Skip to document
BLAST.FUN // LEGAL ARCHIVE
PUBLIC CLEARANCE

FILE // PRV-001

Privacy Policy

This policy explains how BLAST.FUN handles information when you use Mission Control, join Season Zero, connect a wallet, or otherwise use the Blast interface.

LAST UPDATED

1. Scope and who we are

This Privacy Policy applies to the website at blast.fun, its subdomains, and the interfaces, features, content, and support channels that link to this policy (together, the “Services”). The Services are operated under the BLAST.FUN name (“Blast,” “we,” “us,” or “our”). For questions or privacy requests, contact hello@blast.fun.

Mission Control is Blast's Season Zero preregistration experience. Blast may also provide a non-custodial interface for discovering, creating, and interacting with tokens and smart contracts on Sui. This policy covers information processed through Services under our control. It does not cover the Sui network, independent wallets, X, Privy, Slush, decentralized protocols, exchanges, websites, or other third-party services, which have their own practices and policies.

2. Information we collect

The information we collect depends on how you use the Services and may include:

  • Wallet and blockchain information. Public wallet addresses, wallet connection status, signatures used to authenticate or authorize requests, transaction digests, token balances, smart-contract interactions, trading activity, liquidity positions, and other public on-chain data.
  • Season Zero identity. Your Privy account identifier; a verified X account identifier and snapshot of its handle, display name, and profile image; the full Sui wallet address created through Privy or connected through Slush; and provider wallet references.
  • Season Zero profile and referral information. Your callsign, optional display name, fleet and crew assignment, title and card record, disclosure acceptance, the launch code used to join, its code owner, and completed recruits attributed to your codes.
  • Content you submit. Token names, symbols, descriptions, images, links, creator or profile information, comments, watchlists, and other information you choose to make available through the Services.
  • Communications. Your email address and the contents of messages you send to support or other Blast channels.
  • Device, network, and usage information. IP address, approximate location derived from IP address, browser and device type, operating system, language, referring page, pages or features requested, request time, performance data, and diagnostic or security events.
  • Local preferences and session data. Interface preferences, watchlists, display and sound settings, wallet session state, and similar data stored through your browser or wallet tools.
  • Compliance information. If required by law or to protect the Services, we may collect information reasonably necessary to assess sanctions, fraud, security, or other legal and compliance risks.

We do not ask for, collect, or have access to your private keys or wallet recovery phrase.

2A. Season Zero preregistration

Completing a Mission Control profile joins Season Zero. X verification supplies the identity snapshot used for the profile and card. Every completed profile ends with one full Sui wallet address: either an embedded wallet created through Privy or a wallet connected through Slush. Blast stores the association among that wallet, the verified X identity, the profile, and the code path used to join.

Public profile routes are currently disabled. If Blast enables them, the planned public Season Zero projection includes the verified X handle and profile image, optional display name, callsign, full Sui wallet address, fleet, crew number and title, card, and completed-recruit total. A public shared-card image also displays up to five recent recruits' verified X handles. The private Privy identifier, provider wallet reference, X subject identifier, the launch code itself, and private onboarding answers are not part of that public projection.

If you request the two-code X engagement reward, Blast asks X to confirm that the X account connected to your profile follows @blastdotfun. Blast stores the successful follow-verification time and issues two codes once. Sharing your card is optional; no public post link or post verification is required for this reward. Follow checks use Blast’s app credentials, not a stored member access token.

The owner of the code used to complete a profile can see that a recruit completed registration and the recruit identity needed for the crew list: callsign, optional display name, verified X handle and profile image, fleet, and crew number. Blast does not expose the recruit's login credentials, provider identifiers, launch code, or private onboarding answers to the code owner.

Callsign and fleet are fixed for Season Zero after profile completion. There is currently no self-service control to hide or delete a Season Zero profile, merge profiles, unlink X, or change the wallet associated with the profile. Contacting support is not a guarantee that Blast can make a requested change; applicable legal rights and required exceptions are assessed case by case.

3. Sources of information

We receive information directly from you; automatically from your browser, device, or wallet; from public Sui blockchain records; and from providers that support the Services. For Season Zero, Privy supports login, X identity connection, and embedded-wallet creation; Slush supports an external Sui wallet connection; X supplies the verified identity snapshot; and hosting, database, security, Sui RPC, and related infrastructure providers process information needed to operate and protect Mission Control. Those providers act under their own terms, our instructions, or both, depending on the service.

4. How we use information

  • Provide, maintain, and improve token discovery, launch, trading, liquidity, wallet, profile, portfolio, and community features.
  • Connect wallets, verify signatures, prepare transaction requests, and display public on-chain activity.
  • Process content you submit and operate public product surfaces.
  • Respond to questions, support requests, disputes, and other communications.
  • Measure performance, understand feature use, diagnose failures, and develop new features.
  • Detect and address spam, fraud, malware, market abuse, security threats, and other prohibited conduct.
  • Comply with legal obligations, respond to lawful requests, resolve disputes, and enforce our Terms of Use.
  • Protect the rights, safety, and integrity of Blast, our users, service providers, and the public.

