SCRLL Privacy Policy

1. Introduction

Welcome to SCRLL ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our browser extension, website, and related services (collectively, the "Service"). This includes our Web3 rewards platform that transforms social media engagement into blockchain-based rewards.

Please read this Privacy Policy carefully. By using our Service, you consent to the data practices described in this statement.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, username, profile information
• Authentication Data: OAuth tokens from connected platforms (Twitter/X, Discord, Google)
• Wallet Information: Solana wallet addresses (public keys only)
• Communication Data: Messages sent through our support channels

2.2 Information Collected Automatically

• Social Media Activity:
  • Follows, likes, retweets, replies on connected platforms
  • Time spent on partner websites and profiles
  • Engagement patterns and frequency
• Browser Extension Data:
  • Extension usage statistics
  • Pages visited on partner websites
  • Click events and navigation patterns
• Technical Information:
  • IP address, browser type, device information
  • Operating system, screen resolution
  • Extension version and performance metrics
• Blockchain Data:
  • Transaction hashes and wallet interactions
  • Token balances and transfer history
  • Smart contract interactions

2.3 Information from Third Parties

• Social Platform APIs: Public profile data, engagement metrics from Twitter/X, Discord
• Partner Brands: Campaign participation data, conversion events
• Blockchain Networks: Public transaction data from Solana network

3. How We Use Your Information

3.1 Core Service Functions

• Reward Calculation: Track and calculate SCRLL points for authentic engagement
• Account Management: Maintain user accounts, profiles, and authentication
• Brand Campaigns: Enable participation in brand reward campaigns
• Level System: Calculate user levels and multipliers based on activity

3.2 Platform Operations

• Fraud Prevention: Detect and prevent bot activity, spam, and abuse
• Performance Optimization: Improve extension performance and user experience
• Analytics: Generate insights for users, brands, and platform improvement
• Customer Support: Respond to inquiries and provide technical assistance

3.3 Communication

• Service Updates: Notify about new features, campaigns, and important changes
• Reward Notifications: Alert about earned points and level progression
• Marketing: Send promotional content (with your consent)

4. Information Sharing and Disclosure

4.1 We Share Information In These Situations:

With Partner Brands:

• Aggregated, anonymized engagement metrics
• Campaign performance data (no personal identifiers)
• Conversion and ROI analytics

With Service Providers:

• Cloud hosting providers (AWS, Google Cloud)
• Analytics services (anonymized data only)
• Customer support platforms
• Blockchain infrastructure providers

For Legal Compliance:

• To comply with legal obligations
• To protect our rights and safety
• In response to valid legal requests
• To prevent fraud or illegal activity

Business Transfers:

• In connection with mergers, acquisitions, or asset sales

4.2 We Do NOT:

• Sell personal information to third parties
• Share individual user data with brands
• Provide access to private messages or personal content
• Share wallet private keys or sensitive authentication data

5. Blockchain and Cryptocurrency Considerations

5.1 Public Nature of Blockchain

• All blockchain transactions are publicly visible
• Wallet addresses and transaction amounts are public records
• We cannot control or delete blockchain-recorded data

5.2 Token and Point Risks

• SCRLL points are earned through platform engagement but have no monetary value
• Points can be converted to SCRLL tokens at minimum thresholds, subject to availability
• Tokens may lose all value or become worthless
• Point conversion services may be suspended or terminated
• Token values may fluctuate significantly or become zero
• Regulatory status may change, affecting token utility
• No guarantee that points will retain conversion eligibility

6. Data Security

6.1 Security Measures

• Encryption: All data transmitted using TLS encryption
• Access Controls: Strict access controls and authentication
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Procedures for handling security breaches

6.2 Wallet Security

• We never store or access private keys
• Users maintain full control of their wallets
• Authentication through secure OAuth and Web3 protocols

7. Your Privacy Rights

7.1 Access and Control

• Account Dashboard: View and manage your data through our interface
• Data Export: Request a copy of your personal information
• Account Deletion: Delete your account and associated data
• Communication Preferences: Opt-out of marketing communications

7.2 Regional Rights (GDPR, CCPA)

• Right to Access: Request information about data we hold
• Right to Rectification: Correct inaccurate personal information
• Right to Erasure: Request deletion of personal data (subject to legal obligations)
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to certain processing activities

To exercise these rights, contact us at privacy@scrll.fun

8. Cookies and Tracking Technologies

8.1 Types of Cookies

• Essential Cookies: Required for basic service functionality
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and preferences

8.2 Browser Extension Tracking

• Local storage for user preferences and cache
• Activity tracking limited to partner websites and social platforms
• No tracking on unrelated websites

9. International Data Transfers

Data may be processed in countries other than your residence. We ensure adequate protection through:

• Standard Contractual Clauses
• Adequacy decisions
• Other lawful transfer mechanisms

10. Data Retention

10.1 Retention Periods

• Account Data: While your account is active plus 3 years
• Activity Data: 7 years for analytics and compliance
• Support Communications: 3 years
• Blockchain Data: Permanent (inherent to blockchain)

10.2 Deletion

• Personal data deleted upon account closure (except legal obligations)
• Anonymized data may be retained for analytics
• Blockchain records cannot be deleted

11. Children's Privacy

SCRLL is not intended for users under 13 years old. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the information immediately.

12. Third-Party Links and Services

Our Service may contain links to third-party websites, applications, and services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes through:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications through the browser extension

Continued use after changes constitutes acceptance of the updated policy.

14. Contact Information

Privacy Questions: privacy@scrll.fun
General Support: support@scrll.fun

SCRLL.FUN

Data Protection Officer: dpo@scrll.fun (if applicable)

15. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information as defined by CCPA.

16. Nevada Privacy Rights

Nevada residents may opt-out of the sale of covered personal information. We do not currently sell personal information as defined by Nevada law.