DEPRIZE
Privacy Notice
Not available to U.S. persons or anyone located in the United States or another restricted jurisdiction.
Organized by MoonDAO
moondao.com/deprize
Version 1.1
Effective Date: September 10, 2026
Last Updated: September 11, 2026
Review status. Version 1.1 of this Notice was prepared on September 11, 2026 and is pending review by MoonDAO's counsel before DePrize opens to the public. MoonDAO may update this document before or at launch.
Summary. Everything you do on a blockchain is public and permanent. When you use DePrize we also process your IP address and approximate location (to enforce jurisdiction rules), your login details if you sign in through our authentication provider, analytics data (with your consent where required), and — if you are a competitor claiming a prize — identity, ownership, and tax information. We do not sell personal data. DePrize is not offered in the European Union, the European Economic Area, or the United Kingdom.
1. Scope and Relationship to the Website Privacy Policy
This DePrize Privacy Notice (this "Notice") describes how MoonDAO DAO LLC ("MoonDAO," "we," "us") collects, uses, discloses, and retains personal data in connection with DePrize (the "Service"), including the DePrize pages on moondao.com, the DePrize smart contracts, the prize competition, and related communications. It supplements the MoonDAO Website Privacy Policy (the "Privacy Policy"). Where this Notice is more specific than, or differs from, the Privacy Policy with respect to the Service, this Notice controls. Defined terms not defined here have the meanings in the DePrize Terms and Conditions (the "Terms") or the DePrize Official Prize Rules (the "Prize Rules").
MoonDAO DAO LLC is the controller of personal data described in this Notice. Contact details are in Section 12.
2. Personal Data We Collect
2.1 Data you provide.
- Authentication data. If you sign in through our authentication provider (Privy), the identifier you use — a wallet address, email address, phone number, or a Google, X/Twitter, Discord, or GitHub account identifier — and any embedded wallet address created for you.
- Acceptance and eligibility records. Your confirmation that you accept the Terms (including the version accepted); your separate attestations that you are not a U.S. resident and are not located in the United States, that you are not acting for a U.S.-organized or U.S.-headquartered entity, and that you are not an Insider and are not betting on behalf of anyone else; and the eligibility decision associated with that acceptance.
- Communications. Messages you send us (support, self-exclusion requests, misconduct reports, listing corrections), and any information they contain.
- Prize claim data (competitors only). If you claim a listing or a Prize under the Prize Rules: the legal name, registration details, and address of your organization; the names, roles, dates of birth, government identification, and contact details of authorized representatives and of beneficial owners of 25% or more; sanctions-screening results; IRS Forms W-9 or W-8 and taxpayer identification numbers; payout wallet addresses; and the contents of evidence submissions.
2.2 Data we collect automatically.
- Blockchain data. Your wallet address and every transaction it makes with the DePrize contracts — bets, cash-outs, redemptions, the amounts, the outcomes backed, and timestamps. This data is written to a public blockchain (currently Arbitrum One) by you, not by us, and is readable by anyone.
- Network and location data. Your IP address (stored only as a truncated cryptographic hash, never in the clear), the country and region derived from it (using request headers supplied by our hosting and CDN providers and, where needed, a third-party IP-geolocation service), a wallet-to-country association used to enforce eligibility, connection-type signals (for example whether a request appears to come from a VPN, proxy, Tor exit, hosting network, or location-preserving relay), device and browser type (user agent), operating system, language, referring URL, and the pages and actions you take on the Site.
- Analytics and cookies. With your consent where required, we use Google Analytics (via Google Tag with consent mode) and Vercel Analytics to understand how the Site is used. These tools use cookies, local storage, and similar technologies and collect pseudonymous identifiers, page views, events, and approximate location. A
cookie_consentvalue is stored in your browser to remember your choice. An access-control cookie is set when you enter a password-gated area of the Site. - Wallet-screening data. Results of screening your wallet address against sanctions and risk lists, where we perform such screening.
2.3 Data from third parties. Blockchain explorers and RPC providers (transaction data); IP-geolocation and VPN/proxy-detection services (location and connection type); sanctions, restricted-party, and blockchain-analytics providers (risk indicators); identity-verification providers (verification outcomes for competitors); public records and press (for competitor evidence review).
We do not collect precise geolocation, biometric data (other than any identity-document checks performed by a verification provider for competitors), or data about your health, religion, or political opinions.
3. How We Use Personal Data
| Purpose | Data used |
|---|---|
| Operate the Service: display markets, quotes, positions, and prize information; process your interactions with the Site | Blockchain data, authentication data, network data |
| Enforce eligibility: exclude U.S. Persons, Restricted Jurisdictions, sanctioned persons, VPN/proxy use, and Insiders; apply limits | Network and location data, acceptance records, wallet-screening data, authentication data |
| Comply with law: sanctions screening, record-keeping, responding to lawful requests, tax reporting and withholding on prizes | Prize claim data, wallet-screening data, blockchain data, acceptance records |
| Market integrity: detect manipulation, insider trading, and prohibited conduct; investigate reports | Blockchain data, network data, authentication data, communications |
| Administer the prize: verify competitors, determine and pay the Winner, publish results | Prize claim data, blockchain data |
| Keep records of your acceptance of the Terms and your representations, and defend legal claims | Acceptance records, network data, blockchain data |
| Improve the Site and measure usage (analytics) | Analytics data (with consent where required) |
| Communicate with you about the Service, including changes to the Terms, cancellation notices, and prize matters | Authentication data, communications |
| Security, fraud prevention, and debugging | Network data, authentication data, blockchain data |
We do not use personal data collected through the Service for advertising to you and we do not sell personal data.
4. Blockchain Data — Please Read
Blockchain transactions are public, permanent, and outside MoonDAO's control. When you bet, cash out, or redeem, your wallet address and the details of the transaction are recorded on Arbitrum One and can be viewed by anyone using a block explorer, forever. MoonDAO cannot edit, delete, or restrict access to this data, and rights of deletion or correction under privacy laws cannot be applied to it. If you sign in with an email or social account, MoonDAO can associate your wallet address with that account; third parties may be able to do the same using other information about you. Consider using a wallet dedicated to the Service if this concerns you.
5. Cookies and Analytics
- Consent. Where required by law, analytics tags fire only after you accept via the cookie banner. In jurisdictions that do not require prior consent, analytics may be enabled by default; you can change your choice at any time using the banner or your browser settings.
- Google Analytics collects pseudonymous usage data; Google's use of that data is described in Google's privacy policy. You can opt out with the Google Analytics browser add-on.
- Vercel Analytics collects aggregated, privacy-focused page-view and performance data.
- Strictly necessary storage — the access-control cookie and your cookie-consent preference — is used regardless of consent because the Site cannot function without it.
The Privacy Policy's statement that the Site does not use cookies or tracking technology does not apply to the Service; this Section 5 describes the technologies actually in use.
6. How We Share Personal Data
We share personal data only as described below.
- Service providers acting on our instructions: authentication (Privy); hosting, CDN, and edge networking (Vercel, Cloudflare); analytics (Google, Vercel); caching (Upstash); IP-geolocation and VPN detection providers; blockchain RPC and indexing providers (including thirdweb) and price-data providers (including Etherscan); sanctions, restricted-party, and blockchain-analytics providers; identity-verification and tax-form providers for competitors; email and support tooling.
- MoonDAO governance participants. Members of the Eligibility Review Committee and, where needed for a Senate determination, MoonDAO governance participants may receive competitor evidence submissions and claim information relevant to determining the Winner. Disclosures and recusals under the Prize Rules are published.
- Public disclosure. The Winner's legal name, the award, the Prize amount, and the payout address are published. Findings of misconduct under the Terms may be published.
- Legal and compliance. Regulators, law enforcement, courts, tax authorities, and our professional advisers where required or permitted by law, to enforce our terms, or to protect rights, safety, or property.
- Corporate events. A successor to the DePrize program, subject to this Notice.
Third parties you interact with independently — your wallet provider, the blockchain network, block explorers — process your data under their own policies.
7. International Transfers
MoonDAO DAO LLC is organized in the Republic of the Marshall Islands, operates through contributors in multiple countries, and uses service providers located primarily in the United States. Your personal data may be transferred to and processed in countries whose data-protection laws differ from those of your country. By using the Service you acknowledge these transfers. We do not offer the Service in the EU, EEA, or UK.
8. Retention
| Data | Retention |
|---|---|
| Blockchain data | Permanent (outside our control) |
| Acceptance, attestation, permit-issuance, eligibility, and wallet-country records; hashed IPs; user agent; wallet-screening results | For as long as you use the Service and at least five (5) years thereafter (MoonDAO currently retains these for seven (7) years), to evidence compliance and defend claims |
| Transient network and location logs not stored as acceptance or eligibility records | Up to 13 months, unless retained longer for an investigation or legal hold |
| Analytics data | Per the analytics provider's retention settings (Google Analytics: up to 14 months for user-level data) |
| Authentication data | For the life of your account and a reasonable period after deletion |
| Prize claim, verification, and tax data | Seven (7) years after the final Prize payment or the closing of the claim, or longer where required by tax or sanctions law |
| Communications | Up to 3 years after the matter is closed |
We retain data longer where required by law or for the establishment, exercise, or defense of legal claims.
9. Security
We use administrative, technical, and organizational measures appropriate to the sensitivity of the data, including encryption in transit, access controls, and restricted access to prize-claim data. No system is perfectly secure, and the security of your wallet and private keys is entirely your responsibility.
10. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, to opt out of analytics, and to not be discriminated against for exercising these rights. To exercise them, contact us under Section 12. We will verify your request (for example, by asking you to sign a message from the relevant wallet) and respond within the time required by applicable law. You may appeal a decision by replying to our response.
Limits. We cannot delete or alter blockchain data (Section 4). We may retain data we are legally required to keep, including acceptance and eligibility records and prize tax records, and data needed to enforce the Terms or defend claims.
Analytics opt-out. Use the cookie banner, your browser settings, or the Google Analytics opt-out add-on.
Self-exclusion. You may ask us to exclude your wallet from the Site (Terms, Section 11.5).
U.S. state residents. Although the Service is not offered to U.S. Persons, U.S. visitors to the Site may exercise the rights above. We do not sell personal data or share it for cross-context behavioral advertising, and we do not use or disclose sensitive personal information other than for the purposes permitted by applicable state law.
EU, EEA, and UK. The Service is not offered to persons in these jurisdictions, and we do not knowingly process their personal data. If you believe we hold your data in error, contact us and we will delete it where we are able to.
11. Children
The Service is available only to persons who are at least eighteen (18) years of age (or the age of majority in their jurisdiction, if greater). We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
12. Contact
Privacy questions and rights requests: info@moondao.com (subject line "DePrize Privacy"), or by mail to MoonDAO, 398B Capp St., San Francisco, CA 94110, USA.
13. Changes to This Notice
We may update this Notice from time to time. Material changes will be indicated by a new version number and Last Updated date and, where appropriate, by notice on the Site or through MoonDAO's official channels. The version in effect at the time of processing governs that processing.