Application privacy notice
Effective November 4, 2026.
What the application uses
We collect your X account ID and handle, submitted Ethereum address, optional reply URL and statement, application status, consent record, social verification results, and review notes. Do not submit sensitive personal information in your statement.
Why we use it
We use this information to process your allowlist application, check duplicate submissions, verify available social activity, prevent abuse, and support manual decisions. Submission does not prove wallet ownership.
Sign-in and bot protection
X sign-in requests read-only access to your profile, posts, and likes. The app does not request permission to post, like, or repost on your behalf. Your short-lived X access token is encrypted in a secure, HTTP-only cookie in production and expires within two hours. We do not request offline access. Cloudflare Turnstile processes bot-protection signals. A hashed network identifier is used to rate-limit sign-in starts.
Who can see your data
Authorized reviewers can see applications and export private CSV files. Hosting and database providers process data to operate this service. A shareable card URL exposes your X handle and application receipt to anyone with the link. Cards do not expose wallet addresses, social evidence, decisions, or private notes. Sharing is optional.
Your choices
You can sign out or revoke the app in X settings. For access, correction, or deletion requests, contact @therebelkins on X. Applications that are not approved are removed after 90 days. Approved application records are retained to administer the allowlist. Review audit records are retained for up to 90 days.