Privacy Policy
TOAST STUDIO, INC.
PRIVACY POLICY
(Last Revised: June 1, 2026)
This Privacy Policy (the “Privacy Policy”) describes how Toast Studio, Inc., a Puerto Rico corporation (“Toast Studio,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with your access to and use of the https://goodvibesclub.io/ website, any related website or mobile application (the “Site”), and the products, features, content, and services offered on or through the Site, including the Good Vibes Club digital collectibles ecosystem (collectively, the “Service”). Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service available at https://goodvibesclub.io/terms (the “Terms”).
This Privacy Policy is incorporated into and forms part of the Terms. By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not access or use the Service.
PLEASE READ THIS PRIVACY POLICY CAREFULLY SO THAT YOU UNDERSTAND WHAT INFORMATION WE COLLECT, HOW WE USE AND SHARE IT, AND THE CHOICES YOU HAVE REGARDING YOUR INFORMATION.
TOAST STUDIO IS A NON-CUSTODIAL VIEWING AND COMMUNITY PLATFORM. WE DO NOT COLLECT, STORE, OR HAVE ACCESS TO YOUR PRIVATE KEYS, SEED PHRASES, RECOVERY PHRASES, PASSWORDS, OR THE CONTENTS OF YOUR DIGITAL WALLET, AND WE CANNOT INITIATE TRANSACTIONS ON YOUR BEHALF.
1. SCOPE AND APPLICATION
This Privacy Policy applies to information we process about Users and visitors in connection with the Service. It does not apply to: (a) information collected by third parties, including through any Third Party Services, Third Party Technology, or Secondary Marketplaces (such as OpenSea, Magic Eden, or SuperRare) that you access through or in connection with the Service; (b) any public blockchain, which is operated by a decentralized network outside of our control; or (c) the practices of any Digital Wallet provider you use to connect to the Service. Your interactions with those third parties are governed by their own privacy policies, and we encourage you to review them.
2. INFORMATION WE COLLECT
Many core features of the Service, including the ability to view NFT collections and publicly available content, are available without creating an Account or providing Personal Data. The information we collect depends on how you use the Service.
Wallet and On-Chain Information. When you connect a Digital Wallet to the Service, we read certain information associated with that Digital Wallet, including its public wallet address, public key, and the nature and extent of the Digital Tokens and NFTs associated with it, including your Good Vibes Club NFTs and $VIBESTR token holdings (“Digital Wallet Information”). This information already exists on, and is publicly visible through, the applicable public blockchain (such as Ethereum). We do not collect or have access to your private keys, seed phrases, or passwords.
Optional Account Information. If you choose to create an account (“Account”) or use certain enhanced features, you may provide us with information such as your email address, username, and display name, and, where reasonably necessary for compliance or fraud-prevention purposes, additional information such as your full name, mailing address, telephone number, or government-issued identification. Information relating to an identified or identifiable natural person is referred to in this Privacy Policy and the Terms as “Personal Data.” You are not required to provide Personal Data to use many features of the Service, but some features may be unavailable if you choose not to provide it.
Usage Data. We automatically collect certain information about how you access and interact with the Service (“Usage Data”), which may include your device type, browser type, operating system, referring pages, the pages or screens you view, the features you use, the cosmetic Badges displayed on your profile, approximate location derived from your IP address, and the dates and times of your interactions. We may collect Usage Data using cookies, local storage, and similar technologies as described in Section 4.
Communications and Support. If you contact us (for example, at [email protected]) or participate in community channels, surveys, or promotions, we may collect the information you choose to provide, including the contents of your communications.
Information from Third Parties. We may receive information about you from third-party service providers that help us operate the Service, such as blockchain data and infrastructure providers, hosting and analytics providers, and compliance or fraud-prevention vendors, as further described in Section 5.
