Create

Privacy Policy

Effective September 22, 2026. Terms of Use · Risk disclosure

1. Who we are

This Privacy Policy explains how Kontract Labs LLC ("Kontract", "we", "us" or "our") collects, uses and shares information when you use the kontract.fun website, application and related services (the "Site"). It forms part of our Terms of Use. Kontract is the controller of the personal information described here. Contact details are in Section 14.

2. What this policy covers

It covers information we process through the Site. It does not cover public blockchains, which we do not control, or third-party wallets, venues and websites you reach through the Site, which have their own policies. Anything recorded on a blockchain, including wallet addresses, balances and transaction history, is public and outside the choices described below.

3. Information we collect

  • Wallet and account information. The wallet addresses you sign in with or link, and the signatures that prove you control them. If you sign in through our authentication provider, Privy, we receive a Privy user identifier, the wallets Privy creates for you, and an identifier for the login you used (an email address, or the handle of a social account). We never receive or store your private keys or recovery phrases.
  • Profile and content. Your username, display name, profile picture, banner and bio; tokens you create and their names, tickers, images, descriptions and links; posts, follows and share links you create. This content is public by design.
  • Activity on the Site. Launches, orders and their payments, address reservations, referral links you open, referral rewards and payout requests (including the wallet you ask to be paid to), and records of the share links you create and how often they are viewed.
  • Funding routes. When you pay for an action with funds held on another chain, we record the route: which chain the funds came from, the amounts quoted and delivered, the quote and the authorisation you gave for that one transfer, the transaction that carried it out, and whether it completed or was refunded. We keep this so that a route interrupted part-way can be found and finished or returned, so a transfer is never made twice, and because it is a record of money that moved. The wallet addresses involved are your own and the routing service's. We never receive or store your private keys.
  • How you arrived. The first campaign parameters, landing page and referring site of your first visit, recorded once when you sign in.
  • Device and network information. A random identifier stored in your browser, a keyed one-way hash of your network's address range (not the address itself), browser type, and the IP address that reaches our servers. We use these to keep the Site secure and to limit abuse of free features and of the referral program.
  • Server logs. For each request our servers record the time, the page or API route requested, the response and how long it took, the IP address that reached us, the country Cloudflare attributes to it, your browser, device type and operating system as reported by your browser, your preferred language, the site that referred you and any campaign tags in the link, and a one-way keyed label of your sign-in session (never the session itself). We keep these records for 48 hours, after which only hourly totals without IP addresses are kept, for 90 days. We use them for security, abuse prevention, capacity planning and understanding how the Site is used. Cloudflare Web Analytics, a cookie-less service, also measures page visits for us.
  • Public blockchain data. Balances, holdings, trades and where wallets were first funded from, read from public chains to show the Site's pages and figures and to run our programs fairly.
  • Communications. What you send us when you contact us.

We do not collect government identity documents, bank or card details, or precise location.

4. How we use information

  • to operate the Site, authenticate you and keep you signed in;
  • to prepare and display the transactions you choose to make, and to deliver addresses you order;
  • to show tokens, profiles, rankings, share cards and other content;
  • to run the referral program and promotions, and to pay rewards;
  • to detect and prevent fraud, abuse, impersonation, market manipulation and security threats;
  • to understand how the Site is used and improve it;
  • to enforce our Terms, answer complaints and disputes, and comply with the law.

Where the law requires a legal basis, we rely on performing our agreement with you, our legitimate interests in operating, securing and improving the Site, your consent where we ask for it, and our legal obligations.

5. How we share information

  • Service providers who process information for us under contract, including Privy (authentication and embedded wallets), Cloudflare (network, security and storage), Fly.io (hosting), ArDrive Turbo and Pinata (storage of token images and metadata, which are public and permanent), the cross-chain routing service that carries out a funding route you ask for (which receives the wallet addresses involved and the amounts), blockchain node providers (such as Helius, Alchemy, SolidRPC and NodeReal) that receive the transactions you send and the addresses the Site looks up, and GPU providers that generate ordered addresses and receive only the pattern being searched.
  • Public display. Your profile, content, wallet addresses and on-chain activity are visible to anyone on the Site or on the blockchain. The page behind a share link shows the card as it was when shared and the transactions behind it, which name the wallet.
  • Legal and safety. Where required by law, legal process or a government request, or where needed to protect the rights, property or safety of Kontract, our users or others.
  • Business transfers. In connection with a merger, financing, acquisition or sale of all or part of our business, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

6. Cookies and browser storage

We use browser storage and a small number of cookies to keep you signed in, remember preferences and drafts, and attribute a referral link you opened. Privy stores its authentication state in your browser. Cloudflare may set cookies for security. We do not use advertising cookies. Cloudflare Web Analytics measures page visits without cookies or cross-site identifiers. You can clear site data in your browser; doing so may sign you out. We do not respond to Do-Not-Track signals, because there is no common standard for them.

7. Blockchain data

Transactions you authorise are recorded on public blockchains permanently. We cannot edit, delete or hide on-chain records, including those linked to your wallet, or metadata published to IPFS. Because wallet addresses are public and persistent, others may link your address to other information about you. Treat a wallet address as pseudonymous, not anonymous.

8. Retention

We keep account information and activity while your account exists and for as long as needed to run the referral program, resolve disputes about orders and payments, and meet legal obligations. Abuse and rate-limit counters are kept for hours to days. Providers keep their logs for their own periods. Public content stays visible while it is listed on the Site; on-chain and IPFS records remain regardless.

9. International transfers

Kontract is based in the United States, and we and our providers may process information in the United States and other countries whose data protection laws differ from yours. Where required, we rely on appropriate safeguards, such as standard contractual clauses.

10. Your rights and choices

You can view and change your profile on the Site and unlink wallets. Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority. Residents of California, Virginia and other U.S. states with privacy laws may have similar rights, including to know what we collect and to not be discriminated against for using them; we do not sell or share personal information as those laws define it. To make a request, contact us (Section 14). We may ask you to prove control of the relevant account or wallet, for example by signing a message. We cannot delete or alter blockchain records, and we may keep what the law or an open dispute requires.

11. Children

The Site is not directed to anyone under 18, and we do not knowingly collect information from them. If you believe a minor has given us personal information, contact us and we will delete it.

12. Security

We use reasonable technical and organisational measures to protect the information we hold, including encrypting sensitive records at rest. No system is completely secure. The Site is self-custodial: you are responsible for securing your wallet, devices and credentials.

13. Changes to this policy

We update this policy when our practices change. The effective date above shows the latest revision, and we will announce material changes on the Site.

14. Contact

Kontract Labs LLC, 82 Wendell Ave., Ste 100, Pittsfield, MA 01201, US. Privacy questions and requests: [email protected].