Privacy

1. Website data collection Zero

• Cookies — none. The site sets no first-party or third-party cookies.
• Analytics — none. No Google Analytics, Plausible, Mixpanel, or equivalent. No session recording, heatmaps, or fingerprinting.
• Advertising — none. No retargeting pixels, ad networks, or tracking tags.
• Server logs — the web server (Cloudflare) may log IP addresses and request metadata as part of its standard DDoS protection infrastructure. Sunima Labs does not access, export, or analyse these logs beyond what Cloudflare's own infrastructure policy covers.

2. Blockchain interactions Public by design

Sunima is a blockchain protocol. When you interact with a deployed Sunima smart contract — depositing, withdrawing, or transferring — the following is recorded on-chain and is publicly inspectable:

• Your wallet address (public key)
• Transaction hash, block number, and timestamp
• Gas used and transaction fees
• The encrypted balance delta (the ciphertext — amount is hidden; the fact that a transaction occurred is not)

This is a fundamental property of public blockchains — the Arbitrum Sepolia testnet (where current contracts are deployed) and the sovereign Sunima mainnet (planned). Sunima's encryption hides the amount of a transaction, not the existence of the transaction itself. Full transaction-level disclosure is intended to be possible only via a court-order process routed through the protocol's threshold cryptographic gateway, as described in the whitepaper. This disclosure mechanism is still under development and has not yet been exercised on a live court order; the underlying threshold signing is at a proof-of-concept stage.

Sunima Labs does not control, store, or have privileged access to on-chain data beyond what any public observer can read from the blockchain.

3. Waitlist and contact forms If applicable

If Sunima opens a validator waitlist, builder grants programme, or newsletter — this policy will be updated before any such form goes live. At that point:

• Only the data explicitly requested (e.g. email address) will be collected.
• Data will not be sold, shared with third parties for marketing, or used for any purpose other than the specific programme you signed up for.
• EU/UK residents retain the rights guaranteed by GDPR and UK GDPR: access, rectification, erasure, and portability. To exercise any of these rights, contact [email protected].
• Data will be deleted within 30 days of a programme closing or upon written request.

As of the effective date above, no such forms are live and no such data is collected.

4. Third-party services

• Cloudflare — CDN and DDoS protection. Cloudflare's privacy policy governs its own data handling: cloudflare.com/privacypolicy.
• Arbiscan / block explorers — if you click a transaction link to a block explorer, that site's own privacy policy applies.
• No other third-party services are embedded in or loaded by the Sunima website.

5. Children

The Sunima protocol and website are not directed at persons under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has submitted personal data, contact [email protected] and we will delete it promptly.

6. Changes to this policy

If this policy changes materially — for example when a waitlist or grant application opens — the effective date at the top of this page will be updated. For significant changes, we will post a notice on the Sunima homepage. Continued use of the site after a policy update constitutes acceptance of the revised terms.

7. Contact

Questions, data requests, or concerns: [email protected]

Sunima Labs operates in stealth. We do not publish a registered address at this stage of development. Legal correspondence will be acknowledged within 30 days.