Last updated: December 29, 2025
Introduction
Strata Labs, a brand of PANDOR MEDIA GROUP ("we", "our", "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use StrataX and our official relay services.
By using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.
Understanding Strata's Decentralized Nature
Strata is an open, decentralized protocol. While we operate StrataX (this client application) and official Strata Labs relays, the protocol itself is open and can be implemented by anyone. Your data may be transmitted through or stored on third-party relays that we do not control.
This Privacy Policy applies only to data processed by Strata Labs services. Third-party relay operators are independent data controllers responsible for their own privacy practices.
Data Controller
PANDOR MEDIA GROUP
SIRET: 979 029 352 00015
114 Rue du Maréchal Joffre
85000 La Roche-sur-Yon, France
contact@stratalabs.io
Data We Collect
Identity Data
- Your StrataID (decentralized identifier)
- Display name and handle (if provided)
- Profile information you choose to share
Content Data
- Posts, messages, and media you publish
- Interactions (likes, reposts, replies)
- Trust relationships you establish
Technical Data
- IP address and connection metadata
- Device information and browser type
- Usage patterns and performance data
Legal Basis for Processing
- Consent: When you create an account and agree to these terms.
- Contract: To provide and maintain our services to you.
- Legitimate Interest: To improve our services, ensure security, and prevent abuse.
Data Retention
Content you publish on the Strata Protocol is designed to be persistent and may be stored indefinitely across the decentralized network. You retain control over your identity and can revoke access to relays at any time.
Technical logs and analytics data are retained for a maximum of 12 months, unless longer retention is required for legal compliance or security purposes.
Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data from our systems (note: data on third-party relays is outside our control).
- Right to Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
To exercise these rights, contact us at contact@stratalabs.online with your request.
Third-Party Relays
When you connect to third-party relays, your data is transmitted to and processed by independent operators. We have no control over their data practices, security measures, or compliance with privacy laws.
We strongly recommend reviewing the privacy policies of any third-party relays you choose to connect to. You connect to third-party relays entirely at your own risk.
Security Measures
We implement industry-standard security measures to protect your data:
- End-to-end encryption for direct messages
- Cryptographic signatures for content authenticity
- Secure key storage on your device
- TLS encryption for all data in transit
Cookies & Local Storage
StrataX uses local storage and session storage to maintain your preferences, authentication state, and cached data. We do not use tracking cookies or third-party analytics.
Essential storage is required for the application to function. You can clear this data at any time through your browser settings.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
For any questions about this Privacy Policy or our data practices, contact us at contact@stratalabs.online.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.