Testing environment
Registration privacy notice
This page describes the limited data processing performed by the shareholder registration prototype on auth.set-investors.net.
Information stored
The backend stores a running registration number, email address, a salted password hash, the connected wallet address, the submitted name and residential-address information, the recoverability choice, the SHA-256 registration hash, its first four bytes shown as the nonce, an optional transaction hash, and a confirmation flag.
Security measures
The password itself is not stored. Name and address data are encrypted at rest with AES-256-GCM. Session cookies are HTTP-only, and state-changing API requests require a CSRF token. Email verification tokens are stored only as hashes.
Purpose and current limitations
The data is stored solely to prepare and support shareholder registration for Swiss Equity Token 0.2.31 on Ethereum Sepolia. This version performs no identity, address, sanctions, or plausibility checks. It also does not yet listen for the contract’s registration event, so the backend confirmation flag remains false after a transaction hash is recorded.
Blockchain data
The selected public wallet address, token balance, and Sepolia ETH balance are read from Ethereum through server-side RPC endpoints. The registration hash and recoverability choice become public when the user confirms the contract transaction.
Email is used to confirm the address and to send a data-free submission receipt. Submission-receipt emails do not include the entered name, address, wallet balance, registration hash, or nonce.
Contact
Questions about this test can be sent to christian.ewerhart@econ.uzh.ch.