Privacy Policy

01Scope

This policy explains what personal data the HYPURR.STKR app and the website at hypurrstkr.xyz collect, why, who else sees it, and what you can do about it. It applies to the Service described in our Terms of Service.

We are the controller of this data. We handle it under the Korean Personal Information Protection Act (PIPA) and, where they apply to you, under other applicable privacy laws.

02What we collect

We do not collect payment card numbers or bank details — we never see them, because payment is on-chain. We do not collect government ID, and we do not ask for your private keys or seed phrase. No one legitimate will ever ask you for those, including us.

The app does not request camera, microphone, location, contacts, or NFC permissions. Event pickup uses a QR code that the app displays; it is scanned by our staff’s device, not by yours. The pickup QR image itself contains only a short-lived random ticket id, its expiry, and a server signature — not your wallet address or name. (Our server keeps a matching ticket record that does link that random id to your wallet, the series and event it is for, and when it was issued, invalidated, and scanned — see §7.) If you enable Face ID / Touch ID for quick sign-in, the check is done by your device’s operating system; we never receive biometric data, only whether the check passed.

03Why we use it

• To run your account — sign-in, session, profile.
• To check eligibility — reading public holdings for the wallets you bind.
• To fulfil orders — production, payment verification, shipping, pickup, and returns.
• To keep legal records — consent signatures, transaction and contract records we must retain.
• To support you — answering enquiries and handling complaints.
• To keep the Service safe — preventing fraud, abuse, and sanctions breaches.

We rely on your consent, on performing our contract with you, on complying with legal obligations, and on our legitimate interest in operating and securing the Service. We do not sell personal data and we do not use it for advertising profiling.

04On-chain data

A wallet address is pseudonymous, not anonymous. If an address is linked to you elsewhere — on an exchange, a social profile, or a name service — its activity here can be linked to you too. Consider that before binding a wallet you use for other things.

When you delete your account we remove the link between your identity and your addresses in our records, as described in section 9. The on-chain record remains.

05Who we share with

We share only what each provider needs, under contracts requiring them to protect it. We do not share your data with anyone else except where the law requires it, or to establish or defend legal claims.

Provider entities and processing locations (as published by each provider; we accept each provider’s standard data processing terms as part of its service agreement): Privy — Horkos, Inc. (United States); Supabase — Supabase, Inc. (United States), with our database and storage hosted in the AWS Seoul region (Republic of Korea); Vercel — Vercel Inc. (United States); push delivery — Google LLC (Firebase Cloud Messaging, United States) and Apple Inc. (Apple Push Notification service, United States); shipping — Korea Post (우정사업본부, Republic of Korea) for domestic and outbound international parcels, handed to the destination postal operator abroad; blockchain reads — public HyperEVM RPC endpoints operated by the Hyper Foundation and, where configured, our own read-only RPC; .hl name resolution — the operator of the Hyperliquid Names registry. The app and site currently use no analytics, crash-reporting, or attribution SDK; if one is added, it will be listed here.

06Transfers outside Korea

Our providers are located outside Korea, so your personal data is transferred abroad. PIPA requires us to tell you the following.

Separately, blockchain transactions are broadcast to a public global network with no fixed location, and cannot be restricted to any country.

07How long we keep it

We keep personal data only as long as needed, then delete, anonymise or pseudonymise it. Korean e-commerce law requires certain records to be kept for fixed periods, and those override a deletion request for those records only.

08Your rights

You may at any time ask us to:

• tell you what data we hold about you, and give you a copy;
• correct data that is wrong or incomplete;
• delete your data;
• stop or restrict processing;
• withdraw consent you previously gave.

Email support@hypurrstkr.xyz. We respond within 10 days as PIPA requires. We may need to confirm it is really you before acting. We may refuse in the narrow cases the law allows — for example where a record must be retained under section 7 — and if we do, we will tell you why and how to object.

Depending on where you live you may have further rights, such as data portability or the right to object, and the right to complain to your local data protection authority.

