Privacy Policy

This Privacy Policy describes how Tokemon (“we”, “us”, “our”) handles information when you visit tokemon.si (the “Site”), join the waitlist, connect a wallet, use Genesis Points and tasks, or otherwise interact with our pre-launch marketing services. It applies to the Site and our marketing API at api.tokemon.si (together, the “Services”). It does not cover on-chain activity on public blockchains, which is visible to anyone and governed by network rules, not this policy.

1. Who we are

Tokemon operates the Site to present our upcoming on-chain AI pet product, run a waitlist, and operate a pre-launch engagement program (Genesis Points, referrals, and optional social tasks). For privacy questions or requests, contact us at[email protected].

2. Information we collect

Depending on how you use the Services, we may collect:

• Waitlist information: email address and public wallet address you submit, optional referral code, and timestamps of registration.
• Wallet authentication: when you use Sign-In with Ethereum (SIWE), we verify a cryptographic signature tied to your wallet address and issue a server-side session. We do not receive your private keys or seed phrase.
• Genesis program data: points ledger entries, daily check-in state, referral relationships, campaign task claims (e.g. social tasks), and referral codes we assign to you.
• Technical and security data: IP address, browser type, device information, and request logs generated by our hosting providers (e.g. Cloudflare, Zeabur) for security, abuse prevention, and operations. We may use bot-protection tools (e.g. Cloudflare Turnstile) when enabled.
• Communications: if you email us, we keep the content and metadata needed to respond.

We do not intentionally collect government IDs, full names (unless you put them in an email), or payment card data on the Site. Social tasks may open X (Twitter) in your browser; we do not receive your X password and we do not use the X API to verify task completion unless we state otherwise in the future.

3. How we use information

• Operate the waitlist and send launch-related or program-related email (with your consent where required).
• Authenticate your wallet session and bind your account to one email and one wallet.
• Calculate and display Genesis Points, referrals (including two-tier referral rewards), and task status.
• Prevent fraud, abuse, duplicate accounts, and violations of our Terms.
• Maintain, secure, and improve the Services.
• Comply with law and enforce our policies.

4. Legal bases (EEA/UK visitors)

Where applicable, we rely on: performance of a contract or pre-contract steps (waitlist and account features you request); legitimate interests (security, analytics at aggregate level, product development); and consent (marketing email where required). You may withdraw consent for marketing email by using unsubscribe instructions or contacting us.

5. Cookies and similar technologies

We use HttpOnly session cookies (or equivalent secure cookies) so the marketing API can recognize your signed-in wallet session. These are necessary for wallet login and Genesis features. The Site may also use local storage for wallet connection preferences (e.g. via your browser wallet extension and our front-end libraries). You can control cookies through your browser; disabling session cookies will prevent signed-in features from working.

6. Blockchain and public wallet data

If you connect a wallet or later mint or transfer NFTs, your wallet address and transaction history may be permanently public on the blockchain. We cannot delete on-chain data. We may display your public address on the Site (e.g. truncated in the UI) and link waitlist records to that address for Genesis Points. Block explorers and analytics providers may index your on-chain activity independently of us.

7. Fraud prevention and automated decisions

We may use technical signals (IP rate limits, duplicate wallet/email detection, abnormal referral patterns, Turnstile or similar challenges) to protect the program. Automated decisions may affect your ability to earn points or remain on the waitlist. You may contact us to request human review where required by law.

8. How we share information

We do not sell your personal information. We may share data with:

• Infrastructure providers that host the Site and API (e.g. Cloudflare, Zeabur), under contracts that limit use to providing services to us.
• Email delivery providers if we send waitlist or program emails on our behalf.
• Professional advisers (lawyers, accountants) when necessary and under confidentiality obligations.
• Authorities when required by law or to protect rights, safety, and integrity of the Services.

Your wallet address and any on-chain transactions you initiate are public on the blockchain and outside our control.

9. Data retention

We keep waitlist and Genesis program data for as long as needed to run the campaign, prepare for launch, resolve disputes, and comply with legal obligations. If we delete an account, some ledger rows may remain in backups for a limited period. Aggregated or de-identified data may be kept longer.

10. Security

We use industry-standard measures (HTTPS, access controls, server-side validation of points and claims, immutable ledger design). No method of transmission or storage is 100% secure; use the Services at your own risk and protect your wallet and email access.

11. Your choices and rights

• You may choose not to join the waitlist or connect a wallet.
• Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal data, or to object to certain processing. Contact[email protected]. We may need to verify wallet or email ownership before acting on a request.
• Genesis Points are not transferable; deletion of account data may not reverse public blockchain activity you performed separately.

12. California and similar privacy rights

If you are a California resident, you may have rights under the CCPA/CPRA, including to know categories of personal information collected, to delete certain information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. We do not sell personal information as defined by the CCPA. We do not share personal information for cross-context behavioral advertising. To exercise rights, email[email protected] with “Privacy Request” in the subject. We will not discriminate against you for exercising privacy rights.

13. Children

The Services are not directed at children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect data from children. Contact us if you believe a child has provided personal information.

14. International users

We may process data in countries other than yours. By using the Services, you understand that data may be transferred to jurisdictions that may have different data protection laws.

15. Changes

We may update this Policy. We will post the new version on this page and update the “Last updated” date. Material changes may be communicated by email or a notice on the Site where appropriate.

16. Related documents

See also our Disclaimer andTerms of Service. Genesis Points are described in our program documentation; they are not financial products and do not guarantee rewards.