Privacy Policy

This Privacy Policy explains what information Analong Studios handles through Max Extractors, why, and what it cannot do with it. We collect very little: there are no accounts, no analytics and no tracking. Most of what we handle is public blockchain data that anyone can read.

1. Who we are and what this policy covers

1.1 Max Extractors is operated under the name Analong Studios, based in Florida, USA. "Analong Studios", "the Studio", "we", "us" and "our" mean the person or persons who operate Max Extractors under that name, whether as individuals or through a business entity, and any successor to them (as in Section 1.1 of our Terms of Use). Contact: analongstudios@gmail.com.

1.2 This policy covers the website at https://maxextractors.io and the API behind it at api.maxextractors.io (the "Site"), and the services we run for Max Extractors, including the indexer, token metadata and images, display looks and Scavenge (with the Site, the "Services"). "Contract" means the Max Extractors smart contract at 0x2428466B6b52f4a56f1ee7Eacc635c781B53f063 on Robinhood Chain. "Token" means a Max Extractors token. "Wallet Address" means a public blockchain address. "Personal data" means information that identifies, or can reasonably be linked to, a particular person. Other capitalized words have the meanings given in our Terms of Use (https://maxextractors.io/terms).

1.3 This policy does not cover services we do not run, such as Robinhood Chain, your wallet software, OpenSea or block explorers (see Section 16).

2. What we do not collect

2.1 The Site does not ask for names, email addresses, phone numbers, postal addresses, government IDs or payment card details, and there are no player accounts or passwords. If you email us, including to send a notice under the Terms of Use, we receive what you send (Section 8).

2.2 We never ask for, and never receive, your seed phrase or private keys. Every transaction is made by your own wallet, and we never hold your keys or funds. Anyone who asks for your seed phrase in our name is not us.

2.3 The Site uses no analytics, advertising, tracking pixels or social-media tracking scripts. Fonts are served from the Site itself. The Site sets no cookies for visitors; its only cookie is a sign-in cookie for the Studio's own internal art tool at /art, used only by the Studio. Separately, our hosting provider's security systems may occasionally set a short-lived cookie to screen out automated attacks. We do not use any cookie to track you.

3. What stays in your browser

3.1 The Site keeps these items in your browser's local storage or session storage, and does not send them to us:

• your light or dark theme;
• the dashboard's grid or list view and its sort order;
• the keyboard-shortcut setting on the /live page;
• the collection page's scroll position, so the Back button returns you to the same place (session storage, cleared when you close the tab).

3.2 The open-source wallet-connection software the Site uses also keeps connection details in local storage, such as which wallet you last connected, the connected Wallet Address and the network, so it can reconnect you. These also stay in your browser.

3.3 You can clear all of this by clearing site data for maxextractors.io in your browser settings.

4. Public blockchain data

4.1 Tokens live on Robinhood Chain, a public blockchain. Every payment, transfer and burn involving the Contract is recorded there with the Wallet Addresses involved, for anyone to read.

4.2 Our indexer reads this public data and stores a copy: Wallet Addresses; which Tokens each holds; payments (who paid, for which Token, how many days, and when); transfers; burns; and related transaction details. We also hold the list of Wallet Addresses in the snapshot used for the free airdrop of the Tokens, which was likewise read from public blockchain data.

4.3 The Site displays this data publicly, for example on Token pages, pages for individual Wallet Addresses, the ledger and leaderboards, including who holds a Token and who paid for it.

4.4 A Wallet Address does not carry your name, but it is not anonymous. Others can link it to you, for example through an exchange account, a name service or your own posts.

4.5 Blockchain data is permanent. No one, including the Studio, can alter or delete a transaction on Robinhood Chain. Deleting our copy would not remove anything from the chain, and others (block explorers, marketplaces, other indexers) keep copies we do not control.

