Privacy Policy
Lobbies, Ltd ("we", "us") operates Tartarus, a permissionless token launchpad on the Elysium network. This policy explains what we collect, why, and what you can do about it.
Contact us at [email protected].
We have written this from what the software actually does rather than from a template. If you find something here that does not match our behaviour, tell us and we will correct it.
The short version#
- Your wallet address is the identifier we use. We do not ask for your name, email or phone number, and we have no accounts or passwords.
- We do not sell or share your personal information, and we never have.
- Anything written to the blockchain is permanent and public. We cannot delete it, and neither can you. That is a property of the chain, not a policy choice.
What we collect#
Information you give us#
| What | When | Where it goes |
|---|---|---|
| Wallet address | You connect a wallet | Our database, as the key for everything else |
| Display handle | You set it on your profile | Our database; publicly visible |
| X account | You choose to link one | Your X username, read from X with your permission; our database; publicly visible |
| Images you upload | You add a token image | Pinata, on the public IPFS network; publicly served |
| Draft token details | You start a launch | Our database, until the launch completes |
Setting a handle or uploading an image requires signing a Sign-In with Ethereum message. That signature proves you control the address; it is not a transaction, costs nothing, and gives us no ability to move your funds.
Information collected automatically#
- IP address. Read from the request to enforce rate limits. It is used as a short-lived key in our cache and is not written to our database. We do not build profiles from it.
- Wallet connection state, stored in a cookie so your wallet stays connected between visits.
- Session token, stored in your browser's local storage after you sign in. It stays on your device.
- Server logs from our hosting providers. Our own logs can include your wallet address and transaction hash when we relay a transaction for you.
Information from the blockchain#
Launches, trades and balances are public chain data. We index it to make the site work. We did not collect it from you — it was published by your own wallet, and it is equally available to anyone.
Why we use it#
| Purpose | Basis |
|---|---|
| Operating the site and showing your positions | Performing the service you asked for |
| Relaying your signed transactions to the network | Performing the service you asked for |
| Calculating holder rewards from public balances | Performing the service you asked for |
| Rate limiting, abuse prevention, processing uploaded images | Our legitimate interest in a working, lawful service |
| Complying with law | Legal obligation |
We do not use your information for advertising, and we do not profile you.
Who we share it with#
We use these processors. Each receives only what it needs.
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Website hosting | United States |
| Fly.io | Application hosting, database | United States |
| Upstash | Caching, rate limits, sessions | United States |
| Pinata | Image storage, holder-reward records (IPFS) | United States |
| Elysium RPC and relay operators | Reading the chain, submitting transactions | Global |
| Reown / WalletConnect | Wallet connection | Global |
| Hyperliquid | HYPE price chart | Global |
| X | Linking an X account, if you choose to | United States |
| Google Translate | Optional page translation | Global |
On translation: if you use the language selector, the text visible on the page is sent through our server to Google's public translation endpoint, and we cache the result for 7 days. Do not use that feature on any page showing information you would not want sent to a third party. Translation is off unless you turn it on.
On your browser's direct connections: viewing the HYPE price chart makes your browser request data from Hyperliquid directly. Your wallet, and the site's fallback RPC, can likewise connect to RPC operators directly. Those services see your IP address, under their own policies.
We do not sell your personal information. We do not share it for cross-context behavioural advertising. We disclose information to authorities only where legally required.
What we cannot delete#
Launches, trades and token metadata are written to a public blockchain by your own wallet. Lobbies, Ltd does not control that ledger and cannot amend or erase it. A deletion request removes our off-chain records — your handle, linked X account, uploads and drafts — but has no effect on chain state, and copies held by other indexers and explorers are outside our reach.
Images and holder-reward records are stored on IPFS, a public content-addressed network. We can unpin our copy, but we cannot erase copies others hold. Holder-reward records list wallet addresses and amounts, all derived from public chain data, so that anyone can verify a distribution.
This is the single most important limitation in this policy, and no provider of an on-chain service can honestly promise otherwise.
Your rights#
If you are in California#
Under the CCPA/CPRA you may ask us to tell you what personal information we hold, delete it, or correct it, and you may not be discriminated against for asking.
We do not sell or share personal information, so there is nothing to opt out of. We do not knowingly process the information of anyone under 16.
If you are in the EU or UK#
We extend the same rights to you as a matter of policy: access, correction, erasure, restriction, objection, and portability. You may complain to your local data protection authority.
Our providers are largely US-based, so using Tartarus involves transferring your information to the United States.
How to exercise them#
Email [email protected] from any address, and sign a message from the wallet in question so we can be sure the request comes from its holder. We respond within 30 days. There is no charge.
Retention#
| Data | Kept |
|---|---|
| Wallet address, handle, linked X account | Until you ask us to delete them |
| Uploaded images | Until deleted, or the launch is abandoned. The original upload is removed once re-encoded |
| Holder-reward proofs and records | As long as needed for claims and verification |
| Translation cache | 7 days |
| Draft launches | Until completed or expired |
| Rate-limit records | Minutes |
| Server logs | As long as our providers retain them |
| On-chain data | Permanently, and not by us |
Security#
Access is limited to what each service needs. Sessions are short-lived and scoped to a single wallet. Uploaded images are re-encoded before being served, which strips embedded metadata.
No system is perfectly secure. We never ask for your seed phrase or private key, and nobody legitimately will. We cannot access your wallet, and we cannot move your funds.
Children#
Tartarus is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
Changes#
If we change this policy we will update the date below and, for anything material, say so on the site. Continuing to use Tartarus after a change means you accept it.
Contact#
Lobbies, Ltd — [email protected]