6. Public blockchain data

Sui is a public blockchain. Wallet addresses, transactions, token activity, smart-contract events, and related records may be public, permanent, and available through independent nodes, indexers, explorers, analytics providers, and other services. A public wallet address or transaction can be personal information when it can be linked to an identifiable person.

Blast cannot edit, hide, reverse, or delete information recorded on Sui or another independent public network. Disconnecting a wallet, deleting local browser data, or making a privacy request does not remove prior public on-chain activity.

7. How we disclose information

We may disclose information in the following circumstances:

  • Service providers. To providers supporting hosting, content delivery, security, wallet connectivity, blockchain access, indexing, storage, analytics, support, and market data, subject to their applicable terms or our instructions.
  • Season Zero and public features. The code owner can see the completed recruit identity described in Section 2A. Public Season Zero profile routes are disabled at the effective date; if enabled, the fields listed in Section 2A will be visible to anyone. Token metadata, profile content, comments, or on-chain activity published through other features may also be public.
  • Legal and safety purposes. When reasonably necessary to comply with law or a lawful request, enforce our agreements, investigate abuse, or protect rights, safety, assets, and service integrity.
  • Business transfers. In connection with a proposed or completed merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate safeguards.
  • At your direction. When you request or authorize a disclosure, including by connecting to or using a third-party integration.

We do not sell personal information or share personal information for cross-context behavioral advertising. Blast does not use personal information for targeted advertising.

8. Cookies and browser storage

Blast and providers supporting wallet connectivity, infrastructure, and security may use local storage, session storage, cookies, or similar browser technologies to maintain wallet sessions, remember settings and watchlists, preserve feature state, prevent abuse, diagnose problems, and measure performance.

You can disconnect your wallet, clear site data, or adjust browser and wallet controls. Doing so may sign you out, remove saved preferences, or prevent some features from working. At the effective date of this policy, Blast does not use advertising cookies.

9. Retention

We retain off-chain information only for as long as reasonably necessary for the purposes described in this policy, including providing public product surfaces, maintaining security, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, or reporting requirements. Retention varies by the type and purpose of the information. We may delete or de-identify information when it is no longer needed. Public blockchain and distributed-storage records may persist indefinitely outside our control.

Season Zero profile, identity-link, wallet-link, code-attribution, disclosure, and security records are retained while needed to operate Season Zero, preserve crew and referral integrity, prevent duplicate or abusive registrations, secure access, and satisfy applicable obligations. Because callsign, fleet, crew, and referral relationships define the campaign record, clearing a browser or disconnecting a provider does not remove those server records.

10. Security

We use reasonable administrative and technical safeguards designed to protect systems and information under our control. No internet service, wallet, smart contract, blockchain, or storage system can be guaranteed completely secure. Protect your devices and wallet credentials, review every wallet request, and never send us a private key, recovery phrase, or password.

11. International processing

Blast and its service providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we use appropriate safeguards for international transfers of personal information.

12. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information; object to or restrict certain processing; withdraw consent; appeal a denied request; or complain to a data-protection authority. These rights may be limited by exceptions under applicable law, and we cannot alter public blockchain records.

  • Use public areas without connecting a wallet where a connection is not required.
  • Disconnect your wallet and manage wallet permissions.
  • Clear local browser storage or change browser controls.
  • Avoid placing personal information in token metadata, links, profiles, or comments intended for public display.
  • Email hello@blast.fun to make a request. Describe the request and provide the wallet address, email address, or other details reasonably needed to locate the relevant records. We may verify your identity or authority before responding.

Mission Control does not currently provide self-service hide, delete, profile-merge, X-unlink, or wallet-change controls. Privacy requests sent to support are handled under applicable law and may be limited by identity verification, security, fraud-prevention, recordkeeping, public-blockchain, or other lawful exceptions.

We will not discriminate against you for exercising an applicable privacy right.

13. United States disclosures

Blast does not sell personal information or share it for cross-context behavioral advertising. We do not knowingly use or disclose sensitive personal information for purposes that require a right to limit under applicable U.S. state privacy laws. Residents of certain states may have rights to know, access, correct, delete, or obtain a copy of personal information, and to appeal a denied request. Submit requests using the contact details below.

14. Children

The Services are not directed to children, and you must be at least 18 years old—or older if the age of legal majority where you live is higher—to use them. We do not knowingly collect personal information from anyone who does not meet this requirement. Contact us if you believe a child has provided personal information through the Services.

15. Changes to this policy

We may update this policy as the Services, infrastructure, or legal requirements change. The date at the top identifies the current version. When required by law, we will provide additional notice of material changes through the Services or another appropriate channel.

16. Contact

Questions, requests, and complaints about privacy may be sent to BLAST.FUN at hello@blast.fun.