search
section divider

Privacy Policy

section divider

Effective Date: 07.04.2026

1. Introduction

Welcome to Goldborn. This Privacy Policy explains how Goldborn ("we," "us," or "our") collects, uses, shares, and protects information when you use our website, applications, smart contracts, and related services (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

Goldborn operates on a wallet-based authentication model. We do not require email addresses, passwords, or personal identification to use the Platform. However, we do collect certain data as described below to operate, maintain, and improve the Platform.

2. Data We Collect

Wallet & Blockchain Data

  • Wallet Address:Your public wallet address, which serves as your identity on the Platform. While wallet addresses are pseudonymous, they may be linked to an individual through blockchain analysis and are treated as personal data.
  • Transaction History:Records of your on-chain interactions with the Goldborn smart contracts, including egg purchases, Dragon hatching, Battles, merges, burns, and transfers. This data is publicly available on the Avalanche blockchain.
  • NFT Ownership & Metadata:Information about the Dragon NFTs associated with your wallet, including statistics, rarity, brood, evolution stage, and vault balances.

Gameplay Data

  • Battle History & Outcomes:Records of your Battle participation, including moves submitted, outcomes, stats transferred, and AVAX won or lost.
  • Player Profile:Your username, avatar selection, background selection, XP level, rank, and win/loss statistics.
  • Activity Log:A chronological record of your actions on the Platform (hatching, battling, merging, burning, trading).

Technical Data

  • Log Data:Data automatically sent by your browser or device, including IP address, browser type and version, operating system, date and time of access, and referring URLs.
  • Device Information:Information about the device you use to access the Platform, such as device type, operating system, screen resolution, browser type, and unique device identifiers.
  • Location Information:We may estimate your general geographic location using your IP address. This is used for security purposes and to enforce geographic restrictions on the Platform.
  • Cookies & Local Storage:We use cookies and browser local storage to maintain your session, store authentication tokens, remember preferences, and cache recent search history. See Section 5 for details.

Communication Data

  • Chat Messages:Direct messages sent through the Platform's chat system, including message content, timestamps, edits, deletions (soft-deleted), and emoji reactions.
  • Support Communications:If you contact us via email or Discord, we may collect your contact details and the content of your communications.

Third-Party Data

  • Privy Data:Our wallet connection provider, Privy, may collect additional data during the wallet connection process. This data is subject to Privy's own privacy policy.

3. How We Collect Data

We collect data through the following methods:

  • Directly from you: When you connect your wallet, customise your profile, send chat messages, or contact support.
  • Automatically: Through cookies, local storage, server logs, and WebSocket connections when you interact with the Platform.
  • From the blockchain: By monitoring public Avalanche blockchain data, including transactions with our smart contracts and NFT ownership records.
  • From third-party services: Including Privy (wallet authentication) and Chainlink (VRF randomness requests).

4. How We Use Your Data

We use collected data for the following purposes:

  • To operate, maintain, and provide the Platform and its features;
  • To process and record gameplay interactions (Battles, hatching, merging, burning);
  • To maintain your player profile, statistics, and activity history;
  • To deliver real-time notifications via WebSocket (battle events, friend requests, chat messages);
  • To enforce geographic restrictions and prevent access from Restricted Jurisdictions;
  • To detect, investigate, and prevent fraud, exploits, collusion, and other prohibited activities;
  • To ensure the security and integrity of the Platform;
  • To comply with applicable legal requirements and respond to lawful requests from authorities;
  • To communicate with you about Platform updates, changes to these policies, or support inquiries;
  • To improve and develop the Platform, including through aggregated and anonymised analytics;
  • To maintain search functionality and player/dragon indexing.

5. Cookies & Similar Technologies

The Platform uses the following technologies to store data in your browser:

  • Session Cookies:Used to maintain your authenticated session after wallet connection. These expire when you close your browser or after 24 hours.
  • Local Storage:Used to cache your user profile, authentication tokens (JWT), recent search history, and UI preferences (such as sidebar state). This data persists until manually cleared.
  • Functional Cookies:Used by third-party services (Privy) for wallet connection and authentication functionality.

You can manage or delete cookies through your browser settings. However, disabling cookies may impair the functionality of the Platform, including authentication.

