Draft / Testnet phase / To be reviewed by counsel before mainnet. This draft will be reviewed and updated before mainnet.
Privacy Policy
Effective date:
1. About this policy
This policy explains how Interncats LLC handles information when operating the InternCats Launchpad testnet interface and referral services. It describes the current features; using a testnet does not remove privacy risks.
2. Wallets, signatures and blockchain activity
When you connect a wallet, the interface reads the address, selected account and network identifier, and may query balances, approvals, contract state and transaction history. Authorized transaction details, hashes and receipts support submission, confirmation and indexed display. Referral activation, payout-wallet binding and claim preparation involve referral codes, wallet addresses, nonces, deadlines and authorization signatures. Services may process and retain signature authorizations, and on-chain submissions may make them public. We do not collect private keys or recovery phrases.
3. X login, sessions and referrals
X OAuth login processes authorization codes, user IDs, temporary access tokens and the result of checking whether you follow the official account. The current production adapter selects the X user ID without actively reading a username; the identity model can also retain an optional username if supplied by the service. Access tokens are used transiently for login and follow verification; access and refresh tokens are not persisted. The flow also processes OAuth state, PKCE verifiers, correlation values and login, return-path and session cookies. Servers store corresponding hashes, encrypted verifiers, expiry and revocation status. Referral records include codes, activation and follow status, verification times, authorizations, bound payout addresses and reward or claim records. Attribution at token creation and some reward facts are public on-chain or in indexes.
4. Images, project information and correspondence
Images selected in the current V2 creation page, crop results, descriptions and X, Telegram or website links are processed and previewed only in browser memory. They are lost on refresh and are not yet uploaded to platform servers or persistently stored. Token names, symbols and creation parameters are written on-chain through the creation transaction you authorize. If you email support, rights, privacy or law-enforcement requests, we receive your email address, message and any evidence or attachments you provide. Avoid unnecessary sensitive information. This policy will be updated when server media uploads become available.
5. Server logs and connection information
Website and API access involves processing connection information such as IP address, request path, time, status code and browser User-Agent by servers and network providers for delivery, security and troubleshooting. The API uses the connection source or an IP verified by trusted ingress for rate limiting. Application diagnostic logs contain allowlisted operational status, error categories, numeric metadata and request IDs, without full OAuth responses, access tokens or arbitrary request bodies. Infrastructure access logs differ in scope from application diagnostics.
6. Browser storage and cookies
localStorage records the selected wallet identifier and whether it was connected, without private keys. sessionStorage caches referral display information such as an available username, referral code, follow and activation status, payout wallet and entitlement tier. It is not authentication evidence and is valid for at most 24 hours. Language and theme cookies last one year. Referral login, return-path and authenticated-session cookies have limited lifetimes; configured authenticated sessions last at most 24 hours. You can clear or block storage in your browser, which may affect preferences, login or connection restoration. The current code does not integrate advertising trackers or third-party analytics SDKs.
7. Sources
Information comes from your wallet, browser, forms and emails, authorized X login and follow checks, and public blockchains, RPC services and platform indexes. We may associate referral identity with a wallet you choose to bind to provide referral features. Others may also link public addresses with other information.
8. Purposes and legal bases
We process information to provide the interface, login and referrals, prepare authorizations, display on-chain records, handle requests, secure services, prevent abuse and meet applicable legal duties. Where data protection law requires a legal basis, bases include performing requested services or an agreement, legitimate interests in security and fraud prevention, and legal obligations. We will seek consent before optional processing that legally requires it. Consent may be withdrawn as permitted by law without affecting earlier lawful processing.
9. Public and immutable blockchains
Wallet addresses, transactions, token parameters, referral bindings and contract events may be globally public and copied or analyzed indefinitely by others. We cannot change or delete blockchain records or require others to delete downloaded data. Do not put information that must remain private or be deleted later on-chain or in public project materials.
10. Disclosure and providers
We do not sell personal data. Google Cloud supplies current application hosting, database and related operational infrastructure. Cloudflare provides domain name resolution and processes related DNS query information. X provides login and follow checks; wallets, RPC providers and explorers receive necessary request information when you use their features. Disclosure to necessary providers, professional advisers or competent authorities is for operating or securing services, handling requests or complying with valid legal requirements. In a lawful business restructuring, information may transfer with the relevant business subject to applicable safeguards.
11. Third-party services and external links
Third-party wallets, X, X Layer, Uniswap v4, RPC providers, explorers and linked projects have their own privacy policies. Footer X and $ICAT links open third-party pages when clicked. The footer does not embed X tracking widgets or load third-party icons. Read third-party policies before sharing information.
12. Retention
Sessions and login data expire according to configuration; expiry does not mean every database record has been physically erased. Wallet connection preferences remain until cleared or changed. Referral display caches and theme or language cookies follow the periods above. Identity, referral and transaction indexes, operational logs and correspondence are retained as needed for services, security, disputes and legal duties. This policy does not promise a uniform deletion schedule that has not been implemented. Public blockchain retention is outside our control. Local media previews end when page memory is released.
13. Security and international processing
We use measures including access controls, session protection, encrypted connections and restricted diagnostic logging, but cannot guarantee absolute network, device or storage security. Providers may process information outside your country. The current testnet application uses Google Cloud us-west1 in the United States, and global network services may involve other regions. Applicable international-transfer safeguards will be used where required by law.
14. Your rights and requests
Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent, and may complain to a competent data protection authority. Email info@interncats.com describing the request and relevant account or wallet. We may request reasonable proof of identity or control, never private keys or recovery phrases. Rights can be limited by legal retention duties, others’ rights and blockchain immutability. No fixed response time is promised.
15. Children, changes and contact
The services are not directed to anyone under 18. If you believe a minor has submitted information, contact info@interncats.com. We will update this policy as features or legal requirements change, state the effective date here and highlight material changes appropriately. Use the same address for privacy questions and requests.