Privacy Notice

Status of this page

This is a pre-launch privacy draft, not the final privacy notice. The operator and qualified privacy counsel must review the data map, legal bases, retention periods, processor list, international-transfer posture, and rights process before publication.

Data the product may use

The product may process public wallet addresses, signature-authentication records, selected profile fields, public collection references, city and Drop interactions, allowlist or residency submissions, report details, quest activity, and operational security logs. Which fields are public depends on the relevant feature and publication setting.

A wallet address can be personal data in some contexts. Public blockchain data may be durable and independently available even if Mintropolis removes a display of it.

Your message, page path and optional email go to our admin team. Never include private keys, recovery phrases or passwords.

Data Mintropolis should never request

The product is not designed to receive private keys, wallet recovery phrases, seed phrases, or unrestricted token approvals. Do not provide those secrets in profile fields, reports, task comments, or support requests.

Public versus private context

Public profile pages and approved city or Drop pages can expose the fields intentionally published for that page. Moderation, fraud-prevention, access-control, and audit records should remain restricted to authorized operations personnel and should not be exposed through public routes.

Social-task providers and external communities are separate services. A future final notice must name each enabled integration, explain what it receives, and document the relevant authorization and revocation flow.

Google Analytics

Mintropolis uses Google Analytics to measure page visits and site navigation.

Google may receive page URLs, page titles, referrers, and browser or device data, and may set analytics cookies.

Mintropolis does not send custom wallet, transaction, or form fields as analytics identifiers. Google Signals and ad personalization are disabled.

Before launch

The final notice must give a real privacy contact, describe applicable rights and verification steps, state deletion and retention rules, identify the controller or responsible entity, and link to any required regional disclosures.