5. When you connect a wallet

5.1 Connecting a wallet shares your Wallet Address with the Site. To show your Tokens on the dashboard, your browser asks our API for that address's Tokens, so our servers receive your Wallet Address along with the technical data in Section 7.

5.2 To read the chain, your browser talks directly to a Robinhood Chain RPC service, currently the chain's public RPC service, which others run (we may switch to another provider). Your wallet sends your transactions through whichever RPC service it is set to use for Robinhood Chain; when the Site adds the network to your wallet, it suggests the public one. These services receive your IP address, your Wallet Address and the queries and transactions sent, including any address you type into the Send dialog, which the Site checks against the chain.

5.3 Your wallet software (for example, MetaMask) is provided by others under its own privacy policy. If you connect through a relay service such as WalletConnect, where offered, that service also receives connection data under its own terms.

6. Signed messages we store

6.1 Two optional features work by having you sign a message with your wallet. Signing costs no gas and is not a blockchain transaction; the message and signature go to our servers.

6.2 Display look. A Token's Holder can choose the look it shows (normal, mild glitch or severe glitch). We store the Token id, the look, the signing Wallet Address, the message, the signature and the time. A new choice replaces the earlier record for that Token.

6.3 Scavenge. When the Holder of a Standing (living) Token trades Art and traits with a Token that died at the latest Boundary, we store the two Tokens, the Day, the Art each wore before, the signing Wallet Address, the message, the signature and the time. We keep these records for as long as we run the Services (Section 11), because they decide which Art each Token wears.

6.4 What is public. A Token's chosen look appears on the Site and in its public metadata and images. Each Scavenge trade (the Day, the two Tokens, the Art each wore before, and the time) appears on both Tokens' pages. We do not currently display the signing Wallet Address, message or signature, but we keep them as proof that the Holder authorized the change and may disclose them for that purpose.

7. Technical data in logs

7.1 When your browser loads the Site, the computers serving it receive your IP address, your browser's user agent, the pages and API addresses requested (which can include a Token id or Wallet Address), the referring page, and the time. Our infrastructure providers record this in their normal logs: Vercel, which hosts the website, and Fly.io, which hosts our API, indexer and database. Our servers read the blockchain through Alchemy and the public Robinhood Chain RPC service; our requests to them may include Token ids and Wallet Addresses.

7.2 When you submit a display look or Scavenge trade, our server holds your IP address in memory, only to limit how often requests can be made. It is not written to our database. Our servers' error logs may record the address of a failed request.

8. If you contact us

If you email us, we receive your email address, what you write and any details you include, such as your name and, for a copyright complaint, your postal address and telephone number. Our email is hosted by Google (Gmail). We use it to reply, to handle your request and to keep a record of it.

9. How we use information

9.1 We use the information described above only to:

• run the Services, including showing Token status, countdowns, history, Art and metadata;
• carry out the display looks and Scavenge trades you sign, and keep proof that you authorized them;
• ask OpenSea to refresh its copy of a Token's metadata (these requests contain Token ids only);
• keep the Services secure, prevent abuse and fraud, and fix problems;
• answer messages and requests;
• comply with the law, enforce our Terms of Use, and establish, exercise or defend legal claims.

9.2 We do not use personal data to profile you or make decisions about you. What happens to a Token, such as whether it dies at the Boundary, is decided by the Contract's rules and the Token's payment record, not by any assessment of you.

9.3 Where a law such as the EU or UK GDPR requires a legal basis, we rely on providing the Services you ask for under our Terms of Use; our legitimate interests in operating, securing and improving the Services and keeping records of authorized changes; and compliance with legal obligations.

10. Who receives information

10.1 We do not sell personal data, and we do not share it for targeted (cross-context behavioral) advertising.

10.2 Information goes to others only:

• to service providers that host or support the Services (Vercel, Fly.io, Alchemy, and Google for email);
• to the public, for what this policy says is displayed (Sections 4.3 and 6.4), which anyone can copy;
• to OpenSea, which receives Token ids only;
• where we believe in good faith the law requires it, or to protect the rights, property or safety of the Studio, our users or others;
• to a successor that takes over the project, the Site or control of the Contract, subject to this policy as it may be changed under Section 17;
• to anyone else with your permission.

