Privacy Policy

This Privacy Policy explains how Royale Web3 (“Royale,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when you access or use the Royale Web3 website, platform, community features, applications, accounts, opportunities, integrations, and related services (collectively, the “Services”).

This Privacy Policy should be read together with our Terms of Service.

By using the Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

The information we collect depends on how you interact with Royale and which features you choose to use.

A. Account and Profile Information

When you create or use a Royale account, we may collect information such as:

• your name or alias;
• username and display name;
• email address;
• profile image or avatar;
• Royale account identifiers;
• community membership information;
• roles or statuses associated with your account; and
• other profile information you choose to provide.

Some information may be received directly from you, while other information may be provided by connected services such as X or Discord.

B. Connected Social Accounts

When you connect or sign in using a supported third-party account, such as X or Discord, we may receive information made available through that service.

Depending on the provider and permissions granted, this may include:

• user ID;
• username;
• display name;
• avatar;
• email address, where provided; and
• information necessary to authenticate your account or verify community-related activity.

We do not receive your X or Discord password.

Connecting an account does not give Royale permission to post, send messages, or otherwise act on your behalf unless such functionality is separately and explicitly authorized by you.

C. Wallet Information

When you connect or verify a blockchain wallet, we may collect:

• your public wallet address;
• wallet verification status;
• the blockchain network associated with the wallet;
• publicly available blockchain information associated with that address; and
• information necessary to verify ownership, holdings, eligibility, roles, or participation.

Wallet ownership may be verified by asking you to sign a message.

Royale does not receive or store your wallet seed phrase or private keys.

A standard wallet verification signature is used to demonstrate control of a wallet and does not by itself authorize Royale to transfer assets from that wallet.

D. Application Information

When you submit an application, including an application for OG Royale, we may collect the information you provide through the application.

This may include:

• your name or alias;
• email address;
• X account;
• Discord account;
• connected wallet addresses;
• current Royale membership or roles;
• information about your Web3 background and activity;
• NFT collections or communities you choose to identify;
• referral information;
• free-text application responses; and
• other information you voluntarily submit.

Applications may also be associated with relevant account, wallet, community, and eligibility information used during the review process.

Status checker. Anyone who enters the X handle or Discord username linked to an application in the public status checker can see its application number and card, its status (received, under review, approved, or not selected) and, for an application that was not selected, the date from which a new application is possible. Email addresses, application answers, and wallet addresses are never shown there.

E. Community, Role and Reputation Information

We may process information relating to your participation within Royale, including:

• community membership;
• Royale roles;
• role eligibility;
• Engage Points or similar contribution metrics;
• reputation or participation indicators;
• eligibility for community features or opportunities;
• verified ownership of eligible digital assets;
• completed community activities; and
• information relating to abuse-prevention or eligibility checks.

Where certain roles, members, rankings, results, or community information are designated as public, limited profile information such as a display name, username, avatar, role, or ranking may be displayed publicly through the Services.

F. Opportunities, Allocations and Raffles

When you participate in an opportunity, allocation, raffle, giveaway, allowlist, partner campaign, reward program, or similar feature, we may collect and process:

• your entry;
• Royale account information;
• X and Discord identifiers;
• public wallet address;
• applicable roles or eligibility status;
• tasks associated with the opportunity;
• task completion or verification status;
• entry weight or multiplier, where applicable;
• selection or raffle results; and
• information required to deliver or administer an allocation, reward, or prize.

Certain opportunity results may be displayed publicly, including limited information identifying selected participants or winners.

G. Public Social and Blockchain Information

Some Royale features may use information that is already publicly available.

For example, we may process public X activity to verify whether an account has completed a required public task.

X task checks. When you log in with X, X gives us an access token for your account with read-only permissions (reading posts, profiles and your email address). We store it encrypted and use it only for checks through the official X API: when you apply for OG Royale, whether your account follows @RoyaleWeb3 (the result is kept with your application); for opportunity tasks, whether your account follows an account a task asks you to follow, and, where your posts are protected, whether you reposted a post a task names. We never post, like, follow, or send messages for you. The token is deleted when you delete your Royale account, and you can revoke it at any time in your X settings (Security and account access, Connected apps); X tasks can then no longer be checked until you log in with X again.

We may also review publicly available blockchain information to verify wallet ownership, digital asset holdings, transaction activity, eligibility, or other features requested by the user.

Public blockchain records are not created or controlled by Royale and may remain permanently accessible on the relevant blockchain.

H. Communications and Support

If you contact Royale, submit feedback, open a support request, communicate with our team, or otherwise interact with us directly, we may collect:

• your contact information;
• account identifiers;
• the content of your communication;
• attachments you choose to provide; and
• information necessary to investigate or resolve your request.

Contact form. The contact form asks for your email address (so we can reply) and, optionally, a Discord username and an X handle, together with a topic and your message. It also records a hashed IP address and your browser details to prevent abuse and, if you are signed in, links the message to your Royale account. Messages are read by the Royale team only, are never sold, and are deleted 12 months after they are sent. You can also email us at support@royale-web-3.com.

I. Technical and Usage Information

When you access the Services, we and our service providers may automatically receive certain technical information.

