Pupkins Gen 0 Privacy Notice

1. What we collect on this site

• Sign-in details: the email address you get a sign-in code at, or the wallet address you sign in with, the identifiers our sign-in provider Privy gives your login, and your Moku account. Wallets on your Privy login are added to your Moku account.
• Reminder sign-ups: the email address you enter to hear when the raffle opens.
• Wallet addresses: every wallet on your account, and the wallet you pay from.
• Your activity in the drop: TICKET purchases (wallet, amount, transaction and time), your TICKET balance, your raffle entry and how it was weighted, your wins, box claims and deliveries, what you play and win in the second chance shop, your withdrawals, and boxes you open and Pupkins you mint.
• Device and log data: your IP address, browser, the pages and requests you make, times and errors. Our hosting and security providers and our servers record these to run and protect the site.

We don’t ask for your name, phone number, postal address, government ID or payment card details, and we never ask for your seed phrase or private keys.

2. What we read from blockchains

Raffle chances partly depend on holdings (see the raffle rules). When the raffle closes, for every wallet on your account we read, from the public blockchains:

• the Mokis it held on Ronin, and
• the SCHIFFY it held on Robinhood Chain,

each as an average over the 30 days before the close. To work these out, we read each wallet’s token transfer history. We store the averages with your entry.

We also read blockchains to confirm your TICKET purchases, box deliveries, withdrawals and mints.

3. How we use it

• To run the drop: signing you in, crediting TICKET, running the draw, delivering boxes, running the shop, paying withdrawals and handling the reveal.
• To send the reminder you asked for: we use reminder emails only to tell you about the Gen 0 drop.
• To keep it fair and safe: spotting multiple accounts, shared wallets, bots, fraud and other breaches of the terms.
• To support you when you contact us.
• To meet legal obligations, such as sanctions, tax and accounting rules.

4. What is public

• On the blockchain: your TICKET purchases, box deliveries, transfers, withdrawals and mints are public and permanent, along with your wallet address. Anyone can see them.
• On the site: totals, such as all TICKET entered and the number of boxes and winners. Your own balance and chances are shown only to you.
• The draw list: so anyone can check the draw, after it we publish every entry under a pseudonym, with its TICKET entered, its earliness and holdings scores, and its average Mokis and SCHIFFY, along with the winners. What was in each winner’s box is added after the reveal. The pseudonym is a code made from your account, different for each raffle. The list doesn’t include your email or wallet addresses.

Holdings are public on the blockchain, so someone who studies the chain may be able to match an entry on the draw list to a wallet.

5. Who we share it with

• Privy, which runs sign-in, sends sign-in codes and keeps the wallets on your login.
• Our infrastructure providers: Vercel, which hosts this site; Cloudflare, which protects our servers; Google Cloud, which runs them; and MongoDB Atlas, our database.
• Blockchain node providers for Robinhood Chain and Ronin, such as Sky Mavis, which see the wallet addresses we look up.
• An email provider, when we send reminder emails.

We also share information in the other cases the Moku Privacy Policy describes, such as when the law requires it. Marketplaces where you trade boxes or Pupkins get information from you directly, under their own policies.

We don’t sell your personal information, and we don’t share it for advertising.

6. Cookies and browser storage

• One sign-in cookie (moku_session), which keeps you signed in. Scripts can’t read it, and it is sent only to mint.pupkins.gg.
• Privy’s sign-in data, kept in your browser’s storage so you stay signed in.
• Two saved choices in your browser’s local storage: the email you entered for reminders, so the site shows you are signed up, and the wallet you last signed in with (its address and name), so the purchase window can pick it.

This site has no analytics, advertising or tracking cookies, and serves its fonts itself. To remove these items, sign out and clear this site’s data in your browser.

7. How long we keep it

• Reminder sign-ups: while we use them for the Gen 0 drop. Ask and we’ll remove you sooner.
• Drop records (purchases, entries, the draw, wins, shop plays and withdrawals): as long as we need them to pay out unspent TICKET, keep the draw checkable, handle disputes, and meet tax and accounting rules, which is often several years.
• Logs: for a short operational period, unless we need them longer to look into a security problem or abuse.
• Your Moku account: as the Moku Privacy Policy describes.

8. Your choices and rights

You can ask to see, correct or delete your information, or to object to how we use it. Email support@moku.gg with “Privacy Request” in the subject line, or open a support ticket in our Discord. We may need to confirm it’s you, and we will respond within 30 days.

• If you still have unspent TICKET, withdraw it before asking us to delete your account. We keep the records we need to pay you.
• We can’t change or delete anything on a blockchain. We keep the published draw list as it is, because changing it would stop the draw from being checkable.

The Moku Privacy Policy lists your rights in full, including the right to complain to your data protection authority.

9. Age

The drop is only for people aged 18 or over. We don’t knowingly collect information from anyone younger. If you think someone under 18 has given us their information, contact us and we will delete it.

10. Everything else

The Moku Privacy Policy also applies, including how we protect information, the legal bases we rely on in the EEA, UK and Switzerland, international transfers, the rights of California residents, and how we tell you about changes. Degenku, the company that runs the Moku brand, is responsible for your information (the “controller”).

11. Contact us

• Email: support@moku.gg, with “Privacy Request” in the subject line
• Discord: open a support ticket in the Moku Discord