Privacy
Policy

This Privacy Policy explains what personal data we collect when you interact with the Kinerix pre-launch website (kinerix.gg), why we collect it, how long we keep it, and what rights you have over it.

We aim to collect the absolute minimum needed to operate this pre-launch waitlist. We do not sell, rent, or share your data with third parties.

1. Who Operates This Site

Kinerix is a pre-launch project. Operator information required under applicable transparency and consumer-protection laws is available on request. For all inquiries, contact: support@kinerix.gg. We respond to legitimate inquiries within 7 working days.

2. Data We Collect

2.1 When you join the Founders waitlist

• Solana wallet address — required, used as your unique identifier for launch-day rewards
• X (Twitter) handle — optional, used to notify you on X when your rewards are ready
• Language preference — to send communications in your selected language
• Browser user agent — basic technical info for spam prevention
• Wallet age (first transaction timestamp) — read from the public Solana blockchain, used to block bot-farm wallets
• Funding source — the public address of the wallet that funded yours, read from the public Solana blockchain, used to detect coordinated sign-up clusters
• Hashed IP address — your IP is hashed with SHA-256 immediately on arrival; we only store the hash, never the raw IP. Used to enforce one sign-up per network per day
• Timestamp — when you signed up

2.2 When you verify as a Founder on Discord

Verifying your Founder status on our Discord server is optional. If you do verify, we store the following so we can link your sign-up to your Discord account and assign the correct Founder role:

• Discord user ID — the numeric ID Discord assigns to your account (not your username, not your email)
• Discord username at time of verification — for audit purposes only
• Verification timestamp — when you were verified
• Founder stage — your current stage in the Founders Path (Stage 1 on verification; further stages may be updated automatically based on in-game activity after launch)

This data is stored alongside your existing waitlist entry in our database. It is never shared with anyone outside the project and is never used for advertising or analytics.

Verification is currently performed manually: you post your wallet address in the Discord verification channel, and we match it against the waitlist database. We never ask for, and you must never share, your seed phrase or private key — see also our Risk Disclosure.

2.3 When you visit the site

• Page views — anonymous count of which pages were viewed and when
• Referrer URL — which page or search engine sent you here, if any
• Language preference — stored locally in your browser

What we do NOT store: your raw IP address, real name, email, payment details, third-party tracking cookies, fingerprinting data, or any analytics that profile individual users.

2.4 Anti-bot signals (transient, not stored)

For each sign-up attempt we process — but do not permanently store — three additional signals to filter out automated bots: a Cloudflare Turnstile verification token, a hidden honeypot field check, and the time elapsed between page load and form submission. None of these are linked to your identity once the verification completes.

3. Why We Collect It (Legal Basis)

Under the EU General Data Protection Regulation (GDPR), we process your data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR) — when you submit the Founders waitlist form, you consent to us storing your wallet (and X handle if provided) for launch communications.
• Legitimate interest (Art. 6(1)(f) GDPR) — anonymous page-view counts to understand interest in the project, with no individual profiling.

4. How Long We Keep It

• Waitlist data — kept until 30 days after Kinerix launches publicly, then deleted unless you become an active user under separate launch terms.
• Discord verification data — kept for the same period as your waitlist entry. Removed if you leave the Discord server or request deletion.
• Page-view records — kept for up to 12 months for statistical purposes, then deleted.
• Cookie consent record — stored locally in your browser, you can clear it any time via browser settings.

5. Where Your Data Lives

Your waitlist data is stored on infrastructure provided by Supabase (database hosting), with servers located in the European Union (Frankfurt region). The website itself is served via Porkbun static hosting.

To operate the sign-up form and verify wallets, we communicate with the following third-party services:

• Cloudflare Turnstile — bot-protection challenge widget. Cloudflare may receive your IP address when the widget loads.
• Helius — Solana RPC provider. We send your wallet address to read its public on-chain balance and transaction history. No personal data is sent.
• fxtwitter.com — only when you provide an optional X handle, we query this public service to verify the account is not suspended. Only your handle is sent.
• Discord — if you choose to verify as a Founder on our Discord server, Discord is the platform on which that interaction happens. Your Discord usage is governed by Discord's own Privacy Policy. We only store the data described in section 2.2 on our own infrastructure.

None of these services receive your other waitlist fields, and we do not allow them to track or profile you across sites.

Fonts: Web fonts (Bowlby One, Fraunces, DM Mono — all open-source under SIL Open Font License) are self-hosted on our own server. We do not load fonts from Google Fonts or any other third-party CDN. Your IP address is never transmitted to font providers.

6. Your Rights (GDPR)

If you are in the EU, EEA, UK, or Switzerland, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Withdraw consent — at any time, with no effect on processing already done
• Lodge a complaint — with your national data protection authority

To exercise any of these rights, send an email from the address you signed up with — or include your wallet address in the request — to: support@kinerix.gg. We will respond within 30 days.

7. Cookies

We use only essential cookies (technically, browser localStorage entries):

• Your selected language
• Your cookie consent acknowledgement
• An anonymous page-view flag (no individual profiling)

We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party scripts that profile users. Full details, including a complete list of every entry we set, are in our separate Cookie Policy.

8. Children

Kinerix is not directed at people under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact support@kinerix.gg and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy as the project evolves toward launch. Material changes will be reflected in the "Last updated" date at the top. By continuing to use the site after changes are posted, you accept the revised version.