Final privacy policy pending. Outline:
- Identity data collected (email, username, KYC documents when triggered)
- Wallet addresses and on-chain transaction data
- Device + IP information for fraud prevention
- Marketing attribution (UTM, referrers)
- Cookies and analytics
- Third parties we share with (KYC providers, payment processors, regulators)
- Retention periods
- Your rights — access, correction, deletion (subject to AML retention requirements)