3. HOW WE USE YOUR INFORMATION
We use the information we collect for the following purposes:
To provide, operate, and maintain the Service, including reading your Digital Wallet Information to display your NFT holdings and personalize your experience;
To determine eligibility for, and to display, cosmetic Badges based on your Digital Token and NFT holdings and your participation in the GVC ecosystem;
To determine eligibility for, and to administer, discretionary Rewards Pool Events and other community programs offered through the Service;
To create and manage your Account and to authenticate your access to the Service;
To communicate with you, including to send administrative or transactional messages, respond to your inquiries, and (where permitted) send marketing or promotional communications that you may opt out of;
To maintain the security and integrity of the Service, including to detect, investigate, and prevent fraud, abuse, security incidents, money laundering, sanctions violations, and other unlawful or unauthorized activity;
To comply with applicable laws, regulations, legal process, and governmental requests, and to enforce our Terms and other agreements; and
To analyze and improve the Service, including by understanding usage trends and developing new features, using aggregated or de-identified information where practicable.
We may process Usage Data and, where you provide it, Personal Data, in reliance on your consent, our legitimate interests in operating and securing the Service, the performance of our agreement with you, and our compliance with legal obligations.
4. COOKIES, ANALYTICS, AND BLOCKCHAIN DATA
We and our service providers use cookies, local storage, pixels, and similar technologies to operate the Service, remember your preferences (such as a connected Digital Wallet session), measure and analyze usage, and improve performance. You can control cookies through your browser settings, although disabling certain cookies may affect the functionality of the Service. We may use third-party analytics providers to help us understand how the Service is used; these providers may collect Usage Data such as IP address, device information, and interactions with the Service.
You acknowledge that all blockchain transactions are publicly visible on the applicable blockchain. If you use your Digital Wallet to engage in transactions on public blockchains, other participants will have access to your public wallet address and transaction information, and we do not control and are not responsible for that public information.
5. THIRD-PARTY SERVICE PROVIDERS AND PROCESSORS
We share information with third-party service providers and processors that perform services on our behalf, subject to obligations to protect the information consistent with this Privacy Policy. These providers include, without limitation:
Blockchain infrastructure and data providers, such as Alchemy, which provide remote procedure call (RPC) endpoints and indexed blockchain data used to read public wallet addresses and on-chain holdings;
Hosting and content-delivery providers, such as Vercel, which host the Site and process technical data (including IP addresses and request logs) necessary to deliver the Service;
Secondary Marketplaces and related platforms, such as OpenSea, Magic Eden, and SuperRare, which we may reference or link to in order to display listings or facilitate your navigation, and which operate under their own terms and privacy policies;
Analytics and performance providers, which help us understand and improve how the Service is used; and
Compliance, identity-verification, and fraud-prevention vendors, which we may engage where reasonably necessary to verify identity or to detect and prevent fraud or other unlawful activity.
These third parties are not under our control, and their use of any information is governed by their own privacy policies. We encourage you to review the privacy policies of any third party before providing your information to them or transacting with them.
6. WHEN WE DISCLOSE INFORMATION
We do not sell your Personal Data. We may disclose information in the following circumstances:
Service Providers. To the third-party processors described in Section 5 who support the operation of the Service.
Legal and Compliance. To comply with applicable law, regulation, sanctions programs, legal process (such as a subpoena, court order, or warrant), or governmental request; to enforce our Terms; or to detect, prevent, or address fraud, security, or technical issues.
Protection of Rights. Where we believe in good faith that disclosure is necessary or appropriate to protect the rights, property, or safety of Toast Studio, the Toast Studio Entities, our Users, or the public.
Business Transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, in which case information may be transferred as a business asset, subject to this Privacy Policy.
With Your Direction or Consent. When you direct us to share information or otherwise consent to the disclosure.
Aggregated or De-Identified Information. We may share aggregated or de-identified information that cannot reasonably be used to identify you.
7. WE DO NOT SELL YOUR PERSONAL DATA
WE DO NOT SELL YOUR PERSONAL DATA, AND WE DO NOT SHARE YOUR PERSONAL DATA WITH THIRD PARTIES FOR THEIR OWN INDEPENDENT MARKETING PURPOSES, WITHOUT YOUR CONSENT.
We disclose information only as described in this Privacy Policy. If our practices change, we will update this Privacy Policy and, where required by applicable law, provide additional notice or choices.
8. DATA RETENTION
We retain Personal Data and other information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Service, maintain your Account, comply with our legal and regulatory obligations, resolve disputes, prevent fraud and abuse, and enforce our agreements. When information is no longer needed, we will delete, anonymize, or otherwise dispose of it in accordance with applicable law. We may retain and continue to process certain information where we reasonably believe it is necessary to comply with applicable law or regulation. Information recorded on a public blockchain is outside of our control and is generally retained on that blockchain indefinitely.
