Free privacy policy

1. Who this policy covers and who we are

This policy explains how personal data is handled in the Free gift program (the Program) at free.plusmore.xyz. It covers people who connect a wallet to the Program, submit an email address for preapproval or the waitlist, or otherwise visit the Program site.

The controller of your personal data is TYMOSCH UK LIMITED (Tymosch UK Ltd), a BVI Business Company incorporated in the British Virgin Islands with company number 1039346, registered office Wickhams Cay II, Road Town, Tortola, VG1110, British Virgin Islands, trading as PlusMore (the Company, we, us). Where this policy refers to what we hold or process, it refers to the Company as controller.

2. What we collect

The Program processes a limited set of data. It falls into three groups.

Data you provide:

• Your public wallet address on Ethereum and Base when you connect a wallet to the Program.
• Your email address, only when you submit it for preapproval or the waitlist. This is stored on our servers. You do not have to provide an email address to connect a wallet.

Data collected automatically when you use the site:

• A first-party session cookie, set when you connect your wallet, that keeps your dashboard connected during a session. It holds no personal data beyond your wallet address.
• Your IP address and basic request metadata, used transiently for rate-limiting and for abuse and sanctions screening.
• Browser localStorage flags set by the site, for example to record that a popup has been shown once. These stay in your browser.

Data that is public on-chain:

• On-chain activity linked to your wallet address, including your address, your allocation and the deliveries made to you. This is written to public blockchains and is inherently public and permanent.

The Program does not ask for your seed phrase, your private keys, payment details or government identification at the gift stage. No user ever pays, so there is no payment data at the gift stage.

3. Why we use it and our legal bases

Many users are in the United Kingdom and the European Union, so this section is written in a way that is aware of the General Data Protection Regulation and United Kingdom data protection law, while noting that the Company is based in the British Virgin Islands. We use your data for the following purposes and on the following bases.

• To deliver the gift you asked for. We use your wallet address and your connected session to identify your wallet, check your allocation and make deliveries. The basis is performing the gift arrangement you asked us to carry out.
• To run and secure the Program. We use IP address and request metadata for rate-limiting and to protect the Program against abuse. The basis is our legitimate interest in operating and securing the Program.
• To meet legal and compliance obligations. We carry out wallet and jurisdiction screening for sanctions and anti-abuse purposes. The basis is compliance with legal obligations and our legitimate interest in lawful operation.
• To contact you about preapproval or the waitlist. We use the email address you submit. The basis is your consent, which you can withdraw at any time.

4. On-chain data is public and permanent

Blockchains are public and permanent. Your wallet address, your allocation and the deliveries made to you are written to the Base and Ethereum networks. Once written, this data cannot be edited or deleted by anyone, including the Company. It stays readable by anyone for as long as those networks exist. Please keep this in mind before connecting a wallet, because on-chain records cannot be erased on request.

5. Sharing

We do not sell personal data. We share data only in the ways described here.

• Redemption partners. Redemption is carried out by independent third-party Reward-as-a-Service partners. They apply their own privacy terms and may require identity, know-your-customer or anti-money-laundering checks at the point of redemption. The Company is not the redeemer and does not control how those partners process your data.
• Service providers. We use infrastructure and service providers to run the Program, including hosting providers, RPC providers and the public blockchain networks themselves. On-chain transactions are by their nature broadcast to those networks.
• Legal and compliance disclosures. We may disclose data where we are required to do so by law or to meet a sanctions or compliance obligation.

6. International transfers

The Company is based in the British Virgin Islands, and our service providers may operate in other countries. As a result, your data may be processed outside the country where you live, including in the British Virgin Islands and in the locations of our service providers. Where a transfer of personal data requires a safeguard under the law that applies to you, we apply an appropriate safeguard for that transfer.

7. Retention

We keep data only for as long as we need it.

• Email and waitlist data. We keep this while the Program is running or until you ask us to remove it, whichever comes first.
• Transient logs. IP address and request metadata used for rate-limiting and screening are kept only briefly.
• On-chain data. On-chain records are permanent and outside our control. We cannot delete them, and they remain on the public blockchains.

8. Your rights

Subject to the law that applies to you, you may ask us to give you access to the off-chain data we hold about you, to correct it, or to delete it. Where we rely on your consent, such as for the email waitlist, you may withdraw that consent at any time. Where we rely on legitimate interests, you may object to that processing.

You can exercise these rights through the support routes published at plusmore.xyz. Please note that on-chain data cannot be deleted by us or by anyone, because it is public and permanent on the blockchain.

9. Cookies and local storage

The Program uses a first-party session cookie, set when you connect your wallet, to keep your dashboard connected, and browser localStorage flags set by the site, for example to record that a popup has been shown once. The Program does not use third-party advertising cookies and does not carry out cross-site tracking.

10. Security

We take reasonable steps to protect the data we hold. Email and waitlist data are stored on our servers, and access is limited to what is needed to run the Program. No method of storage or transmission is fully secure, so we cannot promise absolute security. For a fuller picture of the risks involved in using the Program, see the Risk Disclosure at /risk.

11. Children

The Program is not intended for anyone under 18 years of age. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has provided us with data, contact us through the support routes and we will remove the off-chain data we hold.

12. Changes to this policy

This policy takes effect on 31 August 2026. We may update it from time to time. The version published on this page is the current one, and the effective date above changes when it does. If you continue to use the Program after an update, the updated policy applies.

13. Contact

For any question about this policy or about your data, use the support routes published at plusmore.xyz.