> For the complete documentation index, see [llms.txt](https://blox-fields.gitbook.io/blox-fields-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://blox-fields.gitbook.io/blox-fields-docs/terms-and-condition/privacy-policy.md). # privacy policy Effective date: 11 September 2026 | Last updated: 11 September 2026 ### 1. Who We Are Blox Fields is an unregistered game project operated by **Timothy Patrick O’Callaghan** under the project name **Blox Fields**. For data-protection purposes, Timothy Patrick O’Callaghan is the controller of the personal data described in this Privacy Policy. **Contact details** * Email: * Address: Apartment 4B, 12 Rowan Grove, Galway, County Galway, H91 XXXX, Ireland * Website: This Privacy Policy explains how Blox Fields (**we**, **us**, or **our**) collects, uses, shares, stores, and protects personal data when you: * visit or an official Blox Fields webpage; * pre-register for Blox Fields; * connect a compatible blockchain wallet; * communicate with us; * participate in a Taskboard activity, contest, allowlist, reward programme, survey, community event, or other promotion; or * use any Blox Fields game, marketplace, payment, token, NFT, staking, deposit, withdrawal, or community feature that becomes available. Blox Fields is currently in development. Some features described in this Policy are planned and may not yet be available. We will update this Policy before collecting personal data for a materially new purpose. ### 2. Quick Summary * Pre-registration adds your email address to the Blox Fields mailing list; it does not by itself create a Game account. * If you connect a wallet, we may process your public wallet address and related public blockchain activity. * We may collect information needed to operate the Site, prevent fraud, provide support, and administer rewards, contests, Taskboard incentives, and the allowlist. * Blockchain records are public and may be permanent. We cannot delete or alter data independently recorded on the Solana blockchain. * We do not ask for or collect wallet private keys or seed phrases. Never send them to us. * You have rights over your personal data under the GDPR and applicable Irish law. ### 3. Personal Data We Collect #### 3.1 Information you provide Depending on how you interact with Blox Fields, you may provide: * your email address when you pre-register or subscribe to updates; * your display name, username, or profile information; * your date of birth, age range, or parental-consent information where age checks are required; * your X, Discord, or other social-media username when entering a contest, reward campaign, allowlist, or community activity; * your public blockchain wallet address; * Taskboard submissions, contest entries, survey answers, feedback, and community contributions; * support requests, messages, complaints, and other correspondence; * information needed to verify eligibility for a reward, contest, allowlist, token allocation, or restricted feature; and * transaction or payment-related information needed to provide a paid or blockchain feature. Payment card details, if payments are introduced, should be handled by the applicable third-party payment provider rather than stored directly by Blox Fields unless we notify you otherwise. You do not have to provide optional information. However, if you do not provide information required for a particular feature, we may be unable to provide that feature or verify your eligibility. #### 3.2 Information collected automatically When you visit the Site or use a Blox Fields service, our systems or service providers may automatically collect: * IP address and approximate location derived from it; * browser, device, operating-system, and language information; * pages viewed, links clicked, referring page, date and time of access, and session information; * cookie choices and similar technical identifiers; * error, security, diagnostic, and performance logs; and * interactions with wallet-connect or Game features. #### 3.3 Wallet and blockchain information If you connect a wallet, we may collect or generate: * your public wallet address; * the fact that the wallet was connected to Blox Fields; * token, NFT, balance, ownership, and transaction information available from the Solana blockchain or compatible services; * signatures or messages used to verify control of the wallet; * smart-contract interactions and transaction identifiers; and * information used to detect fraud, bots, multiple accounts, or misuse. Blockchain data may be publicly visible, copied by third parties, and retained permanently. We do not control the Solana blockchain and generally cannot correct, erase, or reverse data recorded on-chain. **We will never ask for your private key or seed phrase.** #### 3.4 Information from third parties and public sources We may receive personal data from: * wallet providers and blockchain infrastructure providers; * the public Solana blockchain and blockchain explorers; * X, Discord, or another platform when you interact with an official Blox Fields account or participate in an activity; * hosting, email, analytics, security, anti-fraud, age-assurance, payment, or support providers; * another person authorised by you; and * public sources where necessary to verify an entry, investigate misuse, comply with law, or protect Blox Fields and its community. ### 4. Why We Use Personal Data and Our Legal Bases We process personal data only where we have a lawful basis. | Purpose | Personal data typically used | Legal basis | | --------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------ | | Manage pre-registration and send requested Blox Fields updates | Email address and subscription preferences | Consent; steps requested before entering a contract | | Connect and verify a wallet | Public wallet address, signature, session and device information | Performance of a contract or steps requested by you; legitimate interests in secure access | | Operate the Site and future Game services | Account, device, log, gameplay, wallet and transaction information | Performance of a contract; legitimate interests in operating and improving the service | | Administer Taskboard incentives, rewards, contests, token allocations and the allowlist | Contact details, social handles, wallet