6. Third-Party Services

The Platform integrates with the following third-party services, each of which may collect, process, or have access to certain data:

  • Privy:Wallet connection and authentication. Privy processes wallet connection data and may collect additional information subject to its own privacy policy.
  • Avalanche Network:All on-chain transactions are publicly visible on the Avalanche blockchain. RPC providers used to interact with the network may log connection metadata.
  • Chainlink VRF:Provides verifiable randomness for hatching and Battle resolution. VRF requests and responses are recorded on-chain.
  • Soketi (WebSocket):Provides real-time event delivery for notifications, chat messages, and gameplay events. Connection metadata may be processed.
  • Cloud Infrastructure:The Platform uses third-party cloud hosting and content delivery networks (CDN) for serving the application and media assets. These providers may process server logs and access metadata.

We encourage you to review the privacy policies of these third-party services. Goldborn is not responsible for the data practices of third-party providers.

7. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data in the following limited circumstances:

  • Service Providers: With third-party service providers who assist in operating the Platform (hosting, infrastructure, analytics), subject to confidentiality obligations.
  • Legal Requirements: When required by law, regulation, legal process, or governmental request, including to comply with anti-money laundering (AML) obligations.
  • Safety & Security: To protect the rights, property, or safety of Goldborn, our users, or the public, including to detect and prevent fraud or security threats.
  • Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of that transaction.
  • With Your Consent: In any other circumstance where we have obtained your explicit consent.

Please note that certain gameplay data (Battle outcomes, Dragon ownership, leaderboard rankings) is displayed publicly on the Platform as part of normal gameplay features.

8. On-Chain Data Disclaimer

Certain data associated with your use of the Platform — including your wallet address, transaction history, NFT ownership, and smart contract interactions — is recorded on the Avalanche blockchain. Blockchain data is:

  • Public: Visible to anyone with access to the blockchain or a block explorer;
  • Immutable: Cannot be modified, deleted, or restricted by any party, including Goldborn;
  • Permanent: Will persist for as long as the Avalanche blockchain exists.

By using the Platform, you acknowledge and accept that on-chain data cannot be subject to deletion, modification, or access restriction requests. This is an inherent characteristic of blockchain technology, not a limitation imposed by Goldborn.

9. Data Retention

We retain different categories of data for different periods:

  • On-Chain Data:Permanently stored on the Avalanche blockchain. Cannot be deleted by any party.
  • Player Profiles & Gameplay Data:Retained for as long as your wallet has interacted with the Platform, and for a reasonable period thereafter to comply with legal obligations and resolve disputes.
  • Chat Messages:Retained until deleted by the user (soft-deleted, meaning they are marked as deleted but retained in the database) or until data retention policies require removal.
  • Technical Logs:Server logs, IP addresses, and access records are retained for up to 12 months for security and operational purposes.
  • Authentication Data:Authentication nonces expire after 1 hour. JWT tokens expire after 24 hours.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your off-chain personal data. Please note that on-chain data (wallet addresses, transaction history, NFT records) cannot be deleted due to the immutable nature of blockchain technology.
  • Right to Data Portability: Request your data in a structured, commonly used, machine-readable format.
  • Right to Object: Object to certain processing of your data, including processing for direct marketing.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@goldborn.com. We will respond to your request within 30 days. We may need to verify your identity (e.g., by requesting a signed message from your wallet) before processing your request.

11. Children's Privacy

The Platform is not intended for anyone under the age of 18. We do not knowingly collect personal data from individuals under 18 years of age. If we become aware that we have collected data from a minor, we will take steps to delete such data promptly. If you believe a minor has provided us with personal data, please contact us at contact@goldborn.com.

12. International Data Transfers

Your data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction. By using the Platform, you consent to the transfer of your data to these countries. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

13. Security

We implement reasonable administrative, technical, and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or destruction. These measures include:

  • Encrypted data transmission (HTTPS/TLS);
  • Secure authentication via cryptographic wallet signatures (no passwords stored);
  • Access controls limiting data access to authorised personnel;
  • Regular security monitoring and incident response procedures;
  • Reentrancy protection and access controls on smart contracts.

However, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the security of your wallet and private keys.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Effective Date" at the top of this page and provide notice through the Platform. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: