Privacy Policy

1. Our Core Privacy Philosophy

At BOOBA (BNB baby), we believe in radical transparency, cryptographic pseudonymity, and zero-knowledge data minimization. We do not sell, monetize, rent, or trade your personal data to third-party data brokers or advertising networks.

This Privacy Policy explains how information is collected, cryptographically handled, and protected across the BOOBA digital passport platform and BNB Smart Chain integrations.

2. Information We Collect & Store

We strictly limit data collection to what is necessary for minting your digital passport and tracking community rewards:

• Public Wallet Addresses: When connecting with MetaMask, Trust Wallet, or Binance Web3, your public BNB Smart Chain address (e.g., 0x...) is stored to identify your passport, leaderboard rank, and token points.
• Pseudonymous Profiles: Your chosen community username, referral code, avatar, and assigned Passport ID (e.g., BB-123456).
• OAuth Credentials: When using Google Sign-In, we receive only your verified email and display name to create your account session.
• Quest Proof Submissions: URLs or image proof links submitted voluntarily for bounty reviews and community contest entries.

3. Cryptographic Zero-Knowledge Security

Security is engineered directly into the code architecture:

• 12-Word Seed Phrases: Generated on-demand via the BIP-39 standard and hashed client-side with SHA-256 before validation. Raw unencrypted recovery phrases are never transmitted across plaintext channels.
• Password Protection: Passwords are never stored in plaintext and are hashed before persistence in Supabase database tables.
• Non-Custodial Keys: We never have access to your Web3 private keys or wallet funds.

4. Third-Party Services & Infrastructure

The BOOBA platform interacts with trusted decentralized and cloud service providers:

• BNB Smart Chain RPC Nodes: For querying on-chain BEP-20 balances, wallet accounts, and network states.
• Supabase Database & Authentication: Secure database backend hosting community quest tables, user points, and real-time subscription channels.
• Google OAuth: Official single-sign-on identity provider with account picker authorization.

5. Browser Cookies & Local Storage

We use browser localStorage and sessionStorage solely for essential platform functionality:

• Maintaining your active passport login session across pages.
• Preserving referral codes during the sign-up flow.
• Caching your quest filter preferences and UI themes.

6. Data Rights & Deletion

You retain the right to disconnect your wallet at any time and request removal of off-chain database records by contacting our core team. Public blockchain transactions permanently recorded on the BNB Smart Chain ledger cannot be modified or deleted due to the immutable nature of decentralized networks.

7. Policy Updates & Inquiries

We may update this Privacy Policy as new protocol features, governance votes, and smart contracts are deployed. Reach out to our team in the official channels for any privacy inquiries: