PRIVACY POLICY.

1. What this covers

This policy describes the CHERRY POP website, local arcade games, optional music, and warning-tee shop. All games are free. Optional wallet sign-in, a shared daily leaderboard, and holder voting become available only after holder verification is enabled. Daily holder squeezes and shared season progress become available when the season is enabled. There is no email-signup form.

2. Information stored in your browser

The arcade stores personal bests, recent runs, and sound settings in browser storage. The shop stores a Shopify cart identifier so your bag can be restored. Music playback position and volume may be stored on this device. Local scores are not imported into the shared board. If you sign in for holder features, new completed runs are sent to the shared service for score checks. You can clear this data in your browser’s site settings.

Optional holder participation

On your request, a compatible Solana wallet shares its public address and signs a time-limited login message. The service verifies that signature and checks the public balance of the configured CHERRY mint through a Solana RPC provider. It never requests a transaction, spending approval, recovery phrase, or private key. Cloudflare stores login challenges, a hashed session identifier, wallet addresses, votes, daily squeezes, season participation records, and run timing, score, and summary statistics. Public-chain holder counts are calculated from token accounts; individual census balances are processed temporarily rather than published by this site. The leaderboard displays shortened addresses and scores; the underlying public address is available in leaderboard responses.

The secure sign-in cookie lasts two hours. Login challenges expire after five minutes. Expired login records are removed during subsequent sign-in activity. Vote and run records are retained for up to 90 days, with cleanup on subsequent sign-in activity. Short-lived abuse counters use a daily hash of the request IP address, not the raw address. Season participation records are retained through the season and for up to 90 days after it ends, with cleanup during subsequent sign-in activity. Non-identifying season totals and the completed-season record may remain. Signing out clears the login session; it does not remove previously submitted scores or votes. Contact support about stored participation data.

3. Hosting and technical requests

Cloudflare hosts and protects the production site and can process technical request data such as IP address, browser information, and requested URLs. The 3D libraries are loaded from jsDelivr; that provider can receive connection information when those files are requested. Product, price, availability, and cart requests go to Shopify. Cloudflare may also inject its browser-performance measurement beacon and process page-load timing and connection information. This is separate from advertising or a mailing list; this site does not include an advertising pixel.

4. Shopping and fulfillment

Shopify processes product selections, cart data, checkout, payment, customer contact information, delivery details, and order records. Payment details are entered in Shopify checkout, not in the CHERRY arcade. The merchant and Printify/its production and delivery partners receive the information needed to handle your order, support, production, shipping, and returns or problems. Their own privacy policies also apply.

5. Contacting us

If you contact [email protected], we receive your email address, message, and any information you include. The mailbox is hosted through Proton. Do not send wallet recovery phrases, private keys, or card numbers. We use support information to respond and resolve requests, not to automatically subscribe you to marketing.

6. Official links and public blockchain data

Links to X, Pump.fun, and other external services take you to their sites. Any public-chain transaction you make on an external platform can be publicly visible. This website does not need wallet access to provide the arcade or merchandise.

7. Retention and choices

Local data remains in your browser until cleared or replaced. Merchant order and support records may be retained as needed for order service, accounting, disputes, security, and applicable legal duties. Contact [email protected] with a privacy question or a request concerning information held by the merchant; rights and exceptions depend on applicable law.

8. Security and changes

The release uses HTTPS where hosted, restricted browser permissions, and security headers. No service can guarantee perfect security. CHERRY POP is not directed to children. We will update this policy if data handling changes.