Introduction

Welcome to Wormies ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience while using our browser extension wallet. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Wormies browser extension.

By using Wormies, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our extension.

Information We Collect

1. Authentication Information

We use Privy, a third-party authentication service, to manage user authentication. Through Privy, we may collect:

• Email address or phone number (if you choose email/SMS authentication)
• Social media profile information (if you choose social login)
• Wallet addresses generated for your account
• Authentication tokens and session data

2. Wallet and Transaction Data

To provide wallet functionality, we process:

• Smart account addresses
• Transaction histories and balances
• Blockchain network interactions
• Token holdings and NFT ownership information

3. Usage Information

We may automatically collect certain information about your device and how you interact with our extension:

• Browser type and version
• Extension usage patterns and feature interactions
• Error logs and diagnostic information
• Performance data

4. Payment Information

When you add funds using a credit card or other payment methods, payment processing is handled by secure third-party payment processors. We do not directly store your full credit card information.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Wormies wallet extension
• Authenticate users and manage user accounts
• Process and facilitate blockchain transactions
• Handle gas fee sponsorship and transaction abstraction
• Improve and optimize our extension's performance
• Provide customer support and respond to inquiries
• Detect and prevent fraud, security threats, and technical issues
• Comply with legal obligations and enforce our terms of service
• Send important notifications about your account or transactions

Data Sharing and Disclosure

We may share your information with:

1. Service Providers

• Privy: For authentication and embedded wallet services
• Blockchain Networks: Transaction data is inherently public on blockchain networks
• Payment Processors: For handling credit card transactions and fund additions
• Infrastructure Providers: For hosting and technical operations

2. Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Prevent fraud or security threats
• Protect the rights and safety of our users

3. Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

Blockchain Transparency

Important: Blockchain transactions are public and permanent by design. Once a transaction is recorded on a blockchain, it cannot be deleted or modified. Your wallet address and transaction history are visible to anyone with access to the blockchain network. While we implement privacy features where possible, the inherent transparency of blockchain technology means that certain information will always be publicly accessible.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure key management through Privy's embedded wallet infrastructure
• Regular security audits and updates
• Access controls and authentication mechanisms
• Monitoring for unauthorized access and security threats

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When you close your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal purposes. Note that blockchain transaction data cannot be deleted due to the immutable nature of blockchain technology.

Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal information
• Withdrawal of Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at privacy@wormies.finance. We will respond to your request within the timeframe required by applicable law.

Third-Party Services

Our extension integrates with various third-party services and DeFi applications. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you interact with through Wormies.

Key third-party services we use include:

• Privy: Authentication and embedded wallet services (see Privy's Privacy Policy)
• DeFi Applications: Various decentralized applications you may access through Wormies
• Blockchain Networks: Ethereum, Polygon, Base, and other supported networks

Children's Privacy

Wormies is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately. If we discover that we have collected information from a child under 18, we will take steps to delete such information promptly.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your jurisdiction. By using Wormies, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our servers and service providers may be located.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice in the extension
• Sending you an email notification (if we have your email address)

Your continued use of Wormies after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Additional Information for EU/EEA Users

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR):

• The right to lodge a complaint with a supervisory authority
• The right to data portability
• The right to object to automated decision-making and profiling
• The right to restrict processing in certain circumstances

Our legal basis for processing your personal information includes:

• Contractual necessity: To provide our wallet services
• Legitimate interests: To improve our services and prevent fraud
• Legal obligations: To comply with applicable laws and regulations
• Consent: Where you have provided explicit consent

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@wormies.finance. We will verify your identity before processing your request.