Privacy Policy

This Privacy Policy explains how Cracker Limited Liability Co. ("Cracker", "we", "us" or "our") collects, uses, shares and protects information in connection with the Cracker Wallet mobile applications, browser extensions and related websites, including but not limited to cracker.global, crackerwallet.fun and associated sub-domains (together, the "Services").

Cracker Limited Liability Co. is a Wyoming limited liability company with its registered office at 30 N Gould St, Ste N, Sheridan, WY 82801, United States.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to information we collect when you:

• install, access or use the Cracker Wallet mobile app or browser extension;
• visit our websites;
• contact us by email or other channels; or
• otherwise interact with us in connection with the wallet.

It does not apply to any third-party websites, services or applications that are not owned or controlled by Cracker, including blockchain networks, decentralised applications, exchanges or KYC providers you may choose to use.

a) Information you provide directly

When you use the Services or communicate with us, we may collect:

• Contact information such as your name and email address.
• Account information such as username or other identifiers you choose.
• Support information such as messages, attachments and other content you send to us.
• KYC information (if and when implemented) such as identity documents, date of birth, address, photographs or video, and any other information required by our KYC provider to verify your identity.

b) Information collected automatically

When you access or use the Services, we may automatically collect:

• Device and usage data, including IP address, device identifiers, operating system, app version, browser type, language settings and time zone.
• Log information, including access times, pages viewed, in-app actions and error reports.
• Approximate location information derived from your IP address, used primarily for security and sanctions-related controls.

We do not collect or store your private keys or seed phrases on our servers. Those remain on your device under your control, except where you explicitly choose to use an encrypted backup option that keeps decryption keys solely in your possession.

c) Blockchain data

Blockchains are public, distributed ledgers. Transactions you submit using the Cracker Wallet will be recorded on the relevant blockchain and may be publicly accessible. This information may include wallet addresses, transaction hashes and amounts. Although this data is public, we may associate one or more wallet addresses with your account or device for security and support purposes.

We use the information we collect for the following purposes:

• To provide, operate and maintain the Services, including enabling you to create and manage wallets, view balances and submit transactions.
• To secure the Services, including monitoring for fraud, abuse and suspicious activity and enforcing our Terms and Conditions.
• To comply with legal and regulatory obligations, including sanctions screening and, if implemented, KYC/AML checks.
• To communicate with you about the Services, including sending administrative messages, updates, security alerts and responses to your enquiries.
• To improve and develop the Services, including performing analytics, debugging and quality assurance.
• To protect our rights, property and the safety of users and the public.

Where applicable data protection laws require a legal basis, we rely on:

• Performance of a contract, to provide the Services and fulfil our obligations under the Terms and Conditions.
• Our legitimate interests, including operating, securing and improving the Services, preventing abuse and responding to your queries.
• Compliance with legal obligations, including anti-money laundering and sanctions regulations.
• Your consent, where required by law, for specific uses such as certain cookies, marketing communications or optional features.

We may share information with:

• Service providers who assist us with infrastructure, hosting, analytics, email delivery, customer support, KYC/AML checks and similar functions. This includes cloud providers such as Amazon Web Services, as described in your technical documentation.
• Professional advisers such as lawyers, auditors and consultants where reasonably necessary.
• Law enforcement, regulators or courts where we are legally required to do so, or where we consider it necessary to protect our rights or the rights of others.
• Another entity in connection with a merger, acquisition, reorganisation or sale of assets, subject to appropriate safeguards.

We do not sell personal information.

The information we collect may be stored and processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction.

Where required by law, we will implement appropriate safeguards for international transfers, such as contractual protections and technical measures designed to protect your information.

We retain personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including providing the Services, complying with legal obligations, resolving disputes and enforcing our agreements.

Retention periods vary depending on the type of data and the context in which it was collected. When information is no longer needed, we will delete or anonymise it, subject to any legal retention requirements.

We use appropriate technical and organisational measures to protect personal information, including encryption in transit and at rest, access controls, logging and regular security review of our systems.

No method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your devices and your seed phrases, private keys and passwords.

Depending on your jurisdiction, you may have rights in relation to your personal information, including the right to:

• access a copy of your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your information, subject to legal obligations to retain certain data;
• object to or restrict certain processing; and
• obtain a copy of information you have provided to us in a portable format.

To exercise these rights, you may contact us using the contact details below. We may request additional information to verify your identity before responding.

The Services are not directed to, and may not be used by, anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. In some cases we may provide additional notice, such as by email or in-app notification.

If you have any questions about this Privacy Policy or our data practices, you may contact us at:

Cracker Limited Liability Co. — 30 N Gould St, Ste N, Sheridan, WY 82801, United States.

Email: privacy@cracker.global