Privacy Policy

Last Updated: November 3, 2025

1. Overview

This Privacy Policy explains what information we collect, how we use it, and your rights. Ghostchain respects your privacy and uses a privacy-by-design approach.

2. Information We Collect

• Account information: email, username, profile data.
• Wallet information: public wallet address when you connect a wallet. We never store private keys or seed phrases.
• Usage data: page views, watch time, device information, approximate location, referral data.
• Transaction metadata: purchase IDs, amounts, product IDs, and event access status from payment processors.
• Communications: chat, comments, messages, customer support emails.
• Logs and security data: IP address, user agent, and activity logs for fraud and abuse detection.

3. How We Use Information

• Provide and improve the Platform, including recommendations and personalization.
• Enable payments, entitlements, and rewards.
• Prevent fraud, abuse, and violations of our policies.
• Communicate with you about your account, service updates, and support.
• Comply with legal obligations.

4. Legal Bases for Processing (EU/UK visitors)

• Contract: to provide the service you request.
• Legitimate interests: to secure and improve the Platform.
• Consent: for marketing emails, SMS, and optional cookies.
• Legal obligation: tax, accounting, and compliance.

5. Cookies and Tracking

• We use necessary cookies for core features, and optional analytics or advertising cookies with your consent.
• Colorado users: we honor Global Privacy Control signals for sale or sharing opt-outs.
• You can update preferences via the Cookie and Tracking Policy page.

6. Data Sharing

• Service providers: Stripe, Supabase, Vercel, analytics, email and SMS providers, content delivery, and anti-abuse services.
• Legal: to comply with law, enforce policies, or protect rights.
• Business transfers: in the event of a merger, acquisition, or asset sale, subject to this Policy.

7. Data Storage and Security

• Off-chain storage: Supabase and related infrastructure providers.
• On-chain records: public blockchains store transaction data that cannot be changed.
• Security: access controls, encryption in transit, and least-privilege practices. No system is perfectly secure.

8. Retention

• Account data: kept while your account is active and for up to 24 months after closure, unless law requires longer.
• Logs: typically 12 months.
• DMCA records and legal holds: as required by law.
• You may request deletion. Some information may be retained to comply with law or prevent abuse.

9. Your Rights

• Access, correction, deletion, and portability, where applicable.
• Opt out of marketing communications.
• Colorado and other state rights: opt out of targeted advertising and sale or sharing of personal data; we honor Global Privacy Control.
• Submit requests at admin@ghostchain.xyz.

10. Children

• The Platform is not for children under 13. Users must be 16 or older to use blockchain features. We do not knowingly collect personal data from children.

11. International Transfers

Where applicable, we use standard contractual clauses or other safeguards for international transfers to our service providers.

12. Changes

We may update this Policy. The date at the top shows when it was last revised.

13. Contact

admin@ghostchain.xyz Mailing address: [insert mailing address]