Privacy Policy

1. Introduction And Scope

This Privacy Policy explains how TERRA (“we”, “us”, or “our”) collects, processes, stores, and shares information about you when you access or use the TERRA platform, including our website, mobile application, and all associated services (collectively, the “Service”).

By using TERRA, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, you should discontinue use of the Service immediately and contact us at support@terraseek.xyz to request deletion of any data we hold about you.

2. Data Controller

The data controller responsible for your personal data is the TERRA development and operations team. For all privacy-related inquiries, requests, or complaints, please contact us at support@terraseek.xyz. We aim to respond to all privacy requests within 30 days. If your request requires additional time, we will inform you of the expected timeline.

3. Categories Of Personal Data We Collect

We collect and process the following categories of data:

• Wallet & Authentication Data: Your Solana wallet public address and cryptographic authentication signatures used to verify your identity. We never request or store your private keys or seed phrases.
• Account & Gameplay State: Your experience points (XP), level, SKR token balance recorded on-platform, multiplier value, task completions, daily check-in history, referral relationships, and place minting records.
• Location Data: GPS coordinates collected when you use map or place-minting features. Location data is used solely to enable gameplay features and is not sold or shared with third-party advertisers.
• Camera & Image Data: Photographs captured through the app when completing location-verification tasks. Images are processed by our AI verification system to confirm task completion and are stored temporarily during the verification process.
• Device & Technical Data: Browser type, operating system, device model, IP address, session identifiers, and diagnostic error logs. This data helps us maintain service quality, prevent abuse, and debug issues.
• Referral Data: Invite codes you have shared, the wallet addresses of users who joined through your referral, and any associated reward transactions.
• Blockchain Transaction Records: On-chain transaction signatures for SOL payments and SKR token transfers made through the platform. These records are permanently and publicly available on the Solana blockchain and are outside our control to delete.

4. How We Collect Data

• Directly from you: When you connect a wallet, use gameplay features, submit task photographs, or contact our support team.
• Automatically: Through browser cookies, server-side session management, and application telemetry as you navigate the platform.
• From your device: Via browser APIs for geolocation and camera access, which require your explicit permission before activation.
• From the blockchain: By querying publicly available data on the Solana mainnet or devnet to verify transaction status.

5. Legal Bases For Processing

Where applicable privacy law (including the EU GDPR) requires us to identify a legal basis for processing, we rely on the following:

• Contract performance: Processing your wallet address, gameplay data, and task submissions is necessary to provide the Service you signed up for.
• Legitimate interests: We process technical and device data to protect the security and integrity of the platform, prevent fraud, and improve Service performance, where such interests are not overridden by your rights.
• Legal obligation: We may process and retain data to comply with applicable laws, lawful orders from competent authorities, and to establish, exercise, or defend legal claims.
• Consent: Where we rely on consent (for example, for optional notifications or analytics features), you may withdraw that consent at any time through the Data & Permissions page or by contacting us.

6. How We Use Your Data

• To operate and deliver the TERRA gameplay experience, including map features, task systems, and reward distribution.
• To authenticate your wallet and maintain your game session securely.
• To process, verify, and record on-chain token transactions involving SOL and SKR.
• To verify task submissions using AI-powered image analysis.
• To calculate and apply your XP multiplier, level progression, and daily check-in streaks.
• To manage referral relationships and attribute rewards correctly.
• To detect and prevent cheating, botting, account farming, and other forms of abuse.
• To communicate with you regarding platform updates, security notices, and support responses.
• To comply with legal obligations and respond to lawful requests from authorities.
• To analyse aggregate, anonymised usage patterns to improve platform design and performance.

7. Sharing And Disclosure

We do not sell your personal data to third parties. We may share data in the following limited circumstances:

• Service providers: Trusted third-party infrastructure providers (hosting, database, CDN, AI image analysis) who process data on our behalf under contractual data processing agreements.
• Blockchain networks: When you initiate an on-chain transaction, relevant data (wallet address, transaction amount, signature) is broadcast publicly to the Solana network. This disclosure is inherent to blockchain technology and cannot be undone.
• Legal compliance: We may disclose data to law enforcement, courts, regulators, or other authorities when required by applicable law, court order, or to protect the rights, property, or safety of TERRA, its users, or the public.
• Business transfers: In the event of a merger, acquisition, asset sale, or restructuring, your data may be transferred to a successor entity, subject to equivalent privacy protections.
• Aggregated data: We may share anonymised, aggregated statistics that do not identify any individual user with partners, researchers, or the public.

8. Cookies And Tracking Technologies

TERRA uses cookies and similar technologies for essential platform functionality, including:

• Session cookies: To keep you authenticated between page navigations.
• Security cookies: Cryptographic nonces used to prevent replay attacks during wallet authentication.
• Preference cookies: To remember UI state and settings within the application.

We do not use third-party advertising cookies or tracking pixels. Essential cookies cannot be disabled without breaking core platform functionality. You may clear all cookies at any time using your browser settings.

9. Location And Camera Data

TERRA requests access to your device's GPS location and camera only when you actively use features that require them. These permissions are handled entirely by your browser or operating system and can be revoked at any time through the Data & Permissions page or your device settings. We do not collect background location data and we do not track your location when you are not actively using a location-dependent feature.

Task photographs are transmitted over HTTPS, processed by our AI verification system, and stored for a limited period to support dispute resolution. Images associated with approved tasks are deleted from our active storage within 90 days of task completion.

10. Data Retention

• Account & gameplay data: Retained for as long as your account is active and for up to 2 years after your last activity, after which it may be anonymised or deleted.
• Location data: Retained for up to 12 months for fraud prevention purposes, then deleted.
• Task photographs: Retained for up to 90 days from task completion, then deleted from active storage.
• Session & authentication logs: Retained for up to 90 days for security auditing.
• Legal hold: Data subject to a legal hold, regulatory investigation, or active dispute may be retained beyond normal retention periods until the matter is resolved.
• Blockchain records: Transaction data recorded on-chain is permanently public and cannot be deleted by us or by you.

11. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Ask us to correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data, subject to legal retention obligations. Note that blockchain records cannot be erased.
• Right to restriction: Ask us to pause processing of your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time for consent-based processing without affecting the lawfulness of prior processing.
• Right to lodge a complaint: File a complaint with your local data protection authority if you believe we have handled your data unlawfully.

To exercise any of these rights, contact support@terraseek.xyz with your wallet address and a description of your request. We will respond within 30 days.

12. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (HTTPS/TLS), server-side access controls, JWT-based authentication with short expiry windows, cryptographic nonce validation to prevent replay attacks, and regular security reviews. However, no system is completely secure. You are responsible for maintaining the security of your wallet and private keys, which TERRA never accesses or stores.

13. Children's Privacy

TERRA is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us at support@terraseek.xyz and we will take prompt action to delete it.

14. International Data Transfers

Your data may be processed on servers located outside your country of residence. Where we transfer data across borders, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your data in accordance with applicable privacy law.

15. Changes To This Policy

We may update this Privacy Policy from time to time. Material changes will be notified within the application and/or by updating the date above. Continued use of TERRA after changes constitutes acceptance of the revised policy.

16. Contact

For all privacy-related matters, contact us at support@terraseek.xyz.