This Privacy Policy explains how dnut llc ("we", "us", "our") handles information in connection with the dNut Inu website, the dNut Inu pre-sale, the dNut Inu game and leaderboard, and the dNut Inu mini app distributed through Farcaster and compatible clients (together, the "Services").

It applies alongside our Pre-Sale Terms and Conditions. Where this policy describes how information is handled and the Terms describe the basis on which you participate, the two are intended to be read together. Nothing in this policy creates rights beyond those required by applicable law, and nothing in it varies the Terms.

For any privacy question, contact us at hello@dnut.life.

The Services are designed to work without accounts, names or email addresses. The information we hold is as follows.

Wallet and contribution information. When you connect a wallet or contribute to the pre-sale, we record your public wallet address, the amount contributed, the transaction hash, the allocation calculated against your address, any referral code used, and the referring wallet address where one applies.

Referral information. We generate and store a referral code against your wallet address, together with records of contributions attributed to it and any bonus calculated.

Game and activity information. If you play the game while connected, we record your wallet address together with scores, streaks, totals, number of games played and the time you last played, in order to operate the leaderboard and any related rewards.

Mini app information. If you add the mini app in a Farcaster client, we receive and store your Farcaster ID (FID) and, where you enable notifications, a notification token and endpoint supplied by that client so that notifications can be delivered.

Technical and usage information. Our hosting provider and analytics tools automatically process information such as IP address, approximate location derived from it, browser and device type, operating system, referring page, pages viewed and time of access. This is used for security, abuse prevention and understanding how the Services are used.

Information you send us. If you contact us by email or through a social or messaging channel, we hold what you choose to send, including any contact details within it.

Verification information. Where we are required to carry out identity or source of funds checks, or where we need to verify control of a wallet, we may collect identity documents and related information at that point. We do not collect this routinely.

We do not collect or store private keys, seed phrases, recovery phrases or wallet passwords. We have no ability to access, move or recover funds in your wallet.

We will never contact you first to request any of the above. Any message that appears to come from us and asks for a key, phrase or password is fraudulent. See section 15.

A wallet address does not directly identify you. In some circumstances it may be linked to an individual, whether by us, by you, or by a third party analysing public blockchain data. Where a wallet address or related record can be linked to an identifiable person, we treat it as personal data and handle it in accordance with this policy and applicable law.

We use the information described above in order to:

• operate the website, the game, the leaderboard and the mini app
• record contributions, calculate allocations, operate the referral programme and make any distribution
• deliver notifications you have enabled
• detect, investigate and prevent fraud, abuse, multi account activity, automated play and security incidents
• meet legal and regulatory obligations, including sanctions screening, anti money laundering requirements and record keeping
• respond to you, keep records of our dealings, and establish, exercise or defend legal claims
• understand usage of the Services, measure the effectiveness of our marketing and improve what we offer

We do not use your information to make decisions producing legal effects about you by automated means alone, other than routine automated fraud and sanctions screening, the outcome of which you may ask us to review.

Where data protection law such as the UK GDPR or EU GDPR applies, we rely on the following legal bases:

• Contract. To record your contribution, calculate your allocation and make any distribution under the Terms.
• Legitimate interests. To operate and secure the Services, prevent fraud and abuse, understand usage, and protect our legal position. We balance these against your interests and rights.
• Legal obligation. For sanctions screening, anti money laundering, tax and accounting obligations, and responses to lawful requests.
• Consent. For non essential cookies and similar technologies, and for notifications, in each case where consent is required. You may withdraw consent at any time.

Browser storage. The Services use local and session storage in your browser for things such as remembering that an introductory animation has been shown and keeping interface state. This stays on your device.

Wallet connections. Connecting a wallet stores connection state in your browser so that the session can be restored.

Meta Pixel. The website includes the Meta (Facebook) pixel, which loads a script from Meta and reports page views. It allows us to measure and target advertising. This involves Meta receiving your IP address, information about your browser and device, and the pages you visit, and Meta may link that to an account you hold with it. Meta acts as an independent controller for its own purposes, and its handling is governed by its own privacy policy.

You can limit this by using your browser privacy settings, an ad or tracker blocker, or the advertising controls in your Meta account. Where we offer a consent control on the website, your choice there governs whether non essential tracking loads.

Infrastructure providers. Our hosting, database and blockchain connection providers process technical request data, including IP addresses, in order to deliver the Services.

