1. Introduction
GundariuM ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the GundariuM platform ("Service").
GundariuM is a decentralized application. We do not require account creation, email addresses, or personal identification to use the Service. Your primary identifier is your blockchain wallet address.
2. Information We Collect
Information You Provide
- Photographs: Images of Gunpla model kits you upload for minting. These are stored on IPFS (InterPlanetary File System), a decentralized storage network, not on our servers.
- Wallet Address: Your public blockchain wallet address, used to identify your on-chain assets and interactions. This is publicly visible on the blockchain by design.
Information Collected Automatically
- Blockchain Data: All transactions (minting, cosmetic purchases, staking, battles) are recorded on the Base blockchain and are publicly accessible. This is inherent to blockchain technology and not controlled by us.
- Basic Analytics: We may collect anonymous usage data such as page views, feature usage, and error reports through privacy-friendly analytics to improve the Service. No personally identifiable information is collected through analytics.
Information We Do NOT Collect
- Names, email addresses, or phone numbers
- Government-issued identification
- Private keys or wallet seed phrases
- Location data (beyond what your IP address reveals)
- Cookies for tracking or advertising purposes
3. How We Use Information
- Photo Processing: Your uploaded photos are processed to generate the card frame composite image, which is then stored on IPFS as part of your NFT metadata.
- AI Cosmetics: If you purchase AI repaint cosmetics, your card photo is sent to a third-party AI image generation service (Google Gemini) to produce the modified image. The original and modified images are stored on IPFS.
- NFT Metadata: Your card traits, statistics, and image are compiled into metadata stored on IPFS and referenced by the on-chain NFT.
- Service Improvement: Anonymous usage data helps us improve game mechanics, UI, and performance.
4. Third-Party Services
We use the following third-party services:
- IPFS / Pinata: Decentralized storage for NFT images and metadata. Content stored on IPFS is public and persistent.
- Base Blockchain (Coinbase): All NFTs, tokens, and transactions exist on the Base L2 network. Blockchain data is public and immutable.
- WalletConnect: Wallet connection protocol. WalletConnect may collect connection metadata per their own privacy policy.
- Farcaster: Social protocol integration for miniapp functionality. Farcaster handles its own user data per its privacy policy.
- Google Gemini: AI image generation for cosmetic repaints. Photos sent for AI processing are subject to Google's privacy policy and data handling practices.
- Vercel: Website hosting. Vercel may collect standard server logs (IP addresses, request timestamps) per their privacy policy.
5. Data Storage and Retention
- On-Chain Data: Blockchain data is permanent and cannot be deleted. This includes your wallet address, transaction history, NFT ownership, and card traits.
- IPFS Data: Images and metadata stored on IPFS are designed to be persistent and publicly accessible. While we can unpin content from our IPFS node, copies may exist on other IPFS nodes.
- Server Data: We do not maintain a user database. Any temporary server-side data (image processing buffers) is discarded after the request completes.
6. Your Rights
Because we collect minimal personal data and most data exists on public blockchains or decentralized storage:
- Access: All your on-chain data is publicly accessible on the Base blockchain. Your IPFS content is accessible via its content hash.
- Portability: Your NFTs and tokens are standard ERC-721 and ERC-20 tokens that you can transfer, sell, or use on any compatible platform.
- Deletion: Due to the immutable nature of blockchain technology, on-chain data cannot be deleted. We can unpin IPFS content from our node upon request, but this does not guarantee removal from the IPFS network.
If you have specific privacy concerns or requests, contact us through our official channels.
7. Children's Privacy
The Service is not intended for use by anyone under the age of 18. We do not knowingly collect information from children. Cryptocurrency and NFT transactions require a wallet, which inherently requires the user to be of legal age in their jurisdiction.
8. Security
We implement reasonable security measures to protect the Service. However:
- We never have access to your private keys or wallet credentials
- Smart contracts are auditable on-chain but may contain undiscovered vulnerabilities
- IPFS content is public by design
- No system is 100% secure — use the Service at your own risk
9. International Users
The Service is accessible globally. By using the Service, you consent to the processing of your data as described in this policy. Different jurisdictions may have different data protection laws — you are responsible for ensuring your use of the Service complies with your local regulations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or requests, contact us at: