Privacy Policy

This policy explains how Sumiro, operating Boop, collects, uses, discloses, and protects information when you use the website, wallet interface, API, MCP server, and related services.

Information we collect

We collect wallet addresses, signed authentication challenges, transaction signatures, program receipt addresses, selected network, pack activity, prize records, IP address, request metadata, device and browser information, cookie choices, support messages, and security events. We never request or store seed phrases or private keys.

Sources and purposes

We receive information directly from you, from your wallet, from public Solana records, from service providers, and from security systems. We use it to execute requested transactions, display history, prevent fraud, protect the treasury, enforce eligibility rules, respond to support requests, comply with law, and improve service reliability. Optional analytics run only after consent where consent is required.

Legal bases and consent

Where applicable, processing is based on contract, legitimate interests, legal obligations, protection of users and the service, or consent. You may withdraw consent for optional processing. Withdrawal does not affect processing already completed or information that must be retained by law.

Sharing

We may share limited information with infrastructure, hosting, database, security, analytics, legal, audit, and compliance providers. Solana wallet addresses and transactions are public by design. We may disclose information when required by law, to protect rights and safety, or as part of a corporate transaction. We do not sell personal information.

Retention and security

We keep information only as long as needed for the purposes described here, legal obligations, dispute handling, and fraud prevention. Security measures include encryption in transit, restricted service credentials, wallet signature verification, request limits, origin checks, audit events, and database row policies. No system can guarantee absolute security.

United States privacy rights

Depending on your state and whether its law applies to us, you may request access, correction, deletion, or a portable copy, and may opt out of covered sale, sharing, targeted advertising, or profiling. California residents may also request categories and specific pieces of personal information and receive equal service when exercising covered rights. Boop does not sell personal information. See the California Privacy Protection Agency rights summary.

Singapore PDPA

For individuals covered by Singapore's Personal Data Protection Act, we provide notice of purposes, limit collection and use to appropriate purposes, take reasonable protection measures, support access and correction requests, limit retention, and assess overseas transfers. The Personal Data Protection Commission describes these obligations.

International transfers

Information may be processed in the United States, Singapore, and other countries where our providers operate. Where required, we use contractual or other recognized safeguards intended to provide comparable protection.

Cookies

Essential storage remembers network, wallet, security, and consent choices. Optional analytics storage is disabled unless accepted. You can change browser storage settings, but essential features may stop working.

Children

The service is not directed to children. You must meet the minimum legal age stated in the Terms. We do not knowingly collect personal information from children.

Requests and complaints

Submit privacy requests, appeals, or complaints to privacy@sumiro.com. We may verify control of a wallet by asking for a signed challenge. Authorized agents may be required to provide authority and identity verification. Singapore requests may be addressed to the Data Protection Officer at the same address.

Changes

We may update this policy. Material changes will be posted with a new effective date and additional notice when required.