Privacy Notice

This notice explains, in plain language, what the Plunderport early-access site (plunderport.fun) collects and why. Plunderport is an independent, pre-launch project. We do not collect email addresses, phone numbers, real names or payment details.

What we collect

• Your wallet address — the public EVM address you prove you control by signing a Sign-In with Ethereum message, plus the network ID your wallet reported. Signing is free and is not a transaction.
• Your X account identity — through X's official sign-in we receive your stable X user ID, username, display name, profile-image link, account creation date and follower count. We ask only for read access to your profile; we cannot post, follow, like or read DMs. The access token X gives us is used once to read your profile and is then revoked — we do not store it.
• Referral information — your referral code, who invited you (if anyone), when you joined, and how many valid referrals you have.
• Your leaderboard preference — whether to show your X handle publicly (off by default).
• Rewards campaign — which like, repost and comment tasks you opened and when, the links to your comments and, if you enter the Creator Program, the link to your post on X. We do not read your X activity: winners' tasks are checked by hand on X before payout.
• Security data — a session cookie, short-lived one-time sign-in codes, and a log of registration and moderation events that records account IDs and reasons, not your wallet address or handle. Your IP address is used briefly in server memory for rate limiting and is not stored in our database. When you register we keep a keyed hash of it for 24 hours, not linked to your account, to limit registrations per network.

Why we use it

• To run the early-access list and give you a personal referral link.
• To count referrals and tasks fairly, show the leaderboard, run the rewards campaign and pay its prizes to winners' registered wallets.
• To prevent abuse, such as duplicate or automated signups, and to review suspicious activity. Registrations from new or low-activity X accounts may be held for review before they count.

Joining early access does not guarantee an NFT, a whitelist spot, a mint allocation, prizes or a mint date. The rewards campaign has its own Rewards Rules; any other launch benefit will be announced separately.

What is public

The leaderboard shows your rank, XP and number of valid referrals. By default you appear under a generated pirate alias. Your X handle and avatar are shown only if you opt in, and you can switch this off at any time on your Captain's Pass. Your wallet address and X user ID are never shown publicly on this site. A comment task opens X with your wallet address in the reply: if you post it, it is public on X, under your X account.

Cookies and browser storage

• Session cookie — keeps you signed in (up to 6 hours before registering, up to 30 days after).
• Referral cookie — remembers which invite link brought you here, for up to 30 days. It is signed so it can't be tampered with.
• Wallet connection state — your wallet software and our wallet library may keep connection details in your browser's local storage.

We use no advertising or analytics cookies.

Who else is involved

We don't sell your data. These providers process data so the site can work:

• our hosting provider (a virtual server that runs the site and database);
• X, for sign-in (see X's privacy policy);
• Cloudflare Turnstile, which checks for bots using browser and device signals (see Cloudflare's privacy policy);
• WalletConnect / Reown, only if you choose to connect a mobile wallet that way.

How long we keep it

Sign-in codes and unused sessions expire within hours and are deleted automatically. Your registration is kept for as long as the early-access campaign runs, or until you ask us to delete it. Audit records, which contain no wallet address or handle, are kept to protect the integrity of the referral program.

Your choices

• Turn the public display of your X handle on or off at any time from your Captain's Pass.
• Request deletion of your registration from your Captain's Pass. Once processed, your record is removed and any XP you gave or earned — referrals and tasks — stops counting.
• Revoke Plunderport's X access at any time in X settings under “Connected apps” (x.com/settings/connected_apps).
• Contact the team through the official Plunderport X account linked in the site footer.

Security

Wallet ownership is checked with a one-time, expiring signature request bound to this website. Sessions use secure, HTTP-only cookies. Data is stored in a private database that is not exposed to the internet. No system is perfectly secure, so never share your seed phrase or private key with anyone — we will never ask for them.

Age

The early-access program is intended for adults (18+, or the age of majority where you live).

Changes

We may update this notice as the project develops. The date at the top shows the latest version.