# Privacy Policy

_Last updated: April 2026_

## 1. Overview

LiquidLottery ("the Protocol") is a decentralised, non-custodial set of open-source smart contracts. There is no legal entity, company, or corporation behind the Protocol — it is maintained by open-source contributors who have published code on a public blockchain. The dApp frontend does not collect, store, or sell any personal data. All interactions with the Protocol occur directly between your wallet and the smart contracts deployed on-chain. This Policy explains what limited data is processed and your rights in relation to it.

## 2. Data We Do Not Collect

We do not collect:
- Names, email addresses, or any other personally identifying information.
- IP addresses or browser fingerprints.
- Device identifiers or location data.
- Payment or financial information (your wallet and private keys remain exclusively yours).

## 3. On-Chain Data

All transactions — ticket purchases, draws, prize claims — are permanently and publicly recorded on the Hyperliquid L1 blockchain (HyperEVM) and on Base (for Chainlink VRF randomness requests). Blockchain data is immutable by design and accessible by anyone. We have no ability to delete or alter on-chain records. Your wallet address constitutes pseudonymous, not anonymous, data; please be aware that blockchain analytics tools may be used by third parties to correlate wallet addresses with real-world identities.

## 4. Cookies & Local Storage

We use two categories of browser storage:

**Strictly necessary** — a single `ll_cookie_consent` key in `localStorage` that records your cookie preference. This is always active, contains no personal data, and is never transmitted to any server.

**Analytics (optional, requires your consent)** — Google Analytics sets cookies (e.g. `_ga`, `_gid`) to collect anonymised usage data such as page views and session duration. These cookies are **only** loaded after you explicitly click *Accept* on the cookie notice. If you click *Decline*, no analytics cookies are set and Google Analytics is never initialised. You may withdraw consent at any time by clearing the `ll_cookie_consent` item from your browser's localStorage (the cookie banner will then reappear on your next visit).

## 5. Analytics

With your consent, we use **Google Analytics 4** (Google LLC, USA) to collect anonymised, aggregated statistics about how users interact with the dApp (page views, session duration, country-level geography). We do not enable Google Signals, remarketing, or advertising features. IP addresses are anonymised before transmission to Google's servers. Data is retained in accordance with Google's standard retention settings.

You may opt out globally at any time using the [Google Analytics opt-out browser add-on](https://tools.google.com/dlpage/gaoptout) or by blocking Google's analytics domains in your browser or firewall.

Google processes this data in accordance with its [Privacy Policy](https://policies.google.com/privacy) and the EU Standard Contractual Clauses where applicable.

## 6. Third-Party Services

The Protocol relies on the following third-party services, each with its own privacy policy:

| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Analytics 4 | Anonymised usage analytics (opt-in) | https://policies.google.com/privacy |
| Chainlink VRF v2.5 / CCIP | Verifiable randomness & cross-chain messaging | https://chain.link/privacy-policy |
| WalletConnect | Wallet connectivity | https://walletconnect.com/privacy |
| Google Fonts | Font loading | https://policies.google.com/privacy |

We do not control these third parties' data practices. Accepting our cookie notice means you also consent to Google Analytics cookies and to other third-party services loading as part of normal dApp operation.

## 7. Data Retention

Because we collect no personal data ourselves, we have no personal data to delete. On-chain records are permanent by the nature of blockchain technology and cannot be removed.

## 8. Your Rights

Depending on your jurisdiction you may have rights to access, rectify, or erase personal data. As we hold no personal data on centralised servers, these rights cannot be exercised against us. For on-chain data, please note that blockchains are immutable by design.

## 9. Children

The Service is not directed at persons under 18 years of age. We do not knowingly collect data from minors.

## 10. Changes

This Privacy Policy may be updated at any time. The "Last updated" date at the top of this document will reflect any changes. Material changes will be announced via the public GitHub repository.

## 11. Contact

For questions, open an issue on [GitHub](https://github.com/LiquidLottery/contracts).