09Deleting your account

You can delete your account from within the app (Profile → Delete account) in three steps: a summary of what will be erased, a confirmation signed with your wallet, and a final slide-to-confirm. You can also ask us by email (section 14). The deletion is refused while a payment or a sticker mint for your wallet is still in progress — this can last up to two hours while a recent payment attempt is unresolved; try again once it has settled. Once accepted, we immediately revoke every sign-in session, remove your push devices, notification preferences, inbox messages and wallet links, replace the recipient details on your orders and strip the IP address and device string from your order and licence records, and we ask our login provider (Privy) to delete the user record it holds for you. During the following seven days the same wallet cannot sign in again. Seven days after the request a scheduled server job erases every remaining off-chain record tied to your wallet address (pickup and shipping requests, licence signatures, wallet links, sign-in nonces, payment reservations and relay intents). Two technical records are kept permanently so that the revocation cannot be undone: a session-revocation record (wallet address and token version) and device-token fence records (push token identifier and timestamp, no readable content). If the provider-side deletion fails we retry it automatically every hour and our operator is alerted; if it is still pending when the 7-day purge runs, sign-in with that wallet stays blocked until the provider-side deletion succeeds.

The only records kept after the 7-day purge are: (i) order and payment ledger records that the Act on Consumer Protection in Electronic Commerce requires us to keep for 5 years (section 7), in pseudonymised form — recipient, address and contact details replaced, IP address and user-agent removed, while the wallet address itself stays as the transaction identifier required for on-chain reconciliation; (ii) public on-chain-derived data such as snapshot membership and the mint queue, which contains only your public wallet address; (iii) the deletion register and the permanent session-revocation and device-token fence records described in section 7, kept so that revoked credentials stay revoked and the deletion can be evidenced; (iv) gas-relay job rows kept for payment reconciliation, with their signature components scrubbed at the purge; (v) operational alert logs that may reference your wallet address and provider user id, kept for up to 12 months; and (vi) the Basic edition purchase-cap counter (series id, wallet address, number of packs bought) described in section 7, a sales-policy record derived from the retained order records and kept so that the per-wallet purchase limit cannot be reset by deleting and re-creating an account. These records are separated and restricted to legally-required or operational use only. HYPE payment attempt records (wallet address, order numbers, transaction hash, the quote signature and the request fingerprint — technical reconciliation data) are also kept for payment reconciliation, in the same way as gas-relay records. Until the payment is confirmed or abandoned, each attempt record additionally keeps the full signed quote (amounts, destination country, chain, treasury address and validity window) and the confirmation context needed to complete that request without asking you again (for shipping: the recipient name, phone number and address; for on-site pickup: the event and series); these two fields are cleared within 7 days after the payment is confirmed and within 30 days after the attempt is abandoned. Account-deletion intents (wallet address, the app-generated request reference and its state) are kept for 30 days so that the app can obtain a deletion receipt after the session is gone; the same request reference is also stamped on the deletion register entry and is removed from it after 30 days (the register itself is kept as described above). Rate-limit counters keyed by IP address or wallet address that protect our public endpoints are kept for about 24 hours (cleaned hourly; they may persist somewhat longer during outages).

10Cookies and analytics

The website uses only what is needed to serve the page. It does not set advertising or cross-site tracking cookies. Our host records standard server logs, including IP addresses, to deliver and secure the site.

The app currently includes no analytics, crash-reporting, or attribution SDK; the only third-party SDKs that talk to a server are our login/wallet provider, Firebase Cloud Messaging (push), and the blockchain/RPC libraries listed in section 5. If any such SDK is added later, we will disclose it here and in the App Store Connect App Privacy questionnaire, and add a consent mechanism where the law requires one.

11Children

The Service is not directed at children under 14, and we do not knowingly collect their personal data. If we learn we have, we delete it promptly. If you believe a child has given us data, contact us.

12Security

We use encrypted connections, access controls limiting who on our side can reach personal data, and separation of secrets from application code. We keep only the data we need.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data we will notify you and the relevant authority as the law requires.

13Changes

We may update this policy. We post the new version here with a new effective date and, for changes that materially affect your rights, give notice in the app or by email at least 7 days before they take effect, or 30 days where the change concerns a matter that disadvantages you.

14Contact and complaints

If you are not satisfied with our response, you may contact the Korea Personal Information Protection Commission (privacy.go.kr, 118), the Personal Information Infringement Report Centre, or the police cybercrime unit. If you are outside Korea, you may also contact your local data protection authority.