Privacy Policy

You can read the Site without signing in. We collect nothing until you sign in. You sign in with an email address or an X account; we do not ask you to connect a wallet.

When you sign in and join the waitlist, we store:

• an account identifier from our authentication provider, which is how we recognise you on return visits;
• your email address, if you signed in with email;
• the invite code you redeemed, and which member's code it was;
• the time you joined, which sets your place in the queue;
• the invite codes we issue to you.

If you sign in with X, our authentication provider reads your X account to confirm who you are. We use that to identify you; we do not post, read your timeline, or see your followers or messages.

We do not run advertising or product analytics on this Site, and we do not collect location data or build profiles about you.

To let you sign back in, to check an invite code is valid and unused, to work out your position on the list, to credit you when someone joins with your code, to spot people gaming the list, and to contact you when access opens. We rely on performing our agreement with you for the waitlist itself, and on our legitimate interest in running a fair invite system and keeping the Site secure.

We use a small number of providers, each handling data on our instructions:

• Privy for sign-in. Your credentials go to Privy, not to us; we never see your password, and we never hold your private keys.
• Supabase for the database that stores the waitlist, hosted in the United States.
• Vercel for hosting and delivering the Site, which involves routine server logs including IP addresses.

Each has its own privacy policy. We do not sell your information, and we do not share it with anyone else except where we are legally required to, or where we need to in order to establish or defend a legal claim.

Because these providers operate in the United States, your information is transferred and stored there. If you are in the UK or EEA, those transfers rely on the providers' standard contractual clauses.

Our authentication provider stores a session token in your browser so you stay signed in. The Site sets no advertising or tracking cookies. Clearing your browser storage signs you out and does not remove you from the waitlist.

Until the waitlist has served its purpose and access has opened to everyone on it, or until you ask us to delete your entry, whichever comes first. If you ask for deletion we remove your entry and release your place; we may keep a record that a code was redeemed so the same code cannot be reused.

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Email legal@blinkslabs.xyz from the address you signed up with, or tell us your X handle, and we will respond within 30 days. There is no charge. If you are in the UK or EEA and are unhappy with our response, you can complain to your local data protection authority.

Traffic to the Site is encrypted, the database is not publicly reachable, and access is limited to people who need it. No system is perfectly secure, so we cannot guarantee it, but we will tell affected people without undue delay if a breach puts their information at risk.

The Site is not for anyone under 18 and we do not knowingly collect their information. If you believe a child has signed up, email us and we will remove the entry.

The waitlist writes nothing to any blockchain and holds no wallet address. When the product launches it will involve on-chain activity, which is public by nature and cannot be edited or deleted by us. We will update this policy before that happens.

If we change this policy we will update the date at the top. If a change materially affects how we use your information, we will tell the people on the waitlist directly.

Blinks Labs, at legal@blinkslabs.xyz. Our Terms of Use also apply to this Site.