifiers, IP addresses, browser metadata, and survey responses, and the terms authorize sharing this information with third-party service providers, analytics vendors, and affiliates for business operations and marketing purposes. Notably, the policy states that blockchain transaction data is publicly visible by nature and that Uniswap Labs does not control on-chain data, a carve-out that is operationally distinct from typical privacy policies given the pseudonymous but permanent nature of blockchain records; additionally, the policy asserts broad discretion to use aggregated or de-identified data without restriction, though applicable law in certain jurisdictions may limit what qualifies as truly de-identified. The policy engages GDPR and UK GDPR frameworks for EU and UK users respectively, CCPA and CPRA for California residents, and touches on financial data privacy considerations given the crypto-asset trading context, though the policy does not explicitly invoke any specific GDPR legal basis such as legitimate interests or contractual necessity. Compliance teams should note the absence of explicit data retention periods for most data categories, the reliance on standard contractual clauses for international transfers without specific detail, and the policy's assertion that it may share data with law enforcement without user notification in certain circumstances.