Privacy Policy
Last updated: February 2025
MODAL at logicmodal.xyz ("the Site") respects your privacy. This policy explains what information we collect, how we use it, and the choices available to you. The Site does not require traditional account registration and does not collect email addresses or passwords.
Wallet Addresses
When you connect a cryptocurrency wallet (Bitcoin, Ethereum, or Solana), your public wallet address is transmitted to the Site. Wallet addresses are used to associate auction commitments, quest completions, and social connections with your participation. We never have access to your private keys or seed phrases.
Transaction Data
When you commit funds to an auction, we record the transaction hash, chain, amount, sending address, receiving taproot address, and the exchange rate at the time of commitment. This data is necessary to verify on-chain transactions and calculate allocations.
Social Account Data
If you optionally connect your Twitter/X or Discord account, we receive and store your public profile information including your user ID, username/handle, display name, and avatar URL. We also store OAuth access tokens and refresh tokens to maintain the connection. We do not post on your behalf or access private messages.
Automatically Collected Data
The Site collects standard server access logs including IP addresses, which are used for rate limiting and security purposes. We do not use analytics tracking scripts or advertising pixels.
We use collected information to:
- Process and verify auction commitments
- Calculate allocations and distribute inscriptions
- Verify quest completion and apply multipliers
- Display leaderboard rankings (wallet addresses are partially masked)
- Enforce rate limits and prevent abuse
- Maintain and improve the Site
The Site uses a minimal number of cookies, strictly for functional purposes:
- OAuth state cookies — Temporary cookies used during Twitter/X and Discord authentication flows to prevent cross-site request forgery. These are deleted immediately after the OAuth callback completes.
- Admin session cookie — An authenticated session cookie for admin access only.
We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
The Site uses your browser's local storage for:
- Favorites — Your saved inscription favorites are stored locally on your device and are never sent to our servers.
- Pending transactions — If a commitment transaction succeeds but the server confirmation fails, transaction details are temporarily stored locally for recovery purposes.
We do not sell, rent, or share your personal information with third parties for marketing purposes. Information may be shared in the following limited circumstances:
- Blockchain data — Transaction hashes and wallet addresses are inherently public on their respective blockchains.
- Service providers — We use third-party infrastructure (hosting, database, rate limiting) to operate the Site. These providers process data on our behalf and are subject to their own privacy policies.
- Legal requirements — We may disclose information if required by law or to protect the rights and safety of MODAL and its users.
Auction commitment and allocation data is retained indefinitely as a permanent record of participation and distribution. Social connection data is retained until you disconnect your account or request deletion. Rate limiting logs (IP addresses) are ephemeral and not persisted beyond their operational window.
- Wallet connection — You can disconnect your wallet at any time through the Site.
- Social accounts — You can disconnect Twitter/X or Discord at any time, which removes the stored OAuth tokens and profile data from our database.
- Favorites — Clear your browser's local storage to remove saved favorites.
We implement security measures including HTTPS encryption, security headers (HSTS, Content-Security-Policy, X-Frame-Options), distributed rate limiting, CSRF protection on state-changing operations, and parameterized database queries. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.
We may update this Privacy Policy from time to time. Changes will be reflected by an updated date at the top of this page. Continued use of the Site after changes constitutes acceptance of the revised policy.
For privacy-related questions or data deletion requests, reach out via X (Twitter).