Depending on the feature and configuration, this may include:

• browser and device information;
• user-agent information;
• pages or features accessed;
• approximate geographic information derived from IP address, such as country or region;
• timestamps and interaction information;
• session information;
• analytics information; and
• security or abuse-prevention signals.

Royale may use hashed or otherwise transformed IP-related information for security, spam prevention, fraud prevention, or abuse detection.

Application information is not intentionally sent to analytics providers solely for advertising purposes.

2. How We Use Information

We may use information collected through the Services to:

• provide, operate, maintain, and improve Royale;
• create and manage Royale accounts and profiles;
• authenticate users and connected accounts;
• verify wallet ownership;
• verify community membership and roles;
• review and administer applications;
• assign, maintain, or verify community roles and statuses;
• operate reputation, contribution, points, or eligibility systems;
• provide access to features based on eligibility;
• administer opportunities, allocations, raffles, allowlists, rewards, partner campaigns, and related programs;
• verify participation requirements and public tasks;
• calculate entries or applicable role-based weighting;
• select and verify eligible participants or winners;
• facilitate the delivery of rewards or allocations;
• communicate with users about their accounts, applications, opportunities, or the Services;
• provide customer support;
• understand how the Services are used;
• improve performance, reliability, design, and user experience;
• detect and prevent spam, bots, Sybil activity, duplicate accounts, manipulation, fraud, abuse, and security threats;
• investigate violations of our Terms of Service or community rules;
• protect Royale, our community, partners, users, and the Services;
• comply with applicable legal obligations; and
• establish, exercise, or defend legal claims where necessary.

Royale does not sell personal information for money.

We do not use application information for third-party behavioral advertising.

3. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing personal information, we rely on one or more of the following:

Performance of a Contract

We process information where necessary to provide Services requested by you or to take steps at your request before providing those Services.

This may include creating an account, authenticating you, processing an application, verifying eligibility, or administering an opportunity you enter.

Legitimate Interests

We may process information where reasonably necessary for our legitimate interests, including:

• operating and improving Royale;
• protecting the security and integrity of the Services;
• preventing fraud and abuse;
• understanding how the Services are used;
• administering our community;
• protecting users and partners; and
• enforcing our Terms of Service.

Where required, we consider whether those interests are overridden by your rights and interests.

Consent

Where required, we may process information based on your consent.

This may include certain cookies, analytics technologies, optional integrations, or other processing for which consent is legally required.

Where processing is based on consent, you may withdraw your consent subject to applicable law.

Legal Obligations

We may process information where necessary to comply with applicable laws, regulations, court orders, legal processes, or other binding legal obligations.

4. Wallets and Public Blockchain Data

Public blockchain networks are transparent by design.

When you connect or verify a wallet, Royale may associate your public wallet address and relevant publicly available blockchain information with your Royale account.

We may use this information for purposes including:

• wallet ownership verification;
• digital asset ownership verification;
• role eligibility;
• opportunity eligibility;
• community features;
• abuse prevention; and
• other functionality you choose to use.

Royale does not control public blockchain networks.

Information recorded directly on a public blockchain may be permanent and cannot generally be modified or deleted by Royale, even if you delete your Royale account or exercise a privacy right relating to information stored in Royale’s own systems.

You should not connect a wallet to Royale if you do not want the public address to be associated with your Royale account for the purposes described in this Policy.

5. Cookies and Similar Technologies

Royale and our service providers may use cookies, local storage, and similar technologies to operate and improve the Services.

These technologies may be used to:

• maintain login sessions;
• authenticate users;
• support wallet verification;
• remember preferences such as theme settings;
• maintain security;
• prevent fraud and abuse;
• understand how users interact with the Services; and
• measure performance and usage.

Some cookies are necessary for the Services to function.

Other technologies, including certain analytics technologies, may be subject to consent requirements depending on your jurisdiction.

Where required by applicable law, we will request appropriate consent before using non-essential cookies or similar technologies.

You may also be able to manage certain cookies through your browser settings or controls made available through the Services.

6. Analytics

We may use analytics services, including Google Analytics and Vercel Analytics, to understand how the Services are used and to improve performance and user experience.

Analytics information may include pages visited, device or browser information, approximate location derived from IP address, session information, and interaction data.

We do not intentionally provide the contents of OG Royale applications to analytics providers for advertising purposes.

Analytics providers may process information according to their own privacy policies and our applicable service configurations.

7. How We Share Information

We may share information only where reasonably necessary to operate the Services, fulfill user requests, protect Royale and its users, or comply with legal obligations.

Service Providers

We may share information with trusted companies that provide services on our behalf, including providers of:

• cloud infrastructure;
• databases;
• authentication;
• hosting;
• analytics;
• wallet connectivity;
• security and abuse prevention;
• public task verification; and
• other infrastructure necessary to operate Royale.

Current service providers may include Supabase, Vercel, Google, X, Discord, and Reown, depending on the features you use.

These providers may process information subject to their own privacy terms and their agreements with Royale.

Partners and Opportunity Providers

Where necessary to administer an opportunity, allocation, reward, allowlist, campaign, or other user-requested feature, we may share limited information with the relevant partner.

