> For the complete documentation index, see [llms.txt](https://docs.cadinu.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cadinu.io/privacy-policy.md).

# Privacy Policy

What CADINU collects, why, where it lives and what you can ask us to do with it. Plain words, one page per product.

{% hint style="info" %}
**Version 2.0 · Effective 17 September 2026.** This policy replaces the earlier stub. It is published by **CADINU Inc.**, a company registered in Canada, and applies to every CADINU service listed below.
{% endhint %}

## At a glance

| Service                                                                                  | What we get from you                                                                                   | Trackers / ads                                          |
| ---------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ | ------------------------------------------------------- |
| [CADINU Games](/privacy-policy/cadinu-games.md) (Telegram Mini App and bot)              | Your Telegram profile (id, name, username, photo, language), your gameplay, referrals, Stars purchases | Rewarded video ads (Adsgram). No analytics cookies.     |
| [apps.cadinu.io](/privacy-policy/cadinu-apps.md) (swap, farms, staking, locks, lottery)  | Your wallet address and on-chain activity. Optional profile and competition sign-ups.                  | Google Tag Manager, Sentry. Wallet connectors.          |
| [Websites and forms](/privacy-policy/websites-and-forms.md) (cadinu.io, docs, cadinu.ca) | Nothing on cadinu.io. What you type into a cadinu.ca form.                                             | None on cadinu.io and cadinu.ca. GitBook's own on docs. |
| [LinkedIn lead generation](/privacy-policy/linkedin-lead-generation.md)                  | Name, email and what you wrote in the form                                                             | None                                                    |

## Who we are

**CADINU Inc.** builds and runs the CADINU products and is the controller of the personal data described here. **CADINU DAO** is the community governance body; it does not process your personal data. The split is explained in [Legal Structure of CADINU](/legal-structure-of-cadinu.md).

## Our five rules

1. **We collect what the product needs and nothing else.** Every product page lists the exact fields.
2. **We never sell your data** and we never hand it to data brokers.
3. **We do not show your Telegram id or handle to other players.** Public identities are a separate player number.
4. **Third parties are named.** If a partner receives data, its name is on the product page.
5. **You can ask for a copy, a correction or deletion** at any time. See *Your rights* below.

## What we use data for

| Purpose                                                                 | Legal basis (GDPR / PIPEDA)                      |
| ----------------------------------------------------------------------- | ------------------------------------------------ |
| Running the service you asked for: sign-in, gameplay, balances, payouts | Contract with you                                |
| Fair play, anti-cheat, anti-fraud and security                          | Our legitimate interest in a fair, safe service  |
| Reward-for-ads and referral rewards                                     | Contract with you                                |
| Answering support requests                                              | Contract with you                                |
| Marketing emails or messages                                            | Your consent, which you can withdraw at any time |
| Tax, accounting and legal records                                       | Legal obligation                                 |

## Where your data lives

Our own servers are in the **European Union**. All traffic passes through **Cloudflare**, which sees connection data such as your IP address in order to protect the site. Telegram, ad networks, blockchain nodes and payment providers process data in their own regions under their own policies. Because our company is Canadian and our servers are in the EU, your data is not stored only in your own country. We use hosting providers that are certified for EU data-protection standards.

## How long we keep it

| Data                                               | Kept for                                                                     |
| -------------------------------------------------- | ---------------------------------------------------------------------------- |
| Account and game state                             | While your account exists, then deleted within 30 days of a deletion request |
| Gameplay and anti-cheat records                    | Up to 12 months, then deleted or anonymised                                  |
| IP address and browser string on rewarded ad views | Up to 12 months, for fraud disputes with the ad network                      |
| Web server logs (IP, URL, time)                    | Up to 30 days                                                                |
| Payment records (Telegram Stars, Stripe)           | 7 years, as tax law requires                                                 |
| Database backups (kept on our own server)          | 30 days, rolling                                                             |
| Form submissions and applications on cadinu.ca     | Until the request is closed, plus the period tax and business law requires   |

## Your rights

Wherever you live you can ask us to:

* **see** the personal data we hold about you (a copy in a readable file),
* **correct** it,
* **delete** it, unless the law requires us to keep a record (for example a payment),
* **withdraw consent** to marketing at any time,
* **object** to a use based on our legitimate interest.

People in the EEA, the UK, Switzerland and Canada also have the right to complain to their data-protection authority. We would rather hear from you first.

{% hint style="success" %}
**To make a request**, message our support handle on Telegram, [**@cadinulover**](https://t.me/cadinulover), from the account the data belongs to (see [Contact Us](/contact-us.md)). We answer within **30 days**. We may ask you to prove you own the account before we release or delete anything.
{% endhint %}

{% hint style="danger" %}
We **never** start a private conversation with you and we **never** ask for your seed phrase, private key, password or payment card. Anyone who does is not CADINU.
{% endhint %}

## Children

CADINU services are not directed to children under 13. Features that involve money, tokens or wallets are for adults, 18 and over. If you believe a child has given us personal data, contact us and we will delete it.

## Security

Data travels over HTTPS only. Access to production systems is limited to named staff with their own sign-in and, where the panel supports it, a second factor. Staff actions in the admin panels are logged. Backups stay on our own servers for 30 days. No system is perfectly secure; if a breach ever affects your data we will tell you and, where required, the authorities, without undue delay.

## Changes to this policy

We update this page when a product changes what it collects. The version and effective date at the top change each time, and material changes are announced in the [official CADINU channels](/community/cadinu-official-socials.md).