Droves Waitlist Privacy Policy
Version 0.5
Last updated: 26 Sep 2026
This policy explains what personal information we collect when you visit or join the Droves waitlist at droves.fun (the "Waitlist"), why we collect it, who we share it with, how long we keep it, and the choices you have.
Who we are. Droves is operated by DIG MIAMI, LLC, a Florida limited liability company (Florida document no. L22000122480), 125 South Clark Street, Suite 1175, Chicago, IL 60603 ("Droves", "we", "us"). Privacy questions and requests: privacy@droves.fun.
The short version
- To join, you give us an email address, a Solana wallet address, or both. That's all we ask you for.
- If you arrived through someone's share link, your browser keeps that link's referral code for up to 30 days. If you join, we record which code brought you. We do this so we know how people hear about Droves. It doesn't earn anyone anything and doesn't change anyone's number.
- We use your information to run the Waitlist, give you your number in the founding queue, stop abuse, tell you when Droves opens, and send you product updates and news. Every non-service email has an unsubscribe link. Unsubscribing doesn't remove your place in the queue.
- We don't sell your personal information or share it for targeted advertising.
- You can ask us to see or delete your information at any time.
1. What we collect
1.1 Information you give us
| What | When | Notes |
|---|---|---|
| Email address | If you join with email, or add one after joining with a wallet | Required for the email route. |
| Solana wallet address (public key) and a signed sign-in message | If you join with a wallet | You sign a message to prove the wallet is yours. It isn't a transaction. We never receive your private key or seed phrase. We check the signature, then keep the wallet address. |
| Messages you send us | If you email us | For example, privacy requests. |
1.2 Referral information We run referral tracking from the first day of the Waitlist. It works in the background: there are no referral counts, badges or rankings on the page, in emails or on share cards. Here's exactly what happens:
| Step | What is captured | Where it's kept | How long |
|---|---|---|---|
| When you join | We create your own random 8-character referral code for your share link (droves.fun/c/<code>). It isn't based on your email, wallet or number. | Our waitlist database | As long as your waitlist entry (see §5) |
When you open a share link (droves.fun/c/<code> or a link containing ?r=<code>) | Your browser saves, on your device only: the referral code, the time you arrived, and whether it came from a share link or a link parameter. Only the first code counts: a later link doesn't replace it while it's still valid. | Your browser's local storage (key dr_ref). It isn't a cookie, and it isn't sent to us when you just look at the page. | 30 days from when you first arrived. It's deleted after 30 days, and as soon as you join. |
| When you join, within 30 days | The stored code and its source are sent with your sign-up. If the code is valid, and it isn't your own (or a linked email or wallet of yours), we store a referral record: whose code brought you, which code, the source, the time, a salted hash of your IP address range (not your IP address itself), and automated fraud flags (for example "same network as the referrer", "many sign-ups at once", "disposable email"). | Our waitlist database (admin access only) | See §5 |
| If the code is unknown, expired, or your own, we store nothing about it. | — | — |
What referral information is used for: understanding how people find Droves (for example how many sign-ups came through shared links), and spotting fake or automated sign-ups. It isn't used to give anyone a reward, priority or a different number. It's only visible to authorised Droves staff. Nobody else can see who referred whom: not the person who shared the link, not the person who joined, and not the public.
If you don't want to be tracked:
- open droves.fun directly rather than through a share link; or
- clear your browser's site data for droves.fun before joining.
You can also ask us to remove a referral record at any time (§7).
1.3 Information collected automatically
- Technical and security data: your IP address, browser and device type, and the date and time of your requests. We and our hosting provider use this to deliver the site, apply rate limits and prevent abuse.
- Usage events: simple first-party events on our own server. They may include campaign (UTM) tags from the page address. They do not include the referral code. That code is sent only with the join request (§1.2). The events are:
- page views;
- whether you started or finished joining, and by which method;
- whether a referral code was present;
- share clicks;
- desktop or mobile;
- a rough bucket for your queue number (for example "1,000–10,000").
We don't put your email or wallet address into these events, and we don't send them to an analytics provider.
- Email delivery data: our email provider, Resend, records delivery information for the emails we send you (for example delivered, bounced, or marked as spam) and your unsubscribes. Open and click tracking is off. We don't receive open or click data.
1.4 Cookies and local storage We don't use advertising cookies or tracking pixels, and we don't track you across other websites. Here is everything we store in your browser:
| Name | Type | Why | How long |
|---|---|---|---|
dr_ref | Local storage (first-party) | Remembers the first referral code you arrived with, so it can be recorded if you join (§1.2) | 30 days, and deleted as soon as you join |
| Sign-in nonce | Server-side only (not a cookie) | One-time code for wallet sign-in, stored in our database with the wallet address it was issued for | Deleted when used (codes expire after 5 minutes); unused or expired codes are deleted within 24 hours |
| Analytics | None | We don't use an analytics provider | — |
Local storage stays on your device until it expires or you clear it. You can clear it in your browser settings ("site data" or "cookies and site data" for droves.fun). Clearing it before you join means no referral is recorded. Our fonts are hosted by us, so loading the page doesn't send your data to a font service.
1.5 What we don't collect We don't ask for your name, phone number, postal address, date of birth, government ID, X or social handle, or payment details. We don't request any blockchain transaction. We don't use fingerprinting.
Public information about wallets. Wallet addresses and their transaction history are public on the Solana blockchain. We don't currently analyse the on-chain history of waitlist wallets. If you give us both an email and a wallet, we'll know they belong to the same person. Please keep that in mind if you use a wallet you'd rather keep separate from your email.
2. How we use your information
| Purpose | Information used |
|---|---|
| Add you to the Waitlist, assign your number in the founding queue, and avoid duplicates | Email and/or wallet address, sign-up records |
| Prove you own a wallet | Wallet address, signed message, one-time sign-in code |
| Send service emails: confirming your sign-up, resending your number, replying to requests | Email address |
| Send launch news (when Droves opens) and product updates and news about Droves, until you unsubscribe | Email address, unsubscribe status, email delivery data |
| Give you a share link and share card | Your referral code, your number |
| Understand how people find Droves (referral attribution) | Referral code, source and time, referral record |
| Stop spam, fraud and abuse (including self-referrals and referral farming), and keep the site secure | IP address, salted IP-range hash, device and browser data, rate-limit logs, referral fraud flags |
| Understand how the page is used and improve it | First-party events on our server (no email or wallet address). Not sent to an analytics provider. |
| Show the total number of sign-ups, if we choose to | A count of confirmed sign-ups only (no personal details). It's off unless we switch it on, and it's always the real number. |
| Comply with the law, including sanctions law, and enforce our Terms | Any of the above, as needed |
We don't use referral fraud flags or any other information to make decisions about you that have legal or similarly significant effects. The flags help us review suspicious sign-ups, and we may remove sign-ups that break our Terms.
Emails and unsubscribing. When you join with an email address, you agree to get launch news and product updates and news from Droves.
- Every email that isn't a service email has an unsubscribe link. We act on unsubscribes promptly, and within 10 business days at the latest.
- Unsubscribing doesn't delete your waitlist entry or your place in the founding queue. To delete them, ask us (§7).
- After you unsubscribe, we'll only send you service emails (for example a reply to a request). We keep a record of your unsubscribe so that we honour it.
- Our emails come from a droves.fun address, identify Droves, and include our postal address.
3. What others can see
- Share cards and links. Your share card shows "#n in the founding queue" and your share link contains your referral code. Anyone with the link can see the number shown on the card. It doesn't show your email, your wallet address, or who joined through your link.
- Referral data is never public, is not shown on the share-link page, and isn't available through any public interface.
- On screen. If you join with an email that's already on the list, we don't show that email's number on screen. We send it to the email address instead.
- Sharing on X. If you press "Share on X", you go to X, and X's own privacy policy applies.
4. Who we share information with
We share personal information only with service providers who help us run the Waitlist. They may use it only to provide their services to us. We don't give the waitlist, or referral data, to partners, projects, callers or advertisers.
| Provider | Role | Data |
|---|---|---|
| Vercel Inc. | Website hosting and delivery | IP address, request logs |
| Neon | Stores the waitlist and referral records | Email, wallet address, number, referral records |
| Resend | Email delivery: service emails, launch news and product updates | Email address, email content, delivery and unsubscribe data. Open and click tracking is off. |
| Namecheap, Inc. | Email forwarding: emails you send to our droves.fun addresses (for example privacy@droves.fun) pass through Namecheap's forwarding service to our email inboxes | Your email address, the message and any attachments |
| Spacemail (Spaceship, Inc.) | Email hosting: hosts an inbox that receives emails you send to some of our droves.fun addresses (for example haydn@droves.fun) | Your email address, the message and any attachments |
| Apple Inc. (iCloud Mail) | Email hosting: hosts the inbox that receives emails you send to privacy@droves.fun | Your email address, the message and any attachments |
We may also disclose information: (a) if the law requires it; (b) to protect the rights, safety or property of users, us or others, including to prevent fraud or sanctions breaches; (c) to professional advisers under confidentiality; and (d) to an affiliate or successor entity that takes over operating Droves (for example a company formed to run the Droves platform), or to a buyer or successor if our business, or part of it, is reorganised, merged, financed or sold. The new operator must handle your information in line with this policy, and we'll tell you about the change by email or on this page.
5. How long we keep it
| Data | Kept for |
|---|---|
| Waitlist entry (email and/or wallet, number, your own referral code) | Until Droves launches and we've sent the launch email, plus 12 months, or until you ask us to delete it, whichever is sooner. If Droves doesn't launch, we delete it within 12 months of closing the Waitlist. |
| Referral record (who referred whom, source, time, IP-range hash, fraud flags) | The same period as the waitlist entry of the person who joined. The IP-range hash is deleted after 90 days. When either person's entry is deleted, we delete or de-identify the parts of the record that relate to them. We may keep a count with no link to any person. |
dr_ref item on your device | 30 days, until you join, or until you clear it, whichever comes first |
| Unconfirmed email sign-ups | Deleted after 30 days if the email isn't confirmed. Numbers are never reused. |
| Unsubscribe / do-not-contact records (including in Resend's suppression list) | As long as needed to honour your choice, even after your entry is deleted. We keep only the minimum needed (for example a hashed email). |
| Security, rate-limit and hosting logs | Up to 30 days, unless needed longer to investigate abuse |
| Usage events (first-party) | We don't currently store them. Each event is checked and then discarded, and referral-check results are held only briefly in server memory. If we start storing them, we'll keep them for no more than 24 months and update this policy first. We don't use a third-party analytics provider. |
| Emails you send us, including privacy requests | Up to 24 months after the request is closed |
6. Selling and sharing
We don't sell personal information. We don't share it for cross-context behavioural advertising (targeted advertising). We haven't done either in the past 12 months. Referral data is used only by us, for the purposes in §2.
Because we don't sell or share, there's no "Do Not Sell or Share" link. We treat Global Privacy Control signals as a request to opt out of any selling or sharing. We don't respond to "Do Not Track" signals in any other specific way, because we don't track you across other sites.
7. Your choices and rights
Everyone. Wherever you live, you can ask us to:
- access the personal information we hold about you. This includes whether a referral record exists for your sign-up, and the referral code that brought you.
- correct it;
- delete it, including referral records, and remove you from the Waitlist; and
- stop launch and product emails, using the unsubscribe link in any such email or by writing to us. This doesn't delete your entry.
Email privacy@droves.fun from the address you joined with. If you joined with a wallet only, tell us the wallet address. We may ask you to sign a message with that wallet to prove it's yours. We'll never ask for your private key or seed phrase. We'll reply within 45 days. To stop referral tracking on your device, clear your browser's site data for droves.fun (§1.4).
U.S. state privacy rights. Depending on where you live (for example California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida and other states with consumer privacy laws), you may have rights to:
- know or access the categories and specific pieces of personal information we hold, the sources, the purposes and the recipients;
- delete it;
- correct it;
- get a copy in a portable format;
- opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. We don't do these things;
- limit the use of sensitive personal information. We don't collect it for these purposes; and
- not be discriminated against for using your rights.
You can use an authorised agent. We may ask for proof of authority and verify your identity. Where state law provides it, you can appeal our decision by writing to privacy@droves.fun with "Appeal" in the subject line. If you're unhappy with the outcome of an appeal, you can contact your state Attorney General.
California: notice at collection and categories. In the past 12 months, we have collected:
| Category | Examples | Source | Purpose (see §2) | Disclosed to (for business purposes) |
|---|---|---|---|---|
| Identifiers | Email address, wallet address, IP address, your referral code, the referral code you arrived with | You; your device | Waitlist, emails, referral attribution, security | Hosting, database, email delivery, email forwarding and email hosting providers |
| Internet or other electronic network activity | Page and button events, device type, UTM tags, logs, when you arrived through a share link | Your device | Site operation, referral attribution, security | Hosting provider |
| Inferences | Automated fraud flags on referral records (e.g. "same network"), used only for abuse review | Derived by us | Security, fraud prevention | Database provider |
| Sensitive personal information | None collected | — | — | — |
We keep each category for the periods in §5. We don't sell or share any category.
Nevada. We don't sell covered information as defined by Nevada law. You can still send an opt-out request to privacy@droves.fun.
8. Children
The Waitlist is only for people aged 18 or over. It isn't directed to children. We don't knowingly collect personal information from anyone under 13, or let anyone under 18 join. If you think a child has given us information, contact privacy@droves.fun and we'll delete it.
9. Security
We use reasonable safeguards for a service of this kind:
- encrypted connections (HTTPS);
- restricted, admin-only access to the waitlist and referral data;
- salted hashing of IP ranges in referral records; and
- keeping email and wallet addresses out of our usage events.
Hashing reduces risk but doesn't make data anonymous. No system is completely secure. We will never ask for your seed phrase or private key, or ask you to send funds, to join the Waitlist.
10. Where we process information
We're a U.S. company. We and our providers process information in the United States, and may process it in other countries.
11. Changes to this policy
If we change this policy, we'll update the "Last updated" date. If a change is material, for example a new use of referral data (such as rewards) or any selling or sharing, we'll tell you before the change applies and, where required, ask for your consent. We won't apply a new use of referral data to records collected before we've told you about it, unless the law allows it.
12. Contact
DIG MIAMI, LLC (operating Droves) · 125 South Clark Street, Suite 1175, Chicago, IL 60603 · privacy@droves.fun