Privacy Policy

01 Introduction & Scope

BLEEEP (“we,” “us”) operates the bleeep.xyz website, the account and 6-digit email verification flow, the campaign leaderboard, and the connected application and wallet features. This policy explains what personal data we collect and how we handle it. BLEEEP is a beta product, and available features may change. By creating an account or using the service, you acknowledge this policy. Check the “Last updated” date above to see which version you are reading.

02 Information We Collect

03 How We Use Your Information

• Create and secure your account, confirm that you control your email, and maintain your authenticated session.
• Provide campaign points, referrals, leaderboard standing, wallet linking, and application access.
• Protect the service by applying rate limits and detecting abuse, fraud, bots, and duplicate activity.
• Measure and improve the product using aggregate site and conversion events that do not include your email or wallet address.

We never sell your personal data.

04 Legal Basis for Processing

Where applicable, we process data as needed to provide the account and features you request, based on your consent where consent is required, and for our legitimate interests in security, fraud prevention, service reliability, and aggregate product measurement. We also process data where necessary to comply with legal obligations. You may withdraw consent where processing depends on consent. For California and other U.S. users, we honor applicable privacy rights and confirm that we do not sell personal information or share it for cross-context behavioral advertising.

05 Third-Party Sub-Processors

These vendors process data only to provide their services to BLEEEP, under their own privacy terms. We do not authorize them to use your data for their own purposes.

06 International / Cross-Border Transfers

Our service providers may store and process data in the United States and other regions, so your data may cross borders. Where required, international transfers rely on contractual or other recognized safeguards. We take reasonable steps to require appropriate protection wherever service data is processed.

07 On-Chain Data Is Public and Immutable

Anything anchored on a blockchain is public and permanent. It cannot be edited or deleted.

Any data anchored to Base / Robinhood Chain, such as wallet addresses, transaction hashes, or proofs, is public and permanently visible to anyone. Because blockchains are immutable, on-chain data cannot be changed, erased, or “unpublished” by BLEEEP or by you, and a deletion request cannot remove it from the chain. A wallet address you use on-chain links to a permanent public record of activity that is outside our control. Please think carefully before submitting a wallet address or triggering any on-chain action.

08 Cookies & Analytics

The site uses essential browser storage for authentication and short-lived session attribution. Vercel Web Analytics measures page views and custom conversion events in aggregate without third-party advertising cookies and is not configured to receive email addresses, wallet addresses, or one-time codes. We store validated campaign parameters and the initial referral source in session storage so events from the same browser tab carry consistent attribution. Server logs may include IP address and user-agent data for delivery, security, and rate-limiting. We do not use this data for behavioral advertising.

09 Data Retention

• Verification codes are short-lived and expire according to the authentication service configuration.
• Account, campaign, referral, and wallet association records are kept while your account is active and as needed for security, dispute resolution, legal obligations, and the integrity of published campaign results.
• Session attribution stored in your browser is limited to the current browser session.
• Server logs and IP data are retained only for a limited period sufficient for security and abuse prevention, then purged or anonymized.

On-chain data is exempt from deletion because it is permanent by design (see §07).

10 Data Security

Data is transmitted over HTTPS / TLS and stored with infrastructure providers that maintain security controls. Account access uses a passwordless, one-time email code. Database access is scoped to the authenticated account, and rate-limiting helps reduce enumeration, spam, and abuse. Access to service data is limited to authorized personnel and systems. No method of transmission or storage is 100% secure, and we cannot eliminate all risk.

11 Your Rights & How to Exercise Them

You may request access to, correction of, or deletion of eligible off-chain personal data we hold, including your email, account record, and wallet association. You may also object to or restrict certain processing and withdraw consent where applicable. To exercise these rights, email privacy@bleeep.xyz; we aim to respond within 30 days. Some campaign records may need to remain in a de-identified or limited form to preserve published results, prevent fraud, or meet legal obligations. Data already written to a blockchain cannot be removed (see §07).

12 Children / Minimum Age

The site, account, application, wallet features, and $BLEP token are intended only for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18, and if we learn we have, we will delete eligible off-chain information promptly.

13 Changes to This Policy

We may update this policy and will post the revised version on this page with a new “Last updated” date. Material changes may be communicated by email or a site notice where appropriate. Continued use of the service after an updated policy takes effect is subject to applicable law.

14 Contact Us

For privacy questions, rights requests, or complaints, including requests for access, correction, deletion, or consent withdrawal, email privacy@bleeep.xyz. We encourage you to reach out to us before escalating to a data protection authority. See also our Disclaimer.