11. How long we keep information

• Blockchain data: permanently, on the chain, beyond anyone's control.
• Our copies of chain data, display looks and Scavenge records: as long as we operate the Services, and afterward only as long as needed to comply with the law, resolve disputes or enforce our agreements. Backups, on our own computers and in our hosting provider's automatic snapshots of our server's disk, follow the same rule.
• IP addresses held for rate limiting: in memory only, until the server restarts or newer entries displace them.
• Provider logs: for the periods set by Vercel, Fly.io, Alchemy and the RPC service under their own policies.
• Emails: as long as needed to handle your request and keep a record of it.
• Browser storage: until you clear it (session storage, until you close the tab).

12. Security

We take reasonable measures to protect the information we hold, including encrypted connections (HTTPS), limited access to our servers, and checking every signature before acting on it. No system is perfectly secure, and we cannot guarantee the security of information in our care, in transit over the internet, or on a public blockchain. You are responsible for your own device, wallet, seed phrase and keys, which we can never recover for you. Before you connect a wallet or sign anything, check that you are on https://maxextractors.io.

13. Children

The Services are not directed at children and are only for people 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete what we can; we cannot delete anything from the blockchain.

14. International users

Our servers are in the United States. Our providers may also process data in other countries where they operate; for example, Vercel serves pages from locations around the world. By using the Site, you understand that your information will be processed in the United States, where privacy laws may differ from those where you live.

15. Your choices and rights

15.1 Your choices. You can browse most of the Site without connecting a wallet, clear what the Site keeps in your browser (Section 3), use a Wallet Address you have not linked to your identity, and decline the optional signed-message features.

15.2 Your rights. Depending on where you live, laws such as the EU and UK General Data Protection Regulation and the privacy laws of some U.S. states may give you rights over your personal data: to know what we hold and get a copy, to correct or delete it, to object to or restrict certain uses, to withdraw consent, to appeal our decision on your request, and to complain to a data protection authority. This policy does not claim that any particular law applies to the Studio, but we will honor requests that applicable law requires, where we are able to.

15.3 Limits. We cannot alter or delete anything recorded on Robinhood Chain, undo what the chain has made public, or make others delete their copies. Where deleting a record would break the Services as the Terms of Use describe them (for example, a Scavenge record decides which Art a Token wears), or where we must keep it to comply with the law, prevent fraud, or establish or defend legal claims, we may keep it as the law allows and will tell you so.

15.4 Making a request. Email analongstudios@gmail.com with "Privacy" in the subject line and the Wallet Address or other details your request concerns. We may ask you to show that you control a Wallet Address, for example by signing, with your wallet, a short plain-text message we send you by email (no gas, and never a transaction). We will never ask for your seed phrase or private key. Where the law allows, an authorized agent may make a request for you with proof of authority. We will not treat you differently for exercising your rights.

15.5 Do Not Track and Global Privacy Control. We do not track visitors across websites, sell personal data or share it for advertising, so the Site works the same whether or not your browser sends these signals.

16. Other websites and services

The Site links to, and the Tokens appear on, services we do not control, such as block explorers, OpenSea and other marketplaces, and wallet software. Their own privacy policies apply, and we are not responsible for them.

17. Changes to this Privacy Policy

We may update this policy. We will post the new version here with a new "Last updated" date and, if a change is material, give notice on the Site. Changes take effect when posted unless we say otherwise. This policy is a notice of our practices, not a contract; our Terms of Use are the agreement between you and us.

18. Contact

Analong Studios (the name under which Max Extractors is operated), Florida, USA. Email: analongstudios@gmail.com.