Privacy Policy
Last updated:
Who operates the site
HoodPumpkins is a Halloween NFT community project operated by an individual based in the United States. This policy covers hoodpumpkins.xyz applications, Candy Point and site security. For privacy questions or requests, contact the official X profile, @HoodPumpkins.
Information we use and why
We use your wallet address, normalized X handle, action declarations and submitted comment, quote or task links to save entries and review participation. Application numbers, assigned pumpkins, candy claims, reward history and moderation outcomes help operate the campaign and prevent duplicate or dishonest claims.
Sign-in processes an ownership-message signature for verification. Authentication records include wallet and network identifiers, ownership challenges, timestamps and session identifiers. We never request your recovery phrase or private key. Technical connection data, including IP information and security identifiers, is processed to deliver requests and limit abuse.
Essential cookies bind the browser to sign-in and security checks: the browser cookie lasts up to 24 hours and the sign-in cookie up to 12 hours. Local storage remembers sound/scare preferences; session storage prevents repeated reward celebrations. A separate cookie-notice dismissal flag has no automatic expiry and remains until site data is cleared. It is not an advertising identifier or blanket consent. The current site adds no advertising or analytics trackers.
What others can see and who helps
The public leaderboard shows rank, shortened wallets and candy totals. We still store full wallet identities; shortening them does not make them anonymous. Application evidence and internal review notes are not public leaderboard content. Submitted X posts may already be public on X.
Hosting and necessary wallet/network services process information to provide their services. When enabled and chosen, WalletConnect uses Reown relay/verification services and browser storage for pairing/session data. X, your chosen wallet and marketplaces you visit have separate privacy practices. Connecting a wallet does not publish your application on a blockchain.
Retention and your requests
We retain information as reasonably needed to run the campaign, review claims, resolve disputes and meet applicable security or legal requirements. Contact the official profile to request access, correction or deletion. Requests are reviewed manually; ownership may need confirmation through established wallet sign-in. Locked application fields do not eliminate applicable privacy rights.
Some records may need retention for legitimate security or legal reasons. Deleting site information cannot remove posts on X or public-blockchain records. Do not publish keys, login cookies, signatures or sensitive evidence; contact us to arrange a private way to handle your request.
Age and updates
This site is for adults aged 18 and over. Contact the project if a minor may have submitted information. Material changes will appear here with an updated date.