Privacy Policy

1.The short version

• There is no analytics on this site — no Google Analytics, no advertising pixel, no session recording, no third-party tracker of any kind.
• The site sets no cookies. It stores one thing in your browser: the collectibles you save with the heart icon, kept in local storage on your own device. It is never sent to us, and clearing your browsing data clears it.
• We do not sell or share your personal information, and we never have.
• We do not ask you to connect a wallet to browse, and browsing does not require an account.
• Our hosting provider keeps ordinary server logs, which include IP addresses. That is the main thing collected when you simply read the site.

2.Who is responsible

DELIVEROSE LLC is responsible for the information described here and is the business you should contact about it:

3.What we collect

When you browse

Our hosting provider records standard technical information for every request: IP address, the page requested, the date and time, the referring page, and your browser’s user agent string. This is ordinary web-server logging. It is used to keep the site running and to investigate faults and abuse.

If you use the search or filtering on the collection pages, your search terms appear in the page address and therefore in those same server logs. Please do not type anything personal into a search box.

When you place an order through this site

Our own checkout is not yet operating, and until it is, no payment is taken and no order is completed here. If and when it opens, the checkout will ask for:

• an email address, used for that order — a receipt and any delivery confirmation. It does not create an account and is not added to a mailing list;
• a wallet address, which is the destination the collectible is sent to;
• a postal address and recipient name, only if an order includes a physical item to be delivered.

We do not handle card numbers. If we activate a payment provider, payment details will be entered with that provider and will not pass through or be stored by us.

What we do not collect

We do not run analytics or advertising technology. We do not operate a newsletter or a marketing list. We do not use error-monitoring or session-replay services. We do not ask you to connect a wallet in order to browse, and we do not read the contents of any wallet you may have. We never ask for, and will never ask for, a private key, seed phrase or recovery phrase.

4.Why we use it

• To run the site — serving pages, keeping them available, and diagnosing faults.
• To keep it safe — detecting and dealing with abuse, fraud and attacks.
• To fulfil an order, where you place one — sending the collectible to the wallet address you give, delivering any physical item, and contacting you about that order.
• To meet legal obligations — for example keeping records we are required to keep.

We do not use your information for advertising, profiling or automated decision-making, and we do not sell it.

5.Who else sees it

We keep the number of companies involved deliberately small. Today that is:

• Our hosting and infrastructure providers, which serve the site and hold the server logs and the database on our behalf.
• A payment provider, if and when our own checkout opens. It would receive the payment details you give it directly.

We may also disclose information if the law requires it, to protect our rights or somebody’s safety, or in connection with a sale or reorganisation of the business — in which case this policy would continue to apply to the information transferred.

Fonts are served from this site rather than from a font network, so reading a page does not make a request to a third party for them.

Services you reach from here

This site links to services we do not operate — OpenSea, the Deliverose shop, block explorers, and our Instagram account. When you follow one of those links, you are on their site and their privacy policy applies, not this one. We do not receive information back from them about what you do there, and following a link from here does not tell us that you did.

6.Blockchain data is public

Base is a public blockchain. Anything recorded on it — wallet addresses, transfers, ownership of a Genesis Roses collectible, prices paid — is visible to anybody, permanently, and cannot be deleted or corrected by us or by you.

A wallet address is a public identifier. It does not carry your name, but it can become linked to you if you publish it, or if a service that knows your identity also knows your address. Please keep that in mind when you choose which wallet to use.

This is a property of the technology rather than a choice we made, and no privacy law can require us to erase something from a public blockchain that we do not control.

7.How long we keep it

• Server logs are kept for a short period for security and diagnostics, and then discarded on our provider’s ordinary schedule.
• Order records, where an order exists, are kept for as long as needed to support the purchase and to meet accounting and tax obligations.
• Correspondence you send us is kept while the matter is open and for a reasonable period afterwards.

8.How we protect it

We maintain administrative, technical and physical safeguards appropriate to the size of our business and the sensitivity of the information involved — including encryption in transit, restricted access to systems that hold personal information, and keeping the number of systems that hold it as small as possible.

No system is perfectly secure, and we cannot guarantee that one never will be breached. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as applicable law requires.

9.Your choices and rights

Depending on where you live, you may have rights over the personal information a business holds about you — typically to know what it holds, to get a copy, to have it corrected, to have it deleted, and not to be discriminated against for exercising those rights. Several U.S. states now provide rights of this kind, as do the laws of many other countries.

Rather than work out whether a particular statute applies to us, we will honour these requests for anyone who asks, to the extent we are able:

• tell you what personal information we hold about you;
• give you a copy of it;
• correct it if it is wrong;
• delete it, unless we are required to keep it;
• stop using it for anything but our legal obligations.

To make a request, email support@deliverose.com and tell us what you would like. We may need to ask a question or two to be confident we are talking to the right person, and we will respond within the time applicable law allows. There is no charge for this.

Two limits are worth stating honestly. We cannot change or delete anything recorded on a public blockchain, because we do not control it. And we can only act on information we actually hold — if you have never contacted us or placed an order, we are unlikely to hold anything identifying you beyond short-lived server logs.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is therefore nothing for a “do not sell” request to switch off; if that ever changes, this policy will change first.

10.If you are outside the United States

We operate from New York, and information we hold is processed in the United States. If you use the site from elsewhere, your information will be transferred to and handled in a country whose privacy laws may differ from your own.

We are a small United States business and do not claim to operate a full compliance programme under the European General Data Protection Regulation, the UK GDPR or similar regimes. We do apply the substance of what those laws ask for — collect little, explain it plainly, keep it briefly, protect it, and honour requests — and if you are in the EEA, the UK or Switzerland and want your information accessed, corrected or deleted, write to us and we will do it.

11.Children

This site is not directed to children, and it is not intended for anybody under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, write to support@deliverose.com and we will delete it.

12.Changes to this policy

If what we collect changes — if we add analytics, for example, or open the checkout — we will update this page before or at the same time as the change, and update the effective date at the top. This policy is meant to describe the site as it is, not as it might be.

13.How to reach us

Email support@deliverose.com, or write to us at the address in section 2. The Contact page has the same details.

See also the Cookie Policy, which covers browser storage in more detail.