Privacy Policy

2. Definitions

• User / you: A person or entity using the Services.
• Lollipop identity wallet: A Solana-based address associated with your Lollipop account and used for secure sign-in and claim verification. It is a technical account identifier, not a bank, investment, or cryptocurrency exchange account.
• External wallet: An optional third-party wallet address you choose to connect so you can import or display supported digital assets you already own. External wallets are not required for core Lollipop account access.
• NFC-enabled product: A physical card, tag, merchandise item, or chip that connects to a Lollipop experience.
• On-chain data: Records written to a public blockchain network. These records are public and generally cannot be changed or deleted.
• Off-chain data: Data stored by us or our service providers outside a public blockchain.

2.1 How Lollipop Uses Blockchain Infrastructure

Lollipop currently uses the Solana network behind the scenes for secure, tamper-resistant account authentication and to help verify that claims, rewards, and collectibles are uniquely connected to a physical tap. Lollipop is not a financial product. We do not provide trading, investment, financial-asset custody, or cryptocurrency exchange services, and you do not need to buy, hold, or trade cryptocurrency to use Lollipop.

3. Information We Collect

3.1 Information You Provide

• Public profile information you choose to add, such as a display name, bio, avatar, links, images, or other content.
• Your Lollipop identity wallet address, which we use for account authentication, NFC claim verification, and features you request.
• Addresses for external wallets you optionally connect to import or display supported digital assets you already own.
• Purchase and activation details for NFC products, with payment and order information processed by Shopify.
• Support messages and other information you send to us.

We do not collect or store seed phrases, private keys, or complete payment-card numbers. Shopify and its payment providers process payment-card information for purchases. You may choose what information to publish on your public profile, but information you make public can be viewed and copied by others.

3.2 Information Collected Automatically

• Device and browser information, such as user agent, operating system, device type, IP address, approximate location derived from IP address, timezone, and language.
• Usage information, such as page views, NFC taps, link clicks, feature interactions, session duration, and referring source.
• Performance information, error logs, fraud-prevention signals, and security telemetry.
• Cookie, local-storage, and similar-technology data as described in Section 6.

We collect this information through our Services, server logs, and analytics tools such as Google Analytics.

3.3 Public Network Data

Some actions may create public Solana network records—for example, records used to authenticate an account, publish a link, or verify that a physical tap produced a unique claim, reward, or collectible. Public network records may include wallet addresses, transaction identifiers, timestamps, and related claim references. These records are public and generally cannot be changed or deleted. We may store references that connect these records with your off-chain Lollipop account so the requested feature works.

If you connect an external wallet, information associated with that public address may also be visible through the applicable public network. We use that information only to support the import or display feature you request.

3.4 Aggregated & De-identified Data

We may aggregate or de-identify information to produce statistics and insights that do not reasonably identify you. We may use and disclose that information for lawful purposes and will not attempt to re-identify it except as permitted by law.

4. How We Use Information

• Provide, operate, maintain, and improve the Services.
• Authenticate accounts and verify NFC taps, claims, rewards, and collectibles.
• Import or display supported assets when you choose to connect an external wallet.
• Process and fulfill orders for NFC products and merchandise.
• Understand usage, diagnose issues, maintain security, and prevent fraud or abuse.
• Provide customer support and respond to requests.
• Create aggregated or de-identified metrics and reports.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information or use it for targeted advertising.

5. Sharing & Disclosure

We may disclose information:

• To service providers that help us operate the Services, such as hosting, analytics, security, order-processing, and customer-support providers.
• To Shopify and its payment and fulfillment partners when you place an order.
• To public blockchain networks when you request a feature that requires a public network record.
• At your direction, including when you publish profile content or connect an external wallet for asset display.
• To comply with law, regulation, legal process, or valid governmental requests.
• To protect the rights, property, security, or safety of Lollipop, our users, or the public.
• In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to applicable law.
• As aggregated or de-identified information that does not reasonably identify you.

6. Cookies & Similar Technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences, protect the Services, support requested functionality, and understand how the Services are used. Google Analytics may collect information about your device and interactions with our Services for analytics purposes. You can control cookies through your browser settings, although disabling them may prevent some features from working correctly.

Our relevant third-party services and infrastructure may include Google Analytics, Shopify and its payment providers, hosting and security providers, and the Solana network. If you choose to connect an external wallet, the applicable wallet provider and supported public network may also process information. Their handling of information is governed by their own privacy policies and terms.

We do not use cookies or similar technologies to sell personal information or serve targeted advertising.

7. Data Retention & Deletion

• We retain off-chain data only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, meet legal obligations, resolve disputes, and prevent abuse.
• Retention periods vary by data type. We may retain analytics and security logs for up to three years unless a longer period is reasonably necessary for security, legal, or dispute-resolution purposes.
• You may request access to, export of, or deletion of eligible off-chain data by emailing [email protected]. Public blockchain records cannot be deleted by Lollipop.
• Deleted information may remain in backups for a limited period until those backups are overwritten, unless we are legally required to retain it longer.

8. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted transmission, access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security. Never share a wallet seed phrase, private key, password, or verification code with anyone claiming to represent Lollipop; we will not ask you for a seed phrase or private key.

9. International Transfers

We operate from the United States. If you access the Services from another country, your information may be transferred to and processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers.

10. Your Rights & Controls

Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of certain personal information; opt out of certain processing; or appeal our response to a privacy request. To submit a request, email [email protected] and describe the request. We may ask for information reasonably necessary to verify your identity or control of the relevant account. Authorized agents may submit requests where permitted by law. You may appeal a denied request by replying to our decision and stating that you wish to appeal.

We will not discriminate against you for exercising an applicable privacy right. Lollipop does not sell personal information or process it for targeted advertising. Browser or device controls may also let you manage cookies and similar technologies as described in Section 6.

11. Children’s Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us at [email protected] so we can review and delete it as appropriate.

12. Changes to this Policy

We may update this Policy from time to time. We will update the “Last Updated” date and, if changes are material, provide additional notice where required, such as through the Services or by email. We encourage you to review this Policy periodically.

13. Contact

I Build Cool Shit LLC (DBA Lollipop Links)
Colorado, USA
Email: [email protected]