This may include information reasonably necessary to:

• verify eligibility;
• confirm participation;
• deliver an allocation or reward;
• prevent duplicate claims or abuse; or
• fulfill the relevant opportunity.

We do not provide partners with unrelated application or account information simply because they partner with Royale.

Legal and Safety Reasons

We may disclose information where we reasonably believe disclosure is necessary to:

• comply with applicable law or legal process;
• respond to lawful requests from authorities;
• enforce our Terms of Service;
• investigate fraud, abuse, or security incidents;
• protect the rights, property, or safety of Royale, our users, partners, or others; or
• establish, exercise, or defend legal claims.

Business Transfers

If Royale is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction subject to applicable law.

8. Third-Party Services

Royale integrates with services operated by third parties, including social networks, communication platforms, wallet providers, blockchain networks, analytics providers, and partner platforms.

Examples may include X, Discord, Google, Reown, and public blockchain networks.

Your use of those services is governed by their own terms and privacy policies.

Royale does not control the privacy practices of independent third-party services.

If you follow a link from Royale to another website or service, you should review that service’s privacy policy before providing information.

9. International Data Transfers

Royale and the service providers we use may process information in countries other than the country where you live.

Those countries may have data protection laws that differ from the laws of your jurisdiction.

Where required by applicable law, appropriate safeguards will be used for international transfers of personal information.

Depending on the service provider and circumstances, these safeguards may include contractual protections or other legally recognized transfer mechanisms.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining account integrity, administering the community, preventing fraud and abuse, resolving disputes, enforcing agreements, and complying with legal obligations.

Retention periods may vary depending on the type of information and why it was collected.

OG Royale application information may be retained while the relevant application program operates and for up to 12 months following a decision where reasonably necessary to manage follow-ups, reviews, or related matters.

An application that was not selected is de-identified 12 months after the decision: only its application number, status, and dates are kept.

Account information may generally be retained for as long as the account remains active.

X access tokens are kept while your account exists and you have not revoked them on X; they are deleted with the account.

If you delete your account, we will delete or de-identify applicable account information in accordance with our retention practices and legal obligations, except where information must reasonably be retained for security, fraud prevention, dispute resolution, legal compliance, enforcement, or other legitimate purposes permitted by law.

Deleting a Royale account does not remove information recorded independently on public blockchains or information controlled by third-party services.

Publicly published historical results may be retained where necessary to preserve the integrity and transparency of completed opportunities, subject to applicable law.

11. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.

These measures may include access controls, authentication mechanisms, infrastructure security, monitoring, and abuse-prevention systems.

However, no website, online service, database, blockchain network, or method of electronic transmission can be guaranteed to be completely secure.

You are responsible for maintaining the security of your accounts, devices, wallets, credentials, and authentication methods.

Royale will never ask you to provide your wallet seed phrase or private key.

If you believe your Royale account or information may have been compromised, contact us through an official Royale communication channel.

12. Your Privacy Rights

Depending on where you live, applicable law may provide you with certain rights regarding your personal information.

These may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of certain personal information;
• request restriction of certain processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent;
• request information regarding how your personal information is used or disclosed; and
• lodge a complaint with an applicable data protection authority.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before completing certain requests.

Royale will not discriminate against users for exercising privacy rights available to them under applicable law.

To submit a privacy request, contact us using the information in the Contact Us section below.

13. Account Deletion

Where account deletion is available through the Services, you may use that functionality to request deletion of your Royale account.

Deleting an account may:

• remove or de-identify certain profile information;
• disconnect linked sign-in methods;
• remove connected wallet associations from active account features; and
• withdraw the account from eligible opportunities that have not yet been completed, where applicable.

Certain information may remain where retention is reasonably necessary for legal compliance, fraud and abuse prevention, security, dispute resolution, enforcement, or maintaining the integrity of completed and publicly published results.

When you delete your account, your OG Royale application loses its contact email, your answers, and technical data such as a hashed IP address and browser details. Its application number, status, dates, internal review notes, and the verified X, Discord, and wallet identifiers remain, so that the one-application-per-person rule and the waiting period before a new application keep working.

Information stored independently by third parties or recorded on public blockchains is outside Royale’s control and is not deleted when you delete your Royale account.

14. Children’s Privacy

The Services are not intended for individuals under 18 where an account, application, wallet connection, or participation in opportunities is required.

We do not knowingly collect personal information from individuals under 18 through those features.

If we become aware that personal information was collected from an individual who was not eligible to use those features, we may take reasonable steps to delete or restrict that information as appropriate.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as Royale evolves or as necessary to reflect changes to our Services, technology, legal obligations, or data practices.

When we make material changes, we may provide notice through the Services or through other reasonable means where required.

The “Last Updated” date at the top of this Policy indicates when it was most recently revised.

We encourage users to review this Policy periodically.

16. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise an applicable privacy right, you can contact us at:

Royale Web3
Email: support@royale-web-3.com
Contact form: royaleweb3.com/contact
Website: royaleweb3.com

You may also contact us through the official support channels identified on the Royale website.