Legal

Privacy Policy

Last updated: July 1, 2026

This policy explains what personal data BLEEEP collects through its website and early-access waitlist, why we collect it, who processes it, and the choices you have. We keep collection minimal and we never sell your data.

01 Introduction & Scope

BLEEEP (“we,” “us”) operates the bleeep.xyz website, the early-access waitlist, the 6-digit email verification flow, and the $BLEP pre-launch pages. This policy explains what personal data we collect and how we handle it. BLEEEP is an early-access product; some data (such as wallet addresses) may only be collected later, once wallet features go live. By joining the waitlist or using the site, you acknowledge this policy. Check the “Last updated” date above to see which version you are reading.

02 Information We Collect

Email address
The address you submit to join the waitlist.
Verification code
The 6-digit code and its status, used to confirm you control the inbox.
Join data
Your signup timestamp and waitlist position.
Wallet address
Only if and when you choose to connect one for whitelist or airdrop eligibility.
Technical data
IP address, user-agent / device and browser info, and request metadata, logged automatically for rate-limiting, abuse prevention, and security.

03 How We Use Your Information

  • Grant and manage early / whitelist access, confirm you control your email, and place you in the queue.
  • Send product updates and notifications about BLEEEP and $BLEP (launch, whitelist status, airdrop eligibility) — you can opt out at any time.
  • Protect the service: rate-limit signups, detect bots, Sybil, and duplicate entries, and maintain security and integrity.
  • Improve the product using aggregate, minimal usage signals.

We never sell your personal data.

04 Legal Basis for Processing

Where applicable (for example, under the GDPR / UK GDPR), we rely on: your consent for waitlist signup and marketing emails about the product and $BLEP (freely given and withdrawable at any time); our legitimate interests for security, rate-limiting, fraud and bot prevention, and basic analytics; and legal obligation where we must retain or disclose data to comply with law. For California and other U.S. users, we honor applicable opt-out rights and confirm we do not sell personal information.

05 Third-Party Sub-Processors

Vercel
Website hosting and the serverless functions that run the signup / verification API.
Upstash (Redis)
Stores waitlist emails, verification codes, and join timestamps.
Resend
Sends the verification and notification emails to your inbox.

These vendors process data only to provide their services to BLEEEP, under their own privacy terms. We do not authorize them to use your data for their own purposes.

06 International / Cross-Border Transfers

Our processors (Vercel, Upstash, Resend) may store and process data in the United States and other regions, so your data may cross borders. For EU / UK users, such transfers rely on safeguards such as Standard Contractual Clauses or equivalent mechanisms. By using the waitlist you understand your data may be handled in jurisdictions with different privacy laws; we take reasonable steps to ensure a comparable level of protection wherever data is processed.

07 On-Chain Data Is Public and Immutable

Anything anchored on a blockchain is public and permanent — it cannot be edited or deleted.

Any data anchored to Base / Robinhood Chain — such as wallet addresses, transaction hashes, or proofs — is public and permanently visible to anyone. Because blockchains are immutable, on-chain data cannot be changed, erased, or “unpublished” by BLEEEP or by you, and a deletion request cannot remove it from the chain. A wallet address you use on-chain links to a permanent public record of activity that is outside our control. Please think carefully before submitting a wallet address or triggering any on-chain action.

08 Cookies & Analytics

The site uses only essential / functional storage needed to keep the verification session working; we do not use advertising cookies or cross-site trackers. If we add analytics, we will use privacy-friendly, aggregate, non-identifying measurement, name the provider here, and give you a way to manage non-essential cookies. Server logs (IP, user-agent) are separate from cookies and are used only for security and rate-limiting, not for ad tracking.

09 Data Retention

  • Verification codes are short-lived and expire shortly after use (about 10 minutes).
  • Waitlist emails and join timestamps are kept until the waitlist concludes or you unsubscribe / request deletion, plus a short buffer for legal and record-keeping needs.
  • Server logs and IP data are retained only for a limited period sufficient for security and abuse prevention, then purged or anonymized.

On-chain data is exempt from deletion because it is permanent by design (see §07).

10 Data Security

Data is transmitted over HTTPS / TLS and stored with reputable infrastructure providers (Vercel, Upstash) that maintain recognized security controls. Access to waitlist data is limited to authorized personnel with protected credentials, and rate-limiting reduces enumeration and spam attacks on the signup flow. No method of transmission or storage is 100% secure, and we cannot eliminate all risk.

11 Your Rights & How to Exercise Them

You may access, correct, or delete the off-chain personal data we hold (your email, join time, and optional wallet address), unsubscribe from marketing at any time via the email’s unsubscribe link, and withdraw consent. To exercise these rights, email privacy@bleeep.xyz; we aim to respond within 30 days. Note the on-chain limitation: off-chain records can be deleted, but data already written to a blockchain cannot be removed (see §07).

12 Children / Minimum Age

The site, waitlist, and $BLEP token are intended only for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18, and if we learn we have, we will delete it promptly.

13 Changes to This Policy

We may update this policy and will post the revised version on this page with a new “Last updated” date. Material changes may be communicated by email or a site notice where appropriate. Continued use of the site or waitlist after changes indicates acceptance of the updated policy.

14 Contact Us

For privacy questions, rights requests, or complaints — including to unsubscribe, request deletion, or withdraw consent — email privacy@bleeep.xyz. We encourage you to reach out to us before escalating to a data protection authority. See also our Disclaimer.