Privacy Policy

Who We Are

This Privacy Policy applies to the website tsunonton.com and associated services including the Telegram mini-app, Telegram bot (@tsunonton_bot), and Telegram community channel operated under the $TSUN project (we, us, or the Project).

$TSUN is an independent, community-driven GameFi project built on the TON Blockchain. The project is operated by an anonymous development team. If you have questions regarding this policy, contact us via the channels listed in Section 13.

Data We Collect

We collect only the minimum data necessary to operate the website and in-game services. The types of data we may collect include:

Data you provide voluntarily:

• Telegram user data - when you interact with @tsunonton_bot or join our Telegram channels, Telegram may share your user ID, username, and display name with our bot. We do not receive your phone number or email address from Telegram.
• Wallet address - if you voluntarily connect a TON-compatible wallet via TON Connect to verify holdings or sync game scores, we receive your public wallet address only. We never receive private keys, seed phrases, or any ability to initiate transactions on your behalf.

Data collected automatically:

• Usage data - page views, session duration, navigation paths, and browser or device type via anonymous analytics (see Section 5).
• Game data - in-game actions (taps, upgrades, quest completions), scores, and leaderboard positions stored server-side tied to your Telegram user ID.
• Technical logs - standard web server logs including IP addresses, timestamps, and HTTP request data retained for security and debugging purposes.

How We Use Your Data

We use collected data for the following purposes:

• Running the game - storing scores, leaderboard rankings, quest progress, and upgrade states linked to your Telegram user ID.
• Notifications - sending launch announcements, game updates, and airdrop eligibility notifications through @tsunonton_bot if you have subscribed.
• Community management - moderation of Telegram community channels.
• Analytics - understanding aggregate user behavior to improve the website and game experience. All analytics are anonymized and non-identifying.
• Security - detecting and preventing abuse, spam, or malicious activity.
• Airdrop eligibility - determining Phase 3 airdrop eligibility based on leaderboard rankings. Wallet address is required only at the airdrop distribution stage and processed solely for on-chain token delivery.

We do not use your data for advertising, profiling, or selling to third parties.

Data Sharing

We do not sell, rent, or trade your personal data. We may share limited data only in the following circumstances:

• Service providers - third-party infrastructure providers (hosting, analytics, CDN) who process data on our behalf under data processing agreements. These providers are contractually prohibited from using your data for their own purposes.
• Legal requirements - if required by applicable law, court order, or governmental authority, we may disclose data to the extent legally compelled.
• On-chain airdrop - wallet addresses provided for airdrop distribution are used solely to execute the on-chain token transfer. This operation is public and recorded on the TON Blockchain by nature.

Cookies and Analytics

The website uses minimal cookies required for core functionality, including:

• Preference cookies - storing your selected language and light or dark mode preference. These are first-party cookies and contain no personal identifiers.
• Session cookies - short-lived technical cookies required for basic site functionality. Deleted when you close your browser.

We use anonymous, privacy-respecting analytics to measure page performance and traffic patterns. No cross-site tracking or fingerprinting is employed. We do not use Google Analytics or Meta Pixel.

You can disable cookies in your browser settings. Disabling preference cookies will reset your language and theme choice on each visit; it will not impair core functionality.

Third-Party Services

Our services integrate with the following third parties, each governed by their own privacy policies:

• Telegram (telegram.org/privacy) - Telegram bot and mini-app infrastructure. Telegram privacy policy governs data within the Telegram platform.
• TON Blockchain - a public, permissionless blockchain. On-chain transactions and wallet addresses are publicly visible by the nature of blockchain technology.
• STON.fi - a decentralized exchange. Any swap transactions you perform on STON.fi are governed by STON.fi terms and the TON Blockchain.
• TonRaffles - used for liquidity lock verification. Your interaction with TonRaffles is governed by their own terms.
• Dexscreener - third-party market data display. Accessing Dexscreener links is governed by Dexscreener privacy policy.

We embed Google Fonts for typography. Font requests are sent to Google servers. Refer to Google Privacy Policy for details.

Blockchain Data and Wallet Addresses

We do not store private keys, seed phrases, or any credentials that would allow us to access or control your wallet. Connecting your wallet via TON Connect grants us read access to your public wallet address only. We cannot initiate, approve, or reverse transactions on your behalf.

Your public wallet address, if submitted for airdrop purposes, is used solely to deliver tokens and processed in accordance with this policy. The on-chain delivery transaction is publicly visible on the TON Blockchain.

Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Game data (scores, leaderboard) - retained for the duration of the game active phase and for a reasonable period thereafter to fulfill airdrop obligations.
• Telegram user IDs - retained while you remain subscribed to @tsunonton_bot. Deleted upon unsubscription.
• Server logs - retained for up to 90 days for security and debugging purposes.
• Wallet addresses (airdrop) - retained until the airdrop distribution is complete, then deleted from our systems. On-chain records persist permanently by the nature of blockchain.

You may request deletion of your data at any time by contacting us (see Section 13).

Your Rights (GDPR and applicable law)

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with applicable data protection laws, you have the following rights:

• Right of access - to request a copy of the personal data we hold about you.
• Right to rectification - to request correction of inaccurate data.
• Right to erasure - to request deletion of your personal data, subject to our legitimate operational needs and legal obligations.
• Right to restriction - to request that we limit processing of your data.
• Right to data portability - to receive your data in a structured, machine-readable format.
• Right to object - to object to certain types of data processing.
• Right to withdraw consent - where processing is based on consent, you may withdraw at any time without affecting prior processing.

To exercise these rights, contact us via the channels in Section 13. We respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Lawful basis for processing: We process your data on the basis of (a) contract performance to deliver game services you requested, (b) legitimate interests for security and analytics, and (c) consent for marketing notifications via Telegram bot.

Children Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. Cryptocurrency and GameFi products carry financial risk and require an adult legal capacity to engage with.

If you believe a minor has provided us with personal data, contact us and we will promptly delete such information.

Security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These measures include encrypted data transmission (HTTPS/TLS), restricted access controls, and regular security review of our infrastructure.

No system is perfectly secure. We cannot guarantee absolute security of data transmitted over the internet or stored on our servers. In the event of a data breach that affects your rights and freedoms, we notify affected users and relevant authorities as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. When we make material changes, we will:

• Update the Last updated date at the top of this page.
• Post an announcement in our Telegram community channel.
• Where required by law, seek your consent for material changes to how we process your data.

Continued use of our services after a policy update constitutes acceptance of the revised policy. We encourage you to review this page periodically.

Contact Us

For privacy-related inquiries, data access requests, or deletion requests, contact us through the channels below. We aim to respond within 30 days.

As an anonymous development team, we do not have a registered legal address. Privacy requests submitted via our official Telegram channel are handled promptly and confidentially.