address, submissions and eligibility information | Performance of activity rules; consent where required; legitimate interests in administering fair promotions | | Send marketing | Email address and marketing preferences | Consent, or another basis permitted by applicable electronic-marketing law | | Respond to questions, complaints and support requests | Contact details and correspondence | Performance of a contract; legitimate interests in providing support | | Secure our services and prevent cheating, bots, fraud, abuse and unlawful activity | Device, log, wallet, blockchain, account and activity information | Legitimate interests; compliance with legal obligations | | Comply with sanctions, age, tax, accounting, anti-money-laundering, court or regulatory requirements where applicable | Identity, eligibility, transaction and compliance information | Legal obligation; substantial public interest where permitted by law | | Analyse and improve Blox Fields | Usage, performance, diagnostic and feedback information | Legitimate interests; consent where non-essential cookies or similar technologies are required | | Establish, exercise or defend legal claims | Relevant account, transaction and communication information | Legitimate interests; legal obligation | Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and freedoms override those interests. You may contact us for more information about a particular assessment. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that was lawful before withdrawal. ### 5. Marketing Communications If you pre-register, we may send you Blox Fields development news, launch information, community announcements, allowlist notices, promotions, and related updates where you have consented or where otherwise permitted by law. You can unsubscribe at any time by: * selecting the unsubscribe link in a marketing email; or * emailing . We may retain limited suppression-list information to ensure that we respect your opt-out request. Important transactional, legal, security, or service messages are not marketing and may still be sent where necessary. ### 6. Rewards, Contests, Taskboard Activities, and Allowlists When you participate in a Taskboard activity, incentive, contest, reward campaign, token allocation, or allowlist, we may process information needed to: * receive and validate your entry or completed task; * verify compliance with eligibility and activity rules; * detect bots, duplicate accounts, fraud, manipulation, or prohibited conduct; * select, contact, announce, and verify eligible recipients; * deliver or enable the claim of a reward or token allocation; and * maintain records required for security, tax, accounting, dispute, or regulatory purposes. Activity-specific notices or rules may provide additional privacy information. If winners or recipients will be publicly announced, we will explain what information will be published. Where appropriate, we will use a shortened wallet address, username, or other limited identifier. ### 7. Cookies and Similar Technologies We may use cookies, local storage, pixels, software development kits, or similar technologies for: * essential Site functions and security; * remembering preferences and wallet sessions; * diagnosing errors and measuring performance; * understanding Site and Game usage; and * marketing, but only where permitted and after obtaining consent when required. Essential technologies may operate because they are necessary to provide a service you request or protect the Site. Non-essential analytics, advertising, or personalisation technologies will be used only after any consent required by law. You can control non-essential technologies through the cookie settings made available on the Site and through your browser. Blocking essential cookies or storage may prevent parts of the Site or wallet connection from working. Before publishing this Policy, Blox Fields must ensure that its cookie notice and consent controls identify the actual cookies and providers used on the Site. ### 8. Who We Share Personal Data With We may share personal data only as necessary with: * website, cloud-hosting, database, content-delivery, and infrastructure providers; * email distribution and communication providers; * wallet-connect, Solana, blockchain node, smart-contract, marketplace, and blockchain analytics providers; * security, anti-fraud, bot-detection, moderation, and age-assurance providers; * payment processors if paid features are introduced; * analytics providers where enabled in accordance with cookie-consent requirements; * X, Discord, and other platforms used for official activities; * professional advisers such as lawyers, accountants, auditors, and insurers; * regulators, courts, law-enforcement bodies, tax authorities, or other public authorities where required or permitted by law; * a prospective purchaser, investor, successor, or adviser in connection with a proposed sale, financing, transfer, merger, or reorganisation; and * another party where you ask us or give us valid consent to do so. These recipients may act as our processors, independent controllers, or joint controllers depending on their role. Their own privacy policies may also apply. We do not sell personal data for money. If our practices change in a way that is treated as a sale or sharing under an applicable privacy law, we will update this Policy and provide any required choices. ### 9. International Transfers Some service providers or blockchain infrastructure may process personal data outside Ireland or the European Economic Area (**EEA**). Where GDPR rules apply and personal data is transferred outside the EEA, we use a lawful transfer mechanism where required, such as: * a European Commission adequacy decision; * approved Standard Contractual Clauses and appropriate supplementary measures; or * another transfer mechanism permitted by data-protection law. Public blockchain information may be accessed globally and cannot be geographically restricted by us. You may contact us for information about the safeguards relevant to a particular transfer. ### 10. How Long We Keep Personal Data We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including legal, security, accounting, tax, and dispute-resolution requirements. Our general retention