Privacy and GDPR policy

The operator of Mycelium is the controller for the limited personal data described here under the EU General Data Protection Regulation. Privacy requests can be made through the official Discord or X channels linked on the homepage.

We aim to answer a valid request within one month. We may need a wallet signature to confirm that the requester controls the address concerned.

• Wallet address, message-signature challenge, access session, Mnode ownership count, and Mnode number used as the member identity.
• Grove creation records, selected parent Mnode numbers, generated artwork, creation times, rooting consent and the OG token chosen for rooting.
• Game entries, scores, standings, winning Mnode numbers, prizes, claim status and any details you choose to share in a Discord claim ticket.
• Public blockchain data, including token ownership, transfers, contract settings and transaction references where relevant.
• Basic security and diagnostic logs, such as request time, error details, browser type, and network address where the hosting service records it.

We do not ask for your private key or seed phrase. We do not need a legal name, postal address, identity document, or password for wallet access. We do not sell personal data or build advertising profiles across unrelated websites.

A wallet address can still identify or help identify a person. We treat it as personal data even when it uses a pseudonym.

• Contract necessity: verify Mnode access, save requested Grove artwork and rooting records, run games and maintain prize records.
• Legitimate interests: prevent abuse, protect the service, maintain accurate token and contest records, and resolve disputes.
• Consent: optional profile details, browser permissions, and other optional features. Consent can be withdrawn without affecting earlier lawful processing.
• Legal obligation: retain or disclose limited records when applicable law validly requires it.

Public pages can show Mnode artwork and token history, Evolved artwork, parent Mnode numbers, rooting dates, contest standings, winning Mnode numbers and prizes. Some winner displays include the winning wallet to support prize claims. Grove creator wallets are kept private on the public gallery.

Blockchain transactions and marketplace records already exist outside Mycelium. Removing a Mycelium record cannot remove the original transaction, marketplace record or third-party copy.

Hosting, database, security, artwork storage, image generation, blockchain node and infrastructure providers process data as needed to operate the service. Ownership and rarity views may query supported chain or marketplace services. When you open X, Discord, OpenSea or another external link, that service applies its own privacy policy.

Where a provider processes personal data outside the European Economic Area, an appropriate transfer safeguard should apply, such as an adequacy decision or standard contractual clauses.

Strictly necessary browser storage keeps the wallet session, security state, interface preferences, and temporary acknowledgement choices working. The site does not use advertising cookies. Clearing browser storage signs you out and removes local preferences.

Access sessions are kept as long as needed for authentication. Grove artwork, rooting history, contest results, prize records and moderation history remain as needed to provide the service, preserve token history, prevent duplicate claims or meet legal obligations.

Rejected or expired operational records should be deleted or anonymised when they are no longer needed. Security logs are kept for a limited operational period. Public blockchain data remains on the chain independently of Mycelium.

• Access the data linked to your wallet and receive portable data where applicable.
• Correct inaccurate data.
• Request deletion, subject to legal duties, fraud prevention, dispute records, and data already made permanent on a public blockchain.
• Restrict or object to processing based on legitimate interests.
• Withdraw consent for optional processing.
• Complain to the data protection authority in your country.

Access controls and row-level rules limit database records to the people and roles that need them. No online service is risk free, and we cannot promise absolute security. The service is not intended for anyone under 18.

This policy can change as the product or its providers change. Material updates will be dated here. This policy describes the service and is not a legal opinion about every jurisdiction.