Privacy Policy

1. Who is responsible

NOODLEZ LLC, based in Cyprus, is the controller responsible for the personal data we process to operate Noodlez at noodlez.lol. Contact us at legal@noodlez.lol for privacy questions or requests.

This notice covers Noodlez’s handling of your information. Wallet providers, sign-in providers and independent blockchain participants also handle information under their own responsibilities and notices.

2. Information we process

Account and sign-in information

Profile identifier, username, avatar, connected Solana wallets, Privy identifier, onboarding and account status, linked-sign-in status and relevant timestamps. Privy handles authentication and any email you link. Noodlez receives verified account details and whether an email is linked; email addresses and Privy identifiers are not part of our public profile display.

Community participation

Proposals, artwork and banners, lore, submitted links, votes and their recorded weight, project-chat messages, reputation, badges and participation history. We also record signed-in visits by profile and day for participation features.

Optional social information

If you connect X, we receive the account identifier, username and verification/link status. Your linked X username may be public and the connection can affect participation reputation. Historical verification or revocation records may be retained for integrity and abuse prevention.

Wallet and transaction information

Public wallet addresses and, when transaction features are used, relevant balances, positions, transaction messages, signatures and preparation/reconciliation history. Blockchain information can also be obtained from public networks and RPC providers.

Technical and security information

Requests can expose an IP address, browser/device information and request/error metadata to our infrastructure and providers. Application rate limits use keyed identifiers derived from IP or account information, action counters and time windows. A derived identifier is not a promise of anonymity.

Communications

Information you choose to provide in support, moderation or privacy requests. Please send only what is needed and never send wallet secrets.

3. What is public

Noodlez is a public community, not a private messaging service. Your completed profile, associated public wallet addresses, proposal media, published proposals, placed votes, public reputation and visible project-chat messages can be viewed and copied by others.

Email sign-in details, Privy identifiers, private account-control records and security logs are not deliberately included in public community views. A public wallet can nevertheless link your activity to other blockchain information, and a connected X username can identify you.

Uploaded public media is delivered through public storage URLs. Hiding a proposal or message is not the same as erasing its underlying records, previously cached files or copies held by others. Do not upload sensitive documents or other people’s private information.

4. Purposes and legal bases

• Providing the requested service: necessary account, profile, proposal, vote, chat and requested transaction processing is used to perform our service agreement with you or take requested steps before it.
• Security and community integrity: our legitimate interests include preventing fraud and spam, keeping votes and reputation reliable, moderating abuse, maintaining records needed for safe retries, resolving disputes and establishing or defending legal claims. These interests must be balanced against your rights.
• Optional connections: where we ask for consent to an optional social connection or another optional use, you can withdraw that consent. Declining an optional X connection does not prevent ordinary community participation.
• Legal requirements: we process or retain information where necessary to meet an applicable legal obligation, such as a binding disclosure or recordkeeping requirement.

We do not treat merely visiting the site as consent to unrelated marketing or optional tracking. Required account information is needed to provide authenticated participation; without it you can still read publicly available pages. Ask us for more detail about a particular purpose or legitimate-interest assessment.

5. Providers and disclosures

Access is limited to people and providers who need it for their role. The service uses the following categories of providers:

• Privy for sign-in, account connections and supported wallet functionality.
• Supabase for database, public media storage and backend functions.
• Netlify for website hosting, delivery and related infrastructure logs.
• Helius and Solana infrastructure for relevant network reads and transaction delivery.
• Your selected wallet, wallet-connection service and optional social provider when you choose those integrations.

Public community information is disclosed to other visitors by design. We may also disclose necessary information to address a valid legal requirement, protect users or establish and defend legal claims. A business or service reorganisation must preserve applicable privacy obligations and require appropriate notice where necessary.

We do not sell personal information or use it for targeted advertising in this beta. Following an external link, including to X, Telegram, an explorer or a proposal’s website, takes you to a separate service.

6. International processing

Our providers and their infrastructure may process information outside Cyprus or the European Economic Area. We do not represent that every request, log or file remains in one country.

Transfers requiring a GDPR safeguard must use an appropriate legal mechanism, such as an applicable adequacy decision or standard contractual clauses with additional measures where needed. Provider terms describe their arrangements. Contact legal@noodlez.lol to request information about the recipients, locations and applicable transfer safeguards for your data.

7. Browser storage and cookies

Sign-in and wallet integrations may use cookies or browser storage to maintain sessions and connections. The app also stores some pending transaction identifiers and receipts on your device to reconcile an action after a reload. These records may include a profile, wallet or cycle identifier and a transaction signature; they are not seed phrases.

Logging out or clearing browser storage may remove local session or recovery information, but does not delete server-side records, provider-held information or finalized blockchain transactions. Keep any transaction reference you need before clearing it.

The beta does not intentionally include our own advertising pixels or behavioural analytics tools. This is not a claim that infrastructure or third-party SDKs collect no usage information. If we introduce optional tracking, we will provide the information and choices required before using it.

8. Retention and blockchain records

We retain information according to its purpose: providing an active account, displaying requested public contributions, maintaining participation and moderation integrity, securely reconciling actions, resolving disputes and meeting applicable legal obligations. Retention is assessed against those needs and valid rights requests; this notice does not promise a fixed automatic deletion deadline that the system does not enforce.

Removing content from public display or disconnecting a provider does not necessarily erase historical security or integrity records. Copies may remain in backups, provider systems, public-media caches or records another user saved. Where we control those copies, applicable rights and retention requirements still apply.

Community proposals, votes and chat are not all stored on a blockchain. Separately, independent blockchain records can include wallet addresses and finalized transactions. We cannot unilaterally alter those networks. This does not remove your statutory rights or our duties for data we control; we assess requests individually.

9. Your choices and rights

Subject to the applicable conditions, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send requests to legal@noodlez.lol. We may need proportionate verification that you control the relevant account or wallet; we will not ask for a seed phrase. There is currently no self-service account deletion button. Contact us for account closure, removal or optional social-connection requests; we assess what can and must be removed or retained and explain applicable limitations.

We respond within the periods required by applicable law, normally within one month for GDPR rights requests, and will explain any permitted extension. You may also complain directly to the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority. Contacting us first is not a prerequisite.

Automated rules calculate reputation, voting availability and project rankings. You can ask us to explain a relevant rule, review an account restriction or challenge the accuracy of associated records. Any applicable rights concerning automated decision-making remain unaffected.

10. Security and age limits

We use access controls, authenticated backend operations and abuse-prevention measures, but no internet service can promise absolute security. Keep sign-in methods secure, review wallet prompts and avoid posting secrets. Contact legal@noodlez.lol if you suspect an account or data-security incident.

Noodlez is intended for people aged 18 or older. If you believe we hold personal data about a child using the service, contact us so we can investigate and take appropriate action.

11. Changes to this notice

We update this notice when processing or service details change. The date above identifies this version. We will highlight material changes or communicate them through an available account-contact channel as appropriate, and obtain any additional consent required before beginning an optional use.

For service rules, see the Terms & Conditions. For a privacy question about this notice or a particular record, contact legal@noodlez.lol.