approach is: * **Pre-registration and marketing data:** until you unsubscribe or withdraw consent, after which we delete or suppress it within a reasonable period unless retention is legally required. * **Support messages and complaints:** generally for up to two years after the matter is closed, unless a longer period is needed for a legal claim or required by law. * **Contest, reward, allowlist, and Taskboard records:** for the campaign period and generally up to two years afterwards, or longer where required for tax, fraud prevention, accounting, or legal claims. * **Security, access, and technical logs:** generally for up to 12 months unless a longer period is reasonably required to investigate an incident. * **Account and gameplay data after launch:** while the account is active and for a reasonable period following closure, as stated in the applicable launch notice or retention schedule. * **Transaction and compliance records:** for the period required by applicable tax, accounting, anti-money-laundering, sanctions, or other laws. We may retain anonymised information that can no longer identify you. Data recorded on a public blockchain may remain permanently available and is outside our ability to erase. ### 11. Security We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access, or destruction. Measures may include access controls, encryption in transit, secure service providers, monitoring, backups, and incident-response procedures appropriate to the risk. No online service, wallet, smart contract, or storage method is completely secure. You are responsible for securing your devices, accounts, wallet credentials, private keys, and seed phrases. If a personal-data breach occurs, we will assess it and notify the Irish Data Protection Commission and affected individuals where required by law. ### 12. Children and Young People Pre-registration and wallet connection through the current Site are intended for people aged 16 or older. If you are between 16 and 17, you must have permission from a parent or legal guardian as required by the Blox Fields Terms. The launched Game may permit users under 18 under separate launch terms and age-appropriate protections. Before knowingly processing personal data from a child under 16 on the basis of consent, we will implement a process to obtain or verify consent from the holder of parental responsibility where required by Irish law. We aim to use clear, age-appropriate language and collect no more information from children than is reasonably necessary. We do not knowingly use children's personal data for behavioural advertising. If you believe that a child has provided personal data contrary to this Policy, contact . We will investigate and delete or restrict the information where appropriate and legally permitted. ### 13. Your Data-Protection Rights Depending on the circumstances and applicable law, you may have the right to: * be informed about how we process your personal data; * request access to your personal data; * request correction of inaccurate or incomplete personal data; * request erasure of personal data; * request restriction of processing; * object to processing based on legitimate interests; * object at any time to direct marketing; * receive certain personal data in a structured, commonly used, machine-readable format and transmit it to another controller; * withdraw consent at any time where consent is the legal basis; and * lodge a complaint with a data-protection authority. These rights are not absolute and may be subject to legal conditions and exceptions. They generally do not allow us to delete or alter information independently recorded on a public blockchain. To exercise a right, email . Tell us what you are requesting and provide information reasonably needed to identify the relevant data. We may request proof of identity where necessary and proportionate. We will normally respond within one month, subject to any extension permitted by law. We do not ordinarily charge a fee, but the GDPR permits a reasonable fee or refusal in limited cases involving manifestly unfounded or excessive requests. ### 14. Complaints Please contact us first so that we can try to resolve your concern: * Email: * Post: Timothy Patrick O’Callaghan, Apartment 4B, 12 Rowan Grove, Galway, County Galway, H91 XXXX, Ireland We aim to acknowledge or respond to ordinary complaints within 1 to 5 business days. A data-subject request may require the longer statutory response period described above. You also have the right to complain to the Irish Data Protection Commission: **Data Protection Commission**\ 6 Pembroke Row\ Dublin 2\ D02 X963\ Ireland\ You may also be entitled to complain to another supervisory authority, particularly in the EU or EEA country where you live or work or where an alleged infringement occurred. ### 15. Automated Decision-Making We do not currently make decisions producing legal or similarly significant effects about you solely through automated processing. We may use automated tools to identify suspected bots, duplicate accounts, cheating, fraud, sanctions risks, or other abuse. Unless applicable law permits otherwise, a decision with a legal or similarly significant effect will include appropriate safeguards, such as the opportunity to request human review and challenge the decision. ### 16. Third-Party Websites and Platforms The Site may link to or use services operated by third parties, including X, Discord, wallet providers, marketplaces, and Solana infrastructure. Those organisations may process personal data for their own purposes under their own privacy policies. We do not control their independent processing. Review the privacy information of a third-party service before using it or connecting an account or wallet. ### 17. Changes to This Policy We may update this Policy to reflect changes in Blox Fields, our data practices, technology, or law. We will post the updated version and change the “Last updated” date. If a change materially affects how we use personal data, we will provide additional notice or seek consent where required. ### 18. Contact Us For privacy questions, requests, or complaints, contact: **Timothy Patrick O’Callaghan**\ Blox Fields\ Apartment 4B, 12 Rowan Grove\ Galway, County Galway, H91 XXXX\ Ireland\ Email: