Information We Collect and Data Retention

RGG Squad is designed with a minimal data footprint in mind. We only collect information necessary to provide, secure, and improve our services. The types of data we may collect include:

Types of Data Collected ● Public Wallet Addresses: We record the public blockchain address when users connect their crypto wallet. This is essential for verifying identity on-chain and enabling platform functionality. Wallet addresses are not inherently PII but may become linkable to individuals based on external factors. ● User-Generated Nicknames: Users may choose a display nickname. This is stored off-chain for community visibility, rankings, or profile identification.

● Technical Metadata: ○ Device type and operating system ○ Browser type/version ○ IP address (used for security, rate-limiting, and abuse prevention) ○ Session timestamps and activity logs

● On-Chain Interaction Data: We analyze public blockchain data to understand user behavior within the ecosystem, including participation in airdrops, staking (if applicable in the future), and advertisement interactions.

Data Retention and Deletion

We retain user data only as long as necessary for the purpose for which it was collected, as required by law, or to defend legal claims, focusing on data minimization and storage limitation. ● Wallet addresses and nicknames are retained as long as the user maintains an active connection with our ecosystem. Users can disconnect their wallet and request deletion of their nickname data anytime. ● IP addresses and technical logs: Retained for a maximum of 30 days for security and abuse prevention, unless an active investigation or legal obligation justifies a more extended retention period. ● On-chain data: As blockchain data is publicly available and immutable, we cannot delete it. However, we do not store or replicate such data beyond what is necessary for ecosystem analytics. ● Backup data: Any backups that include off-chain data are encrypted and subject to automatic deletion within 90 days.

Users may contact us to request a review or removal of any off-chain personal data, subject to the technical limitations and legal requirements applicable.