Privacy Policy
Last updated September 2026
DRAFT — pending review by qualified counsel. Placeholder fields marked […] must be completed before this page is relied upon.
This policy explains how personal data is processed on stackbots.space, in accordance with the EU General Data Protection Regulation (GDPR), Articles 13 and 14.
1. Controller
[Company legal name], [address], [email]. See our Impressum for full details.
2. What we collect and why
- Whitelist sign-up: your email address and wallet address, collected with your consent to notify you about the mint and to build the allowlist. Legal basis: consent (Art. 6(1)(a) GDPR). We store the consent timestamp, the IP address at sign-up, and the exact consent text shown.
- Wallet addresses: when you connect a wallet, your public address is processed to display your holdings and enable on-chain actions. Public blockchain data is, by nature, public and permanent and is not controlled by us.
- Analytics: [name your analytics provider, or state "none"]. Loaded only after consent via the cookie banner. Legal basis: consent.
- Server logs: our hosting provider processes technical data (IP, user agent, timestamps) to deliver and secure the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
3. Processors and third parties
- Hosting: [Render / provider name and region].
- Email delivery: [Resend / provider] for verification and notification emails.
- Fonts: this site loads fonts from Google Fonts, which may transfer your IP address to servers operated by Google outside the EU. [Confirm, or self-host fonts to avoid the transfer.]
- Anti-bot: Cloudflare Turnstile protects the sign-up form.
4. International transfers
Where a processor is located outside the EU/EEA, transfers rely on the appropriate safeguards (e.g. EU Standard Contractual Clauses). [Confirm per provider.]
5. Retention
Whitelist data is kept until the campaign concludes or you unsubscribe, whichever is earlier. You can withdraw consent at any time.
6. Your rights
You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. Every marketing email includes a one-click unsubscribe. To exercise any right, contact [privacy@…]. You may also lodge a complaint with a supervisory authority.
7. Cookies
We set only essential cookies by default. Non-essential cookies and analytics load only after you accept them in the consent banner; you can reject them with equal ease.