Skip to content
finagotchi.

Privacy Policy

Last updated: October 2026

1. What data we collect

Waitlist. When you join our waitlist, we collect your email address and the page section you signed up from.

Visit analytics. When you browse the site, we record referral codes and the page you arrived from. Your IP address and browser user agent are combined into a salted, one-way hash so we can count unique visitors; we never store your raw IP address.

Wallet address. When you connect a Solana wallet in the companion app, we store your public wallet address to link your pet, XP, streaks, and collectibles to you. Your wallet address is a public key: we never see or ask for your seed phrase or private keys, and transactions are always signed inside your own wallet.

On-chain activity. Mints, quests, XP, Care Clock state, and burn events are recorded on the Solana blockchain, where they are public by design.

App & device data. When you use the mobile app, we collect basic usage data, your push notification token, and pairing information for your hardware device (such as firmware version and connection state).

What we don't collect. We don't offer social logins, so we never receive OAuth tokens from Google, Apple, or any other identity provider. We also don't send your inputs, prompts, or personal data to third-party AI or LLM APIs, and we don't run advertising trackers on the site.

2. How we use your information

  • Notify you about product updates, pre-orders, and beta access.
  • Link your wallet address to your pet and track progression.
  • Send Care Clock reminders and quest alerts you opt into.
  • Pair and sync your hardware device with the companion app.
  • Measure site traffic and understand which pages perform well.
  • Improve the website, app, and product experience.
  • Respond to your questions or support requests.

3. Mobile app permissions

The Finagotchi companion app is built with Expo and requests only the permissions it needs:

  • Bluetooth (BLE), to pair with your Finagotchi desk device and display your pet on it.
  • Notifications, to warn you before your Care Clock runs out and to deliver quest updates. You can disable these at any time in your system settings.

Some data, such as your wallet connection state and app preferences, is stored locally on your device and never leaves it.

4. Blockchain data

Finagotchi lives on Solana. Transactions tied to your wallet address, including mints, quest completions, and burns, are public and permanently visible to anyone. Blockchain records cannot be altered or deleted, by us or by you. Please keep this in mind when connecting a wallet: we recommend not using an address you wish to keep unlinked from your public activity.

5. Cookies and analytics

We use Vercel Analytics and our own lightweight visit tracking to measure site traffic. Our visit tracking identifies you only by a salted hash, not by your IP address. We don't use advertising cookies or cross-site trackers. You can manage or disable cookies through your browser settings.

6. Third-party services and sub-processors

We use the following third-party services to run Finagotchi. Each processes data only as needed to provide its service and under its own privacy policy:

  • Supabase: hosts our database, where waitlist emails, visit statistics, and app data are stored.
  • Vercel: hosts the website and provides privacy-focused site analytics.
  • Expo: builds the companion app and delivers push notifications.
  • Solana RPC providers: read and write blockchain data on our behalf.
  • Apple App Store and Google Play: distribute the companion app.

We don't use a payment processor on the site today, we don't sell your personal information, and we don't share it with third parties for their own marketing.

7. International data transfers

Some of our service providers (including Supabase and Vercel) are based in the United States or process data there. If you use Finagotchi from the EU, EEA, or UK, your personal data may be transferred outside your region. These transfers are covered by the providers' standard contractual clauses or equivalent safeguards.

8. How we protect your data

Your data isn't sitting in an open, unauthenticated table. Our database is only reachable from our server-side code, which uses a privileged key that never ships to the browser, so the public site and app cannot read or write the database directly. All writes go through rate-limited API endpoints that validate their input. Data is encrypted in transit with TLS and encrypted at rest by our hosting providers. Visitor identifiers are salted and hashed, so even our own analytics don't contain raw IP addresses.

9. Data retention

We keep your waitlist email until you ask us to delete it or until it is no longer needed for the purposes described above. Your wallet address is retained while your pet is active. On-chain data is permanent and cannot be deleted (see section 4).

10. Your rights (GDPR & CCPA)

If you're in the EU, EEA, UK, or California, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate personal data.
  • Request deletion of your personal data (the right to be forgotten).
  • Receive a copy of your data in a portable format.
  • Object to or restrict certain processing.
  • Opt out of the sale of your personal information (we never sell it).

To exercise any of these rights, email us at contact@finagotchi.app and we'll respond within 30 days. This covers the data we hold off-chain, such as your email, hashed visit records, and app preferences. Data recorded on the Solana blockchain is outside anyone's control and cannot be modified or removed.

11. Children's privacy

Finagotchi is not directed at children, and you must be at least 16 years old (or the age of digital consent in your country) to use the website, join the waitlist, or use the companion app. We don't knowingly collect personal data from children. If we learn that we have, we'll delete it. Please contact us at contact@finagotchi.app if you believe a child has given us their data.

12. Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page, and for significant changes we'll do our best to let you know in advance.

13. Contact us

Questions about this policy or a data request? Email us at contact@finagotchi.app. This inbox is monitored and is the right place for access, correction, and deletion requests.