Privacy policy

01 Overview

This Privacy policy explains how Aqua Funded FZCO t/a AquaFunded ("AquaFunded") (“we”, “us”), which operates AquaPerps, collects, uses, shares and protects personal data when you join the AquaPerps waitlist at perps.aquafunded.com (the “Waitlist”), and the rights you have over your data. It forms part of, and should be read with, our Waitlist Terms.

02 Information we collect

When you join we collect your email address. When you confirm it we record the date.

We record the privacy line shown beside the form when you joined and the time you joined, as the record of what you agreed to. When you join we add your address to the AquaPerps waitlist mailing list at Klaviyo with that line and that time, so the email that confirms your address can reach you.

We record a one-way keyed fingerprint of your IP address, never the address itself, to limit how many times one connection can join and to detect abuse of referrals.

If you joined through someone's share link we record whose link it was, so it can count toward their points in the $1M competition when you confirm.

If you apply for the beta at beta.aquaperps.com we also collect your Discord username, and use it only to give you beta access.

If you connect your X account to take part in the competition, X shares with us your X user ID, username, display name, profile picture and the date your X account was created. We read your public posts that mention us or that you paste on your You're in page. We keep a one-way fingerprint of the IP address and a random device code from the connection, to detect several entries from one person. We store X's refresh token encrypted and use it for nothing else; we never post for you.

03 How we use information

We use your email address to send you the link that confirms it, and one email when the doors open. If you take part in the competition we also email you each day's winners and your rank, and use your confirmation, your referrals, your posts and the backs and fades that name you to count your points. Your X username, profile picture, rank and points are shown publicly on the leaderboard and on share cards.

Our lawful bases are your consent, which you give by joining and confirming, and our legitimate interest in preventing abuse of the Waitlist. Joining the Waitlist is not consent to marketing about other products. Any further email needs its own consent at launch.

04 Sharing and processors

We share personal data with processors who act on our instructions: Klaviyo (sending our email and keeping the Waitlist's mailing list), Cloudflare (Turnstile, which checks that a join comes from a person), Vercel (hosting), Neon (our database), X (the connection you start and the posts we read) and, if you accept our analytics notice, PostHog (analytics, in the EU).

We may disclose data where required by law or to protect our rights, our users or the Waitlist. We do not sell your personal data.

05 Cookies and analytics

When you answer our analytics notice we store your answer in a first-party cookie named pf_mktg_consent. Its value is 1 if you accepted and 0 if you declined, it holds nothing else, and it lasts up to 12 months. Until it says 1 we load no analytics script and send no analytics event.

If you accept our analytics notice, our analytics provider (PostHog, acting as our processor, in the EU) stores an anonymous identifier in your browser's local storage so that page views in one visit can be counted together.

When you follow someone's share link we set a first-party cookie named wl_ref. It holds only that link's code, is not readable by page scripts, and lasts 30 days or until you join.

When you confirm your email we set a first-party cookie named wl_me so this browser can show your rank and points. It holds a random code, is not readable by page scripts, and lasts up to 12 months.

When you connect your X account we set a first-party cookie named wl_dev, holding a random device code, and for ten minutes one named wl_xo, holding the connection's one-time codes. Neither is readable by page scripts; wl_dev lasts up to 12 months.

Cloudflare Turnstile runs a check in your browser when you join. Cloudflare processes it under its own privacy terms as our processor.

06 Data retention

We keep your signup, confirmed or not, until the Waitlist closes and access has opened in full, or until you ask us to delete it. Confirming your email is what lets you take part in the competition; it is not needed to receive the email when the doors open. We keep the competition's records (your X details, points and calls) until the prizes are issued and for 12 months after, to answer questions about the results. When you unsubscribe we stop emailing you.

07 Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise a right, write to legal@aquafunded.com. You may also have the right to complain to your local data-protection authority.

08 International transfers

We and our processors may process personal data in countries other than where you live. Where we transfer data across borders, we rely on the safeguards required by applicable law, such as standard contractual clauses or an adequacy decision.

09 Contact

For privacy questions or to exercise your rights, write to legal@aquafunded.com, or to Aqua Funded FZCO t/a AquaFunded ("AquaFunded"), IFZA Business Park, DDP, Premises No.- 35882-001 Dubai Silicon Oasis Dubai, United Arab Emirates.