Privacy policy

Wallet address. Recorded when you connect, and read from the chain regardless. It is how we know which items are yours.

Shipping details — name, postal address, email, contact number, and optionally a Telegram handle and a note — collected only when you redeem a physical item.

Order records. Reference, status, carrier and tracking number, so you and we can follow a parcel.

We do not ask for, receive or store your private keys or seed phrase, and we never will. Nobody legitimately needs them, including us.

Shipping details are encrypted in your own browser before they are sent, using the warehouse's public key. Our servers only ever store the ciphertext, and the contract stores nothing but an opaque reference.

The private key that decrypts it is held by the warehouse operator and is not on our servers. The practical consequence, stated plainly: a breach of our database would expose encrypted blobs rather than a list of customer addresses — and equally, we cannot look up or correct your address after you submit it, which is why the form validates so firmly before you commit.

Purchases, pack openings, outcomes, swaps, transfers and burns are recorded on a public blockchain by design. They are visible to anyone, tied to your wallet address, and we cannot edit or delete them — no privacy policy can. If you would rather your activity not be linked to you, that is a decision to make about which address you use, before you use it.

To fulfil orders and handle support, to operate the site and its leaderboard, and to meet legal and accounting obligations. We do not sell personal data, and we do not use your details for advertising.

Our warehouse and fulfilment partner, and the carrier delivering your parcel, receive what they need to ship it. Our hosting and database providers process data on our behalf. If you use the optional address search, your typed query goes to Google Maps under Google's own privacy policy — the manual fields work without it if you would rather it did not.

Encrypted shipping blobs and order records are retained while your order is active and afterwards for as long as tax and consumer-protection rules require, then deleted. Onchain records cannot be deleted at all.

Depending on where you live you may have the right to access, correct, export or delete personal data we hold, and to object to some processing. Ask us and we will act on it within the time the law allows. Note the honest limits: we cannot decrypt a stored address ourselves, and we cannot remove anything from the blockchain.

Message us at @thegachahood with a privacy request or question, quoting an order reference if you have one.