Contributions are made on a public blockchain. Wallet addresses, transaction hashes, amounts, timing and any later distribution are recorded publicly and permanently by the network itself. That record is not ours, it is not held on our systems, and it is visible to anyone.

We cannot amend, delete, anonymise, restrict or recall blockchain data, and no request to us can achieve that. This is a characteristic of the technology, not a choice we make. Rights to erasure, rectification and restriction cannot be exercised against blockchain records, whether held by us or by anyone else.

Third parties, including analytics firms, exchanges and the public, may examine that data and may attempt to associate a wallet address with an identity. We have no control over and accept no responsibility for that activity.

You should consider this before contributing from a wallet you wish to keep unconnected to your identity.

We do not sell your information. We share it only as follows:

• Service providers who operate infrastructure on our behalf, including hosting, database, analytics, communications and security providers, acting on our instructions
• Compliance and screening providers used for sanctions, wallet risk and anti money laundering checks
• Professional advisers such as lawyers, auditors, accountants and insurers
• Authorities including regulators, tax authorities, law enforcement and courts, where required by law, where we are permitted to do so, or where we consider it appropriate to protect our rights, our users or the public
• A successor in connection with a reorganisation, merger, acquisition or transfer of our business or assets

Aggregated and statistical information that does not identify any individual, such as totals raised, participant counts and leaderboard standings shown by wallet address, may be published.

The Services depend on third parties whose own terms and privacy policies apply to your use of them. These include wallet providers and connection services, blockchain network and node providers, our hosting and database providers, Meta in respect of the pixel described above, and the Farcaster client through which the mini app is distributed.

We do not control those parties and are not responsible for their practices, their availability or their security. Where you interact with them you do so on their terms, and you should read their policies.

We and our providers may process information in countries outside the one you live in, including countries whose data protection laws differ from yours. Where required, we use appropriate safeguards for such transfers, such as standard contractual clauses or an adequacy decision. You may request details of the safeguards used by contacting us.

Blockchain networks are global by design. Data recorded on a public blockchain is replicated worldwide and is outside our control.

We keep information for as long as needed for the purposes described in this policy, and then for as long as required for legal, regulatory, tax, accounting, audit or dispute purposes.

Contribution, allocation and distribution records are kept for the life of the Project and for the period afterwards required by law or needed to establish, exercise or defend legal claims, which may be several years.

Where we are required to retain records, we will do so even if you ask us to erase them.

Depending on where you live, you may have rights to request access to your personal data, to have it corrected, to have it erased, to restrict or object to its processing, to receive it in a portable form, and to withdraw consent where we rely on consent. You may also complain to your data protection authority.

To make a request, contact us at hello@dnut.life.

Before acting on a request relating to a wallet address, we will require proof that you control that wallet, normally by a signed message from it. We may refuse a request where we cannot verify control, where the request is manifestly unfounded or excessive, or where acting on it would infringe the rights of others.

These rights do not apply to information recorded on a public blockchain, for the reasons set out in section 8, and do not override our legal obligations to retain records.

The Services are not directed to anyone under 18 and we do not knowingly collect information from children. Participation in the pre-sale requires you to be at least 18. If you believe a child has provided information to us, contact us and we will delete what we can, subject to section 8.

We take reasonable technical and organisational measures to protect information in our systems. No website, database or transmission method is completely secure, and we cannot and do not guarantee the security of any information. You provide information at your own risk.

You are responsible for the security of your own wallet, devices and accounts. We are not responsible for losses arising from phishing, impersonation, fraudulent websites, fake announcements, compromised third party accounts, or your disclosure of information to anyone.

We publish addresses and announcements only through our official channels. Always verify before sending anything or connecting a wallet.

Nothing in this section limits liability that cannot be limited under applicable law. Our liability is otherwise subject to the limits in the Terms.

The Services link to external sites including social platforms, messaging groups, block explorers and exchanges. We are not responsible for their content, security or privacy practices.

We may update this policy at any time by publishing the updated version with a new effective date. Material changes will be indicated on the website where reasonably practicable. Continued use of the Services after publication constitutes acceptance of the updated policy.

This policy and any dispute arising from it are governed by the laws of British Virgin Islands, without affecting any mandatory rights you have under the data protection law of the country you live in.

Privacy questions, requests and complaints can be sent to hello@dnut.life.