Scope and operator
This Privacy Policy explains how Gulag ("Gulag," "we," "us," or "our") handles personal information when you use Gulag's websites, waitlist, referral program, beta access tools, and related services (collectively, the "Services").
It does not replace the privacy terms of third-party wallets, blockchains, social networks, or other services you choose to use.
Information we collect
Depending on how you use the Services, we may process:
- Account and authentication data: your email address, Google account identity, authentication tokens, and the unique user identifier issued by our authentication provider.
- Optional connected-account data: a public wallet address and information showing that you linked a wallet or X account. Gulag's waitlist record stores reward status rather than private keys, seed phrases, or wallet credentials.
- Waitlist and referral data: your generated display name, referral code, referral relationships, points, completed reward tasks, and leaderboard position.
- Verification data: an email address or Solana address you submit to check beta eligibility.
- Technical data: IP address, browser and device information, request timestamps, diagnostic information, and security or abuse-prevention signals generated when you access the Services.
Where information comes from
We receive information directly from you, from authentication and social providers you choose to connect, from your wallet provider, and from public blockchain records. We also receive basic technical data automatically from your browser and our infrastructure providers.
How we use information
We use information to:
- authenticate you and maintain your session;
- operate the waitlist, points, referrals, and leaderboard;
- verify eligibility and connected-account rewards;
- provide, troubleshoot, secure, and improve the Services;
- detect spam, fraud, abuse, and violations of our terms;
- communicate service or policy updates; and
- comply with law and protect users, Gulag, and others.
We do not sell personal information or use it for targeted advertising. Gulag does not ask for or store wallet private keys or seed phrases.
How we share information
We share information only as needed to provide and protect the Services, including with:
- Authentication providers: Dynamic and, when selected, Google.
- Optional account providers: your wallet provider and X when you choose to connect them.
- Infrastructure providers: hosting, database, security, and operational vendors, including Vercel and Upstash where configured.
- Authorities or transaction parties: when required by law, needed to protect rights and safety, or as part of a merger, financing, acquisition, or sale of assets.
Third-party services process information under their own terms and privacy policies.
Public information
The leaderboard is public and may display your generated Gulag display name, points, rank, and referral count. A referral code or link becomes visible to anyone with whom you share it. Public blockchain activity associated with a wallet address remains visible independently of Gulag.
Cookies and local storage
Gulag and its authentication provider use browser storage and similar technologies to keep you signed in, secure the Services, remember a referral code, and preserve essential preferences. Dynamic may store an authentication token in local storage unless cookie-based authentication is configured.
You can clear browser storage through your browser settings, but doing so may sign you out or remove an unclaimed referral code. We do not currently integrate third-party advertising or cross-site analytics trackers.
Legal bases
Where a legal basis is required, we process information to perform our contract with you, pursue legitimate interests such as operating and securing the Services, comply with legal obligations, and obtain consent where required. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
How long we keep information
We retain waitlist and referral records while your profile is active and for as long as reasonably needed to operate the beta, resolve disputes, prevent fraud, and meet legal obligations. Operational logs are retained for limited periods based on security and infrastructure needs. Third-party providers keep information according to their own policies. We delete or de-identify information when it is no longer reasonably needed.
Security and international transfers
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, so we cannot guarantee absolute security.
Gulag and its service providers may process information in Canada, the United States, and other countries. Where required, we use recognized safeguards for international transfers.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent or appeal a decision about a request. You may also complain to your local data-protection authority.
To exercise a right or request deletion of your Gulag waitlist profile, email team@gulag.xyz. We may need to verify your identity before completing a request.
Children
The Services are not directed to children. You must be at least 18, or the age of legal majority where you live if higher, to use Gulag. If you believe a child provided us personal information, contact us so we can address it.
Changes and contact
We may update this policy as Gulag evolves. The date above shows when it was last revised. Material changes will be posted here or otherwise communicated when required.
Privacy questions and requests: team@gulag.xyz
Gulag