PRIVACY POLICY

1. SCOPE

Operator: DeCleanup Network ("DeCleanup", "we", "us", "our").

This Privacy Policy applies when you use:

• decleanup.net: informational website, litepaper, tokenomics, and docs (the "Site")
• DeCleanup Rewards on Base: Farcaster Mini App and web surfaces at miniapp.decleanup.net (the "Base Services")
• DeCleanup dApp on Celo: full platform at dapp.decleanup.net and related APIs (the "Celo Service")

We publish one canonical policy on decleanup.net so you can see how each product handles data. Product-specific Terms of Service still apply per app. When you use a host client (Farcaster, Base app, or a wallet), that host's privacy policy also applies.

2. INFORMATION WE COLLECT

Website (decleanup.net)

• Usage data: pages viewed, referrers, device and browser type, approximate region from IP via hosting or analytics.
• Contact data: email or messages you send us (content and metadata).
• Cookies and local storage: minimal technical preferences. The Site does not execute wallet transactions.

Base Services (mini app / web on Base)

• Cleanup submissions: before and after photos, geotags if you allow location, and related metadata.
• Wallet: public wallet address when you connect. We do not receive private keys.
• Referrals: referral relationships when you use or share referral links.
• Farcaster / Base Mini App context: when opened inside a Farcaster or Base client, we may receive your Farcaster ID (FID), username, display name, profile picture URL, and mini-app context from the host, not your Farcaster or wallet private keys.
• Onchain data on Base: wallet addresses, submission and verification records, DCU points, $bDCU claims, Impact Product NFTs, staking and verifier status, transaction hashes (public on the network).
• Device and browser: browser and OS data needed to run the app.
• Local storage: pending cleanup IDs, onboarding progress, verifier session flags (functional only, not for advertising).
• Security: bot detection and abuse prevention (for example Vercel Bot ID) where enabled.

Celo Service (dapp.decleanup.net)

• Wallet and onchain data: public wallet and smart-account addresses, transaction hashes, UserOperation receipts, token balances, and contract history (often public on Celo).
• Embedded sign-in (optional): Google or email via our auth stack (OAuth subject id, email, session tokens processed by the auth provider and Auth.js). We do not store your raw private key.
• Passkeys (optional): WebAuthn credential ids and public keys to verify unlock. Biometrics stay on your device.
• Cleanup submissions: photos, descriptions, locations, impact and recyclables forms, typically uploaded to IPFS or similar via our servers.
• Verifier and application data: status, reviewer notes, email if you provide it (for example via Supabase-backed flows).
• Technical logs: IP address, user agent, timestamps, errors, API rate limits.
• Gas sponsorship: where a paymaster sponsors transactions for embedded accounts, related metadata may be processed by that infrastructure.

3. WHAT WE DO NOT COLLECT

• Traditional passwords on Base (wallet-based access only).
• Payment card or bank account information through our apps.

Encrypted wallet backups you export on Celo stay on your device unless you store them elsewhere yourself.

4. HOW WE USE INFORMATION

We use collected information to:

• Operate, secure, and improve the Site and applications.
• Process submissions, verification, rewards, governance, and support.
• Display profile, impact history, and onchain activity where the product provides those features.
• Send optional operational notifications (for example Telegram alerts to authorized verifier channels on Base, where configured).
• Prevent fraud, abuse, and automated bot activity.
• Debug outages and enforce our Terms.
• Comply with law and respond to lawful requests.

We do not sell your personal information. We do not use cleanup photos for unrelated advertising.

5. LEGAL BASES (EEA / UK)

Where GDPR or UK GDPR applies, we rely on:

• Contract: to provide the service you use.
• Legitimate interests: security, abuse prevention, non-invasive analytics.
• Consent: where required (optional cookies or marketing, if offered).
• Legal obligation: when the law requires processing or disclosure.

6. SHARING

We may share information with subprocessors that help us run the products, including:

• Hosting and CDN: for example Vercel
• Blockchain: Base and Celo RPC providers, indexers, block explorers
• IPFS: for example Pinata (pinning cleanup media)
• Wallets and auth: WalletConnect, RainbowKit, Google OAuth, Auth.js (Celo embedded accounts)
• Farcaster: for example Neynar or similar APIs for profile lookups when you use the Mini App
• Databases: for example Supabase on Celo deployments
• Notifications: Telegram where configured for verifiers or ops
• Analytics and monitoring: if enabled

We may disclose information when required by law or to protect users, the public, or our services. Each third party's privacy policy governs its own processing.

10. LOCATION DATA

If you enable location when submitting a cleanup (especially on Base), we may collect coordinates tied to your submission. This may be stored on IPFS and referenced onchain. You can decline location permissions; some features may be limited.

11. COOKIES AND LOCAL STORAGE

• Site: minimal functional storage only; no wallet transactions on decleanup.net itself.
• Base app: browser local storage for pending cleanups, onboarding, and verifier flags, not used for third-party advertising. Wallet providers may set their own cookies per their policies.
• Celo app: session and UI state as needed for embedded login and app operation. Configure a cookie banner if you add non-essential tracking.

12. ONCHAIN AND PUBLIC DATA

Blockchain activity on Base and Celo is public and often permanent. We do not control the permanence or visibility of onchain records. Wallet addresses can be linked to activity over time. Do not put sensitive personal data in onchain fields.

13. RETENTION

• Onchain data: retained indefinitely on the relevant network.
• IPFS content: retained indefinitely unless technically impractical to remove.
• Browser local storage (Base): until you clear it or we invalidate it.
• Server logs: limited rolling retention (for example 30 to 90 days) unless longer is needed for security or law.
• Contact and support: as long as needed to respond and for reasonable records.
• Other personal data: as long as needed for the purposes above, then deleted or anonymized unless law requires longer retention.

14. YOUR CHOICES

You can:

• Choose not to connect a wallet (limited functionality).
• Decline camera or location permissions (limited functionality).
• Clear browser local storage in device settings.
• Stop using any product at any time.

Historical public onchain and IPFS records may not be deletable after submission.

15. YOUR RIGHTS

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.

Contact us using the information in Section 21. We may need to verify your identity. We cannot erase public blockchain history or fully remove IPFS content in most cases.

16. CHILDREN

Our applications are intended for users 18 and older (see Terms). The Site is not directed at children under 13 (or 16 where stricter rules apply). We do not knowingly collect data from children.

17. INTERNATIONAL TRANSFERS

We and our providers may process data in the United States and other countries. Mandatory protections in your country of residence still apply. Where required, we use safeguards such as Standard Contractual Clauses for EEA and UK transfers.

18. SECURITY

We use reasonable technical and organizational measures to protect data. No transmission or storage is 100% secure, especially for content replicated on public IPFS gateways. You are responsible for your wallet, passkey, backup, and device security.

19. THIRD-PARTY LINKS AND SERVICES

Our products link to or integrate with Farcaster, Base, Celo, block explorers, IPFS gateways, Clanker, Gardens, Giveth, and other platforms. Their privacy practices are governed by their own policies. Review those policies before using third-party services.

20. CHANGES

We may update this policy with a new effective date on decleanup.net/privacy. Material changes may be announced on the Site or in-app. Continued use after the effective date means you accept the updated policy.

21. CONTACT

Privacy and data questions: