Back

Droves Waitlist Privacy Policy

Version 0.5

Last updated: 26 Sep 2026

This policy explains what personal information we collect when you visit or join the Droves waitlist at droves.fun (the "Waitlist"), why we collect it, who we share it with, how long we keep it, and the choices you have.

Who we are. Droves is operated by DIG MIAMI, LLC, a Florida limited liability company (Florida document no. L22000122480), 125 South Clark Street, Suite 1175, Chicago, IL 60603 ("Droves", "we", "us"). Privacy questions and requests: privacy@droves.fun.

The short version

  • To join, you give us an email address, a Solana wallet address, or both. That's all we ask you for.
  • If you arrived through someone's share link, your browser keeps that link's referral code for up to 30 days. If you join, we record which code brought you. We do this so we know how people hear about Droves. It doesn't earn anyone anything and doesn't change anyone's number.
  • We use your information to run the Waitlist, give you your number in the founding queue, stop abuse, tell you when Droves opens, and send you product updates and news. Every non-service email has an unsubscribe link. Unsubscribing doesn't remove your place in the queue.
  • We don't sell your personal information or share it for targeted advertising.
  • You can ask us to see or delete your information at any time.

1. What we collect

1.1 Information you give us

WhatWhenNotes
Email addressIf you join with email, or add one after joining with a walletRequired for the email route.
Solana wallet address (public key) and a signed sign-in messageIf you join with a walletYou sign a message to prove the wallet is yours. It isn't a transaction. We never receive your private key or seed phrase. We check the signature, then keep the wallet address.
Messages you send usIf you email usFor example, privacy requests.

1.2 Referral information We run referral tracking from the first day of the Waitlist. It works in the background: there are no referral counts, badges or rankings on the page, in emails or on share cards. Here's exactly what happens:

StepWhat is capturedWhere it's keptHow long
When you joinWe create your own random 8-character referral code for your share link (droves.fun/c/<code>). It isn't based on your email, wallet or number.Our waitlist databaseAs long as your waitlist entry (see §5)
When you open a share link (droves.fun/c/<code> or a link containing ?r=<code>)Your browser saves, on your device only: the referral code, the time you arrived, and whether it came from a share link or a link parameter. Only the first code counts: a later link doesn't replace it while it's still valid.Your browser's local storage (key dr_ref). It isn't a cookie, and it isn't sent to us when you just look at the page.30 days from when you first arrived. It's deleted after 30 days, and as soon as you join.
When you join, within 30 daysThe stored code and its source are sent with your sign-up. If the code is valid, and it isn't your own (or a linked email or wallet of yours), we store a referral record: whose code brought you, which code, the source, the time, a salted hash of your IP address range (not your IP address itself), and automated fraud flags (for example "same network as the referrer", "many sign-ups at once", "disposable email").Our waitlist database (admin access only)See §5
If the code is unknown, expired, or your own, we store nothing about it.——

What referral information is used for: understanding how people find Droves (for example how many sign-ups came through shared links), and spotting fake or automated sign-ups. It isn't used to give anyone a reward, priority or a different number. It's only visible to authorised Droves staff. Nobody else can see who referred whom: not the person who shared the link, not the person who joined, and not the public.

If you don't want to be tracked:

  • open droves.fun directly rather than through a share link; or
  • clear your browser's site data for droves.fun before joining.

You can also ask us to remove a referral record at any time (§7).

1.3 Information collected automatically

  • Technical and security data: your IP address, browser and device type, and the date and time of your requests. We and our hosting provider use this to deliver the site, apply rate limits and prevent abuse.
  • Usage events: simple first-party events on our own server. They may include campaign (UTM) tags from the page address. They do not include the referral code. That code is sent only with the join request (§1.2). The events are:
  • page views;
  • whether you started or finished joining, and by which method;
  • whether a referral code was present;
  • share clicks;
  • desktop or mobile;
  • a rough bucket for your queue number (for example "1,000–10,000").

We don't put your email or wallet address into these events, and we don't send them to an analytics provider.

  • Email delivery data: our email provider, Resend, records delivery information for the emails we send you (for example delivered, bounced, or marked as spam) and your unsubscribes. Open and click tracking is off. We don't receive open or click data.

1.4 Cookies and local storage We don't use advertising cookies or tracking pixels, and we don't track you across other websites. Here is everything we store in your browser:

NameTypeWhyHow long
dr_refLocal storage (first-party)Remembers the first referral code you arrived with, so it can be recorded if you join (§1.2)30 days, and deleted as soon as you join
Sign-in nonceServer-side only (not a cookie)One-time code for wallet sign-in, stored in our database with the wallet address it was issued forDeleted when used (codes expire after 5 minutes); unused or expired codes are deleted within 24 hours
AnalyticsNoneWe don't use an analytics provider—

Local storage stays on your device until it expires or you clear it. You can clear it in your browser settings ("site data" or "cookies and site data" for droves.fun). Clearing it before you join means no referral is recorded. Our fonts are hosted by us, so loading the page doesn't send your data to a font service.

1.5 What we don't collect We don't ask for your name, phone number, postal address, date of birth, government ID, X or social handle, or payment details. We don't request any blockchain transaction. We don't use fingerprinting.

Public information about wallets. Wallet addresses and their transaction history are public on the Solana blockchain. We don't currently analyse the on-chain history of waitlist wallets. If you give us both an email and a wallet, we'll know they belong to the same person. Please keep that in mind if you use a wallet you'd rather keep separate from your email.

2. How we use your information

PurposeInformation used
Add you to the Waitlist, assign your number in the founding queue, and avoid duplicatesEmail and/or wallet address, sign-up records
Prove you own a walletWallet address, signed message, one-time sign-in code
Send service emails: confirming your sign-up, resending your number, replying to requestsEmail address
Send launch news (when Droves opens) and product updates and news about Droves, until you unsubscribeEmail address, unsubscribe status, email delivery data
Give you a share link and share cardYour referral code, your number
Understand how people find Droves (referral attribution)Referral code, source and time, referral record
Stop spam, fraud and abuse (including self-referrals and referral farming), and keep the site secureIP address, salted IP-range hash, device and browser data, rate-limit logs, referral fraud flags
Understand how the page is used and improve itFirst-party events on our server (no email or wallet address). Not sent to an analytics provider.
Show the total number of sign-ups, if we choose toA count of confirmed sign-ups only (no personal details). It's off unless we switch it on, and it's always the real number.
Comply with the law, including sanctions law, and enforce our TermsAny of the above, as needed

We don't use referral fraud flags or any other information to make decisions about you that have legal or similarly significant effects. The flags help us review suspicious sign-ups, and we may remove sign-ups that break our Terms.

Emails and unsubscribing. When you join with an email address, you agree to get launch news and product updates and news from Droves.

  • Every email that isn't a service email has an unsubscribe link. We act on unsubscribes promptly, and within 10 business days at the latest.
  • Unsubscribing doesn't delete your waitlist entry or your place in the founding queue. To delete them, ask us (§7).
  • After you unsubscribe, we'll only send you service emails (for example a reply to a request). We keep a record of your unsubscribe so that we honour it.
  • Our emails come from a droves.fun address, identify Droves, and include our postal address.

3. What others can see

  • Share cards and links. Your share card shows "#n in the founding queue" and your share link contains your referral code. Anyone with the link can see the number shown on the card. It doesn't show your email, your wallet address, or who joined through your link.
  • Referral data is never public, is not shown on the share-link page, and isn't available through any public interface.
  • On screen. If you join with an email that's already on the list, we don't show that email's number on screen. We send it to the email address instead.
  • Sharing on X. If you press "Share on X", you go to X, and X's own privacy policy applies.

4. Who we share information with

We share personal information only with service providers who help us run the Waitlist. They may use it only to provide their services to us. We don't give the waitlist, or referral data, to partners, projects, callers or advertisers.

ProviderRoleData
Vercel Inc.Website hosting and deliveryIP address, request logs
NeonStores the waitlist and referral recordsEmail, wallet address, number, referral records
ResendEmail delivery: service emails, launch news and product updatesEmail address, email content, delivery and unsubscribe data. Open and click tracking is off.
Namecheap, Inc.Email forwarding: emails you send to our droves.fun addresses (for example privacy@droves.fun) pass through Namecheap's forwarding service to our email inboxesYour email address, the message and any attachments
Spacemail (Spaceship, Inc.)Email hosting: hosts an inbox that receives emails you send to some of our droves.fun addresses (for example haydn@droves.fun)Your email address, the message and any attachments
Apple Inc. (iCloud Mail)Email hosting: hosts the inbox that receives emails you send to privacy@droves.funYour email address, the message and any attachments

We may also disclose information: (a) if the law requires it; (b) to protect the rights, safety or property of users, us or others, including to prevent fraud or sanctions breaches; (c) to professional advisers under confidentiality; and (d) to an affiliate or successor entity that takes over operating Droves (for example a company formed to run the Droves platform), or to a buyer or successor if our business, or part of it, is reorganised, merged, financed or sold. The new operator must handle your information in line with this policy, and we'll tell you about the change by email or on this page.

5. How long we keep it

DataKept for
Waitlist entry (email and/or wallet, number, your own referral code)Until Droves launches and we've sent the launch email, plus 12 months, or until you ask us to delete it, whichever is sooner. If Droves doesn't launch, we delete it within 12 months of closing the Waitlist.
Referral record (who referred whom, source, time, IP-range hash, fraud flags)The same period as the waitlist entry of the person who joined. The IP-range hash is deleted after 90 days. When either person's entry is deleted, we delete or de-identify the parts of the record that relate to them. We may keep a count with no link to any person.
dr_ref item on your device30 days, until you join, or until you clear it, whichever comes first
Unconfirmed email sign-upsDeleted after 30 days if the email isn't confirmed. Numbers are never reused.
Unsubscribe / do-not-contact records (including in Resend's suppression list)As long as needed to honour your choice, even after your entry is deleted. We keep only the minimum needed (for example a hashed email).
Security, rate-limit and hosting logsUp to 30 days, unless needed longer to investigate abuse
Usage events (first-party)We don't currently store them. Each event is checked and then discarded, and referral-check results are held only briefly in server memory. If we start storing them, we'll keep them for no more than 24 months and update this policy first. We don't use a third-party analytics provider.
Emails you send us, including privacy requestsUp to 24 months after the request is closed

6. Selling and sharing

We don't sell personal information. We don't share it for cross-context behavioural advertising (targeted advertising). We haven't done either in the past 12 months. Referral data is used only by us, for the purposes in §2.

Because we don't sell or share, there's no "Do Not Sell or Share" link. We treat Global Privacy Control signals as a request to opt out of any selling or sharing. We don't respond to "Do Not Track" signals in any other specific way, because we don't track you across other sites.

7. Your choices and rights

Everyone. Wherever you live, you can ask us to:

  • access the personal information we hold about you. This includes whether a referral record exists for your sign-up, and the referral code that brought you.
  • correct it;
  • delete it, including referral records, and remove you from the Waitlist; and
  • stop launch and product emails, using the unsubscribe link in any such email or by writing to us. This doesn't delete your entry.

Email privacy@droves.fun from the address you joined with. If you joined with a wallet only, tell us the wallet address. We may ask you to sign a message with that wallet to prove it's yours. We'll never ask for your private key or seed phrase. We'll reply within 45 days. To stop referral tracking on your device, clear your browser's site data for droves.fun (§1.4).

U.S. state privacy rights. Depending on where you live (for example California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida and other states with consumer privacy laws), you may have rights to:

  • know or access the categories and specific pieces of personal information we hold, the sources, the purposes and the recipients;
  • delete it;
  • correct it;
  • get a copy in a portable format;
  • opt out of the sale or sharing of personal information, targeted advertising, and certain profiling. We don't do these things;
  • limit the use of sensitive personal information. We don't collect it for these purposes; and
  • not be discriminated against for using your rights.

You can use an authorised agent. We may ask for proof of authority and verify your identity. Where state law provides it, you can appeal our decision by writing to privacy@droves.fun with "Appeal" in the subject line. If you're unhappy with the outcome of an appeal, you can contact your state Attorney General.

California: notice at collection and categories. In the past 12 months, we have collected:

CategoryExamplesSourcePurpose (see §2)Disclosed to (for business purposes)
IdentifiersEmail address, wallet address, IP address, your referral code, the referral code you arrived withYou; your deviceWaitlist, emails, referral attribution, securityHosting, database, email delivery, email forwarding and email hosting providers
Internet or other electronic network activityPage and button events, device type, UTM tags, logs, when you arrived through a share linkYour deviceSite operation, referral attribution, securityHosting provider
InferencesAutomated fraud flags on referral records (e.g. "same network"), used only for abuse reviewDerived by usSecurity, fraud preventionDatabase provider
Sensitive personal informationNone collected———

We keep each category for the periods in §5. We don't sell or share any category.

Nevada. We don't sell covered information as defined by Nevada law. You can still send an opt-out request to privacy@droves.fun.

8. Children

The Waitlist is only for people aged 18 or over. It isn't directed to children. We don't knowingly collect personal information from anyone under 13, or let anyone under 18 join. If you think a child has given us information, contact privacy@droves.fun and we'll delete it.

9. Security

We use reasonable safeguards for a service of this kind:

  • encrypted connections (HTTPS);
  • restricted, admin-only access to the waitlist and referral data;
  • salted hashing of IP ranges in referral records; and
  • keeping email and wallet addresses out of our usage events.

Hashing reduces risk but doesn't make data anonymous. No system is completely secure. We will never ask for your seed phrase or private key, or ask you to send funds, to join the Waitlist.

10. Where we process information

We're a U.S. company. We and our providers process information in the United States, and may process it in other countries.

11. Changes to this policy

If we change this policy, we'll update the "Last updated" date. If a change is material, for example a new use of referral data (such as rewards) or any selling or sharing, we'll tell you before the change applies and, where required, ask for your consent. We won't apply a new use of referral data to records collected before we've told you about it, unless the law allows it.

12. Contact

DIG MIAMI, LLC (operating Droves) · 125 South Clark Street, Suite 1175, Chicago, IL 60603 · privacy@droves.fun

Terms · Privacy · DIG MIAMI, LLC · 125 South Clark Street, Suite 1175, Chicago, IL 60603