Privacy Policy

This policy explains how Rugless collects, uses and shares information when you use the Rugless website and app (the "Service"), join the waitlist or contact us. It goes together with our Terms of Use.

Login is handled by Privy. When you create an account, a wallet is generated for you.

Account and login. When you sign in with X or Telegram through Privy, we receive a Privy user identifier, the login provider you used, and the details that provider shares: your X username, name and profile picture, or your Telegram username, name and profile picture. If an account has no name or picture yet, we may use them, and your X or Telegram username as your starting handle, to fill in your public profile, and you can change them at any time. We do not receive your X or Telegram password, and we do not read your messages or contacts.

Profile. Your handle (generated for you and editable), and optionally a display name, bio, avatar and banner links, who you follow, and your notification preferences.

Wallet and activity. The public address of your wallet, your balances, and a record of your transfers, trades, Customsale and Curvesale contributions, claims and refunds in the Service.

Waitlist. If you apply for early access: your X handle, Telegram handle, the wallet of your account, the amount you plan to invest, the IP address and browser details (user agent) used when you submitted, and the result of a bot check.

Content you post. Anything you write or upload in the Service, such as posts and profile text.

Technical data and logs. IP address, browser and device type, pages and actions, and security and audit logs, including logs of administrator actions.

Local storage. Your browser stores a Rugless session token so you stay signed in, and your choice to hide balances. See Cookies and local storage.

From you; from your login provider through Privy; from your browser or device; and from public blockchains, which is where balances and on-chain activity come from.

• to create and run your account, sign you in, and give you a wallet;
• to show your profile, positions, activity and rankings in the Service;
• to carry out the actions you ask for, such as transfers, Customsale and Curvesale contributions and wallet export;
• to run the waitlist and contact people about access;
• to keep the Service safe: preventing fraud, abuse, bots, manipulation and sanctions violations, and investigating incidents;
• to moderate content and enforce our Terms;
• to send you notices you asked for, such as Customsale and Curvesale updates, and service messages;
• to understand reliability and fix problems;
• to meet legal obligations and to record that you accepted a version of our Terms where we require it, for example for Customsales and Curvesales.

Where the law requires a legal basis, we rely on: providing the Service you asked for (contract); our legitimate interests in running and securing it; your consent where we ask for it, which you can withdraw at any time (this may switch off features that depend on it); and legal obligations.

Blockchains are public and permanent. Your wallet address, its balances and its transactions can be seen by anyone, and we cannot edit or delete them. Anything you do on chain stays there even if you delete your account.

We do not sell your personal information, and we do not share it for advertising across other companies' sites.

We share information with the companies that help us run the Service. Today these include:

• Privy, which handles sign-in and receives your login identity (see Privy's privacy policy);
• X and Telegram, when you choose them to sign in, under their own policies;
• Cloudflare, which provides the bot check (Turnstile) on the waitlist and sees your IP address and browser details;
• Google, which serves the font files we use, and so receives your IP address when a page loads;
• our hosting and database providers, which store the data described above;
• blockchain and RPC providers, which receive the public addresses and transactions we read or send.

Those providers may only use the data to provide their service to us, except where they are independent controllers of their own data, as with login providers.

We may also disclose information when the law requires it, to protect rights, safety and security, to investigate abuse, or as part of a merger, sale or reorganization, and with your consent.

Your public profile is visible to everyone, and it shows your handle, display name, bio, avatar, banner, follower counts, linked X handle, launches, positions and trading activity in the Service. Do not put anything in those fields that you do not want to be public.

The Service links to and depends on services we do not control, such as blockchain networks, launchpads, explorers and login providers. Their handling of your data is covered by their own policies, not this one.

We and our providers use local storage, cookies and similar technologies for the following: keeping you signed in (a Rugless session token and Privy's own session data), remembering preferences such as hiding balances, and running the bot check on the waitlist. You can clear them in your browser, but you will be signed out and some features may stop working.

We do not currently use advertising trackers or third-party analytics tools in the Service. If that changes, we will update this policy first.

We keep account and profile data while your account is active and for as long afterwards as we need it for security, to resolve disputes, to keep records the law requires, and to enforce our Terms. Waitlist entries are kept until the early access period has ended and for a reasonable time after. Security and audit logs are kept for a limited period.

Blockchain records cannot be deleted by anyone.

We use technical and organizational safeguards that we believe are appropriate. Exporting a private key requires a live login and is rate limited.

No system is perfectly secure, and we cannot promise that your information or your wallet will never be compromised. Protect the login accounts you use with Rugless, keep your devices secure, and never share a private key or a recovery code with anyone.

Our providers and servers can be in countries other than yours, where data protection law may differ. Where the law requires it, we use safeguards for those transfers.

You can edit your profile and handle in the Service. Depending on where you live, you may also have the right to access, correct, delete or get a copy of the personal information we hold off chain, to object to or restrict some processing, to withdraw consent, and to complain to a data protection authority. We will not treat you worse for using these rights.

To make a request, write to [email protected]. We may ask you to prove who you are first. We cannot change or remove public blockchain data, and we may keep information we are required to keep by law or need to protect against fraud and abuse.

We do not sell personal information and we do not share it for cross-context behavioral advertising. Residents of some states have rights to know, access, correct, delete and obtain a copy of their personal information, and to appeal a refused request. You can use them by writing to the contact address in this policy.

The Service is not for anyone under 18, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will remove it.

We do not track you across other websites, so we do not act on Do Not Track signals. If we adopt a standard that we must follow, we will say so here.

We may update this policy. The new version takes effect when it is posted, with a new effective date, and for material changes we will try to tell you in the Service.

Questions, requests and complaints about privacy go to [email protected].