Privacy Policy

1. Introduction

This Privacy Policy explains how Solana Deads (“we”, “us”, or “our”) collects, uses, shares, and protects your information when you interact with our website, blockchain services, smart contracts, account and sign-in features, embedded wallet services, or any Solana Deads application (“Services”).

By using the Services, you consent to the practices described in this Policy.

2. What We Collect

We may collect or process the following types of data:

• Public blockchain data: Wallet addresses, NFT ownership, and on-chain activity
• Account & authentication data: When you create an account by signing in with email or a social login provider (Google, X (Twitter), Discord, Apple, or GitHub), we receive basic profile information from the provider you choose — such as your email address and, where the provider makes it available, a username or handle and a provider account identifier. We associate this information with your unified Solana Deads account/profile.
• Embedded wallet data: When you sign in with email or a social provider, an embedded blockchain wallet (on Solana and on supported EVM networks) is provisioned for your account through our authentication and wallet-infrastructure provider. We store and associate the resulting public wallet addresses with your account. We also record any additional external wallets you choose to link or connect.
• Security & MFA data: If you enroll multi-factor authentication (for example, an authenticator app, a passkey, or SMS), we process the related enrollment metadata — and, for SMS, a phone number — to help protect your account and wallet actions.
• Technical data: IP address, browser type, device info, timestamps, and basic telemetry
• Voluntary data: Any info you submit (e.g., via Discord verification, email forms, giveaways)
• Cookies: Session tokens or analytics cookies (if enabled)

3. How We Use Your Information

We use your information to:

• Create, operate, and secure your unified Solana Deads account
• Authenticate you when you sign in with email or a social login provider, and enable multi-factor authentication
• Provision and operate your embedded wallet and support linked external wallets
• Provide and operate Services (e.g. NFT gating, staking, verifications)
• Improve performance, usability, and security
• Communicate updates or respond to inquiries
• Protect against fraud, abuse, and unauthorized access

We do not sell or rent your personal data to third parties.

4. Accounts, Social Login & Unified Profile

You can create a Solana Deads account by signing in with your email address or with a supported social login provider — currently Google, X (Twitter), Discord, Apple, or GitHub. Authenticating through any of these methods creates an account for you.

When you sign in with a social provider, we receive basic profile information from that provider, which may include your email address and, where applicable, a username or handle and a provider account identifier. We do not receive your password for the provider.

Your account is a unified identity across the Solana Deads ecosystem. A verified email address and any linked social handles are stored on your unified profile and used to identify you across Solana Deads applications — including GraveMint, GraveMarket, GraveStake, GraveDraw, GraveForge, GraveKeeper, and Crypt Console — so you have one consistent account across the Services.

5. Embedded Wallets & Custody

When you sign in with email or a social login provider, an embedded blockchain wallet (on Solana and on supported EVM networks) is created for your account. The wallet's private key is generated and secured by our third-party authentication and wallet-infrastructure provider on your behalf. This is a custodial-style arrangement: you do not have to manage a seed phrase to use the wallet, and the provider's infrastructure holds and safeguards the key material so you can sign transactions through the Services. We do not ourselves take custody of your embedded wallet's private key.

You remain in control of your wallet:

• You may export your private key at any time to take full self-custody of the embedded wallet. Once you export a private key, you are solely responsible for securing it.
• You may link or connect additional external wallets (such as browser extension or hardware wallets) to your account. We do not have custody of, and cannot recover, the keys to external wallets you connect.

Because wallet key material is handled by our wallet-infrastructure provider, that provider's handling of the relevant data is also governed by its own privacy policy (see “Third-Party Services” below).

6. Data Security

We implement industry-standard measures to protect your information, including secured access controls, encryption, and internal data minimization, and we support multi-factor authentication to help protect your account and wallet actions. However, no system is 100% secure, especially in decentralized environments.

7. Blockchain Transparency

Blockchain data is public and immutable. Any activity involving your wallet address, NFTs, or token interactions is visible on-chain and cannot be modified or deleted by us. You are responsible for safeguarding your wallet and keys, including any private key you export.

8. Cookies and Analytics

We may use session cookies or third-party analytics (e.g. Google Analytics, Vercel Insights) to understand usage patterns and improve performance. You can disable cookies in your browser settings.

9. Third-Party Services

We rely on third-party providers to operate parts of the Services, and their handling of your data is governed by their own privacy policies. These include:

• Authentication & embedded-wallet infrastructure provider: a third-party provider that powers social/email sign-in and provisions and secures your embedded wallet. Its processing of the associated data is governed by its own privacy policy.
• Social login providers you choose to sign in with, each governed by its own policy:
  • Google — policies.google.com/privacy
  • X (Twitter) — x.com/en/privacy
  • Discord — discord.com/privacy
  • Apple — apple.com/legal/privacy
  • GitHub — GitHub Privacy Statement
• Other integrations (e.g. Discord verification, database/hosting, and payment processors), each with its own privacy practices.

We are not responsible for how these third parties handle your data, and we encourage you to review their policies.

10. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access or request deletion of your personal data (where applicable)
• Request corrections or limit processing of voluntarily submitted data

Please note that public on-chain activity cannot be modified or deleted (see “Blockchain Transparency”). For inquiries, email: [email protected]

11. Children's Privacy

We do not knowingly collect or process data from children under 13. If we learn that we've collected such data, we will delete it promptly.

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Updates will be reflected by the “Effective Date” above. Your continued use of the Services indicates acceptance of the updated Policy.

13. Contact

If you have questions or data-related requests, please contact us at:

Email: [email protected]

✅ TL;DR Summary

• You can sign in with email, Google, X (Twitter), Discord, Apple, or GitHub — doing so creates a unified Solana Deads account and shares a verified email and any linked social handles across our apps
• Signing in provisions an embedded Solana + EVM wallet whose key is secured by our third-party wallet-infrastructure provider; you can export the key (self-custody) or link your own external wallets
• You can enable multi-factor authentication (authenticator app, passkey, or SMS) to protect wallet actions
• We collect public blockchain data, basic profile data from your chosen login provider, and minimal technical metadata
• We don't sell your data
• On-chain actions are public and can't be deleted
• You can request deletion of voluntary info (if applicable)
• We use basic cookies or analytics tools
• Third-party tools — including our authentication/wallet provider and the social login providers — are governed by their own policies