9. YOUR PRIVACY RIGHTS AND CHOICES
Depending on your jurisdiction, you may have certain rights regarding your Personal Data, subject to applicable law and to the exceptions and limitations provided by law. These may include the right to: (a) request access to the Personal Data we hold about you; (b) request correction of inaccurate or incomplete Personal Data; (c) request deletion of your Personal Data; (d) object to or request restriction of certain processing; (e) request a copy of certain Personal Data in a portable format; and (f) withdraw consent where processing is based on consent.
Account Information. You may review or update certain Account information by contacting us or, where available, through your Account settings.
Marketing Communications. You may opt out of promotional emails by following the unsubscribe instructions in the message. We may still send you non-promotional, administrative messages about the Service.
Withdrawing Consent. Where processing is based on your consent, you may withdraw consent at any time by closing your Account (if applicable) or by ceasing use of the features that require Personal Data, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before responding, and we will respond within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.
10. DATA SECURITY
We have implemented technical and organizational measures designed to protect information from accidental loss and from unauthorized access, use, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee that unauthorized third parties will never be able to defeat those measures. You provide information at your own risk. You are solely responsible for safeguarding access to your Digital Wallet, your private keys, seed phrases, passwords, and any recovery method, none of which we collect or store. See Section 6 (Security) of the Terms for additional information.
11. CHILDREN’S PRIVACY
THE SERVICE IS NOT DIRECTED TO, AND WE DO NOT KNOWINGLY COLLECT PERSONAL DATA FROM, ANY INDIVIDUAL UNDER THE AGE OF 18 (OR THE APPLICABLE AGE OF MAJORITY IN YOUR JURISDICTION).
By using the Service, you represent and warrant that you are at least 18 years of age (or the age of majority in your jurisdiction, if older). If we become aware that we have inadvertently collected Personal Data from an individual under the age of 18, we will take reasonable steps to delete that information. If you believe that we may have collected information from a minor, please contact us immediately at [email protected].
12. INTERNATIONAL USERS AND DATA TRANSFERS
The Service is operated from, and hosted in, the United States. We make no representation that the Service is appropriate or available for use in any particular location. If you access or use the Service from outside the United States, you are responsible for compliance with local laws, and you understand that your information will be transferred to, stored in, and processed in the United States and other jurisdictions that may have data-protection laws different from those in your jurisdiction.
IF YOU ACCESS OR USE THE SERVICE FROM OUTSIDE THE UNITED STATES, YOU CONSENT TO THE TRANSFER, STORAGE, AND PROCESSING OF YOUR INFORMATION IN THE UNITED STATES AND TO THE APPLICATION OF UNITED STATES LAW, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
13. THIRD-PARTY LINKS AND SERVICES
The Service may contain links to, or interoperate with, Third Party Services and Third Party Technology, including Secondary Marketplaces, Digital Wallet providers, and other websites or applications that we do not own or control. We are not responsible for the privacy practices or content of those third parties. This Privacy Policy applies only to the Service. We encourage you to review the privacy policies of any third party before providing your information to them.
14. CHANGES TO THIS PRIVACY POLICY
We may amend or update this Privacy Policy from time to time. If we make material changes, we will post the revised Privacy Policy on the Site and update the “Last Revised” date above, and, where required by applicable law, provide additional notice. Any revised Privacy Policy will be effective when posted unless otherwise stated, and will not apply retroactively. Your continued use of the Service after the revised Privacy Policy becomes effective constitutes your acceptance of the changes.
15. GOVERNING LAW AND JURISDICTION
This Privacy Policy is governed by the laws of the Commonwealth of Puerto Rico, without regard to its conflict-of-law principles, and is subject to the dispute-resolution, arbitration, governing-law, and venue provisions set forth in the Terms, including the exclusive jurisdiction and venue of the state and federal courts located in San Juan, Puerto Rico, to the extent applicable.
16. HOW TO CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Toast Studio, Inc.
Attn: Legal Department
Email: [email protected]