Privacy
policy.

At a glance

• Your wallet address is your account. We don’t ask for your name, email or phone number to use ClubStubs, and we never ask for or collect your private key or seed phrase. Never send it to us.
• What you do with Stubs happens on the Solana blockchain, which is public and permanent. We keep a copy of ClubStubs activity to run the app.
• Our servers keep logs, including IP addresses, for up to 30 days, for security and to stop abuse.
• The app uses cookies only to keep you signed in. This website sets no cookies and uses no third-party analytics or tracking tags. We count visits by where they came from, as totals only.
• We don’t sell your personal information for money.

Who we are and what this covers

This Privacy Policy explains how ClubStubs, LLC (“ClubStubs,” “we,” “our” or “us”) collects, uses and shares information when you use our website at www.clubstubs.com (the “Website”), our app at app.clubstubs.com (the “App”), and our program on the Solana blockchain at 7BckfGzhpGuqcF8cwdrwmCW3d6cuLhPCb7YSt9PYzDrB (the “Program”), together the “Services.”

It forms part of our Terms of Service, which also govern your use of the Services, including how disputes are resolved. Words defined in the Terms have the same meaning here.

Information we collect

• Your wallet address. When you connect a Solana wallet and sign in, your wallet signs a message proving you control it. Signing in isn’t a transaction and moves nothing. We create an account record tied to your wallet address and note when you sign in.
• Your activity on ClubStubs. Mints, listings, sales, purchases and claims are transactions on the Solana blockchain. We read them from the blockchain and keep a copy in our database to show games, Stubs, listings and activity in the App. We also keep records of the mint permits you request (your wallet, the game, the number of Stubs and when), and of any wallet we block under the Terms, with the reason.
• Technical information. When you use the Services, our servers and service providers receive your IP address, your browser and device type, the pages and resources you request, and the time. We use this in server and security logs, which we delete within 30 days, and to rate-limit requests.
• Where visits come from. When you arrive at the Website or the App from another site, your browser tells our server which site sent you (just its name, such as google.com) and any campaign tag in the link (utm_source). We add one to a daily total for that source and keep nothing else: no IP address, identifier or cookie is stored with it, and the totals can’t be linked to you.
• When you contact us. If you email us, we receive your email address and whatever you include in your message, such as your wallet address or a transaction link.

We don’t ask for your name, postal address, phone number, government ID or payment card details to use ClubStubs.

WE CANNOT ACCESS YOUR WALLET PASSWORD, PRIVATE KEYS OR SECRET RECOVERY/BACKUP PHRASE. YOU ARE SOLELY RESPONSIBLE FOR KEEPING THEM SAFE AND CONFIDENTIAL. ClubStubs will never ask for them, and is not responsible for Stubs that become inaccessible because a wallet can’t be recovered.

How we use it

• to run the Services: signing you in, showing your Stubs, listings and claims, and keeping the App in step with the blockchain
• to issue mint permits and enforce the limits and rules in the Terms, including stopping bots, automation and the use of multiple wallets to get around limits
• to keep the Services secure and to detect, investigate and prevent fraud, abuse and attacks
• to answer your messages and help with problems
• to understand how the Website is used and how our marketing performs, and to improve both
• to comply with the law, respond to lawful requests, and enforce our Terms

How we share it

We share information only as described here:

• Service providers that run parts of the Services for us, under their own terms and privacy policies: Supabase (our database and sign-in), Hetzner (our servers), Solana RPC providers (your browser and our servers connect to them to read and send transactions, so they receive your IP address and wallet requests), and Pinata and IPFS gateways (which store and serve Stub artwork, and see the IP address of anyone loading it).
• The public blockchain. Transactions you make are published on Solana for anyone to see; see below.
• Legal reasons. When we believe the law requires it, or to protect the rights, property or safety of ClubStubs, our users or others.
• Business changes. As part of a merger, acquisition or sale of all or part of our business, subject to this Policy.

Other users, apps and services you transact with can see your public transaction information, and may store or share it under their own policies.

The blockchain is public and permanent

Your wallet address, the Stubs it holds and every transaction it makes on Solana are public. Anyone can view them with a blockchain explorer and may be able to connect them to you. Blockchain records can’t be changed or deleted, by us or anyone else, so the requests below can only cover the copies we keep off-chain.

Cookies and browser storage

• App sign-in cookies keep you signed in. They’re needed for the App to work.
• Browser storage in the App remembers your light or dark setting and the wallet you last connected.
• The Website sets no cookies and uses no browser storage.

You can block or delete cookies in your browser settings; the App won’t keep you signed in without its cookies.

How long we keep it

• Your account record and our copy of ClubStubs activity, for as long as we run the Services, or longer where the law requires it.
• Mint permit and block records, as long as needed to enforce the Terms.
• Server logs, for up to 30 days.
• Support emails, as long as needed to help you and keep a record of the conversation.

Security

We use reasonable technical and organizational measures to protect the information we keep. No system is perfectly secure, and we can’t guarantee the security of information sent over the internet. Keeping your wallet and its recovery phrase safe is up to you.

Your choices and rights

You can use the Website without signing in, and sign out of the App at any time. You can ask us to tell you what off-chain information we hold about your wallet, or to delete it, by emailing support@clubstubs.com. We may ask you to prove you control the wallet, for example by signing a message. We may keep information where the law requires it or to enforce our Terms, and we can’t delete anything recorded on the blockchain.

Depending on where you live, you may have further rights over your personal information, such as rights to access, correct, delete, restrict or object to its use, or to complain to a data protection authority. We’ll respond to requests as the law where you live requires.

Children

The Services are only for people 18 or older. We don’t knowingly collect information from anyone younger. If you believe a child has used the Services, contact us and we’ll delete what we hold.

Where information is processed

ClubStubs is based in the United States, and our service providers may process information in the United States, the European Union and other countries, which may have different data protection laws from where you live. By using the Services, you understand that your information may be processed in those places.

Other sites and services

The Services link to websites, wallets and other services run by others. We don’t control them and aren’t responsible for how they handle your information. Read their privacy policies before using them.

Changes and contact

We may update this Policy from time to time. We’ll post the new version here and change the date at the top. If you keep using the Services after an update, the updated Policy applies.

Questions about this Policy or your information? Email support@clubstubs.com.