This Privacy Policy explains how Fungus Inc. dba Liquidium ("Liquidium," "we," "us," or "our") collects, uses, discloses, and protects personal data in connection with the Liquidium website at https://liquidium.fi (the "Website") and the Liquidium Cross-Chain app at https://app.liquidium.fi (the "App").

This policy is intended to cover applicable privacy laws, including the EU/UK General Data Protection Regulation ("GDPR"), to the extent they apply.

1) Who We Are

Controller: Fungus Inc. dba Liquidium (Delaware corporation)
Products: the Liquidium Website and Liquidium Cross-Chain App
Contact: info@liquidium.fi

2) Scope

This Privacy Policy applies to personal data processed through the Website and App, including marketing pages, forms, account and profile features, wallet authentication, notifications, analytics, feedback, and support chat.

It does not apply to:

Public blockchain data processed independently by blockchain networks
Third-party wallets, exchanges, and services you choose to use outside the Website or App
Third-party websites linked from the Website or App

3) Data We Collect

A. Wallet and account data

Wallet addresses you connect and related account or profile identifiers
Cryptographic authentication records, such as signed messages, nonce records, and auth-token metadata
Linked wallet addresses retrieved from protocol or account-profile calls

B. Profile and communication data

Profile name and avatar URL
Email address, verification status, and email-verification metadata
Telegram username or chat-link data and notification preferences
Referral, invite, feedback, survey, and support-chat data you choose to submit
Email addresses submitted through Website update, contact, or waitlist forms

C. Usage, device, and technical data

IP address and user-agent data processed transiently in server request, security, and tracing contexts
Browser, session, route, device, and performance metadata
Website interaction events, such as page views, button clicks, form outcomes, downloads, and calculator interactions
App feature events, asset identifiers, coarse amount ranges, sanitized failure stages, and—when optional App analytics are accepted—more detailed product telemetry

D. Cookies and browser storage

The Website uses:

analytics_consent to remember whether persistent Website analytics were accepted or declined
cookieConsent to remember whether the Website consent banner was answered
basic_analytics to remember whether all Website analytics, including cookieless measurement, were turned off
First-party PostHog cookies and local storage only after persistent analytics are accepted
Google Analytics analytics storage and first-party identifiers only after persistent analytics are accepted, including the _ga browser client ID and related Google Analytics first-party identifiers
Local storage for preferences such as theme

The App uses:

Authentication, account, and wallet-provider cookies needed for App functionality
liquidium.analytics-consent for optional App analytics
liquidium.basic-analytics for basic cookieless App measurement
Local and session storage for theme, account, and pending in-app flow state

4) How We Use Personal Data

Operate, secure, and improve the Website and App
Authenticate users and provide protocol-facing App features
Maintain profiles, notifications, referrals, forms, and requested communications
Provide support and review voluntarily submitted feedback
Measure audience, feature adoption, performance, errors, abuse, and service reliability
Comply with legal obligations and enforce our Terms

5) Legal Bases Under GDPR

Contract necessity: to provide the App features you request
Legitimate interests: security, fraud prevention, reliability, service improvement, and basic cookieless audience measurement where permitted
Consent: persistent analytics, optional product analytics, and communications where consent is required
Legal obligation: compliance with applicable law and lawful requests

6) How We Share Data

We do not sell personal data.

We share data with service providers only as needed to operate the Website and App, including hosting and infrastructure, PostHog and Google Analytics, wallet and blockchain infrastructure, email delivery, support chat, and messaging integrations. We may also disclose data when legally required, to protect users or our rights, or in connection with a corporate transaction.

7) International Data Transfers

Because we use global service providers, personal data may be processed outside your jurisdiction, including outside the EEA or UK. Where required, we use appropriate contractual or other transfer safeguards.

8) Data Retention

We retain personal data only as long as necessary for the purposes in this policy, including legal, security, and dispute-resolution needs. Website analytics preferences are stored for up to six months. Analytics events and operational logs follow the applicable provider and Liquidium retention settings. We delete or de-identify data when it is no longer needed where reasonably feasible.

9) Security

We use technical and organizational measures designed to protect personal data, including access controls, secure transport, and token/cookie protections. No internet service is completely secure.

10) Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data; withdraw consent; and complain to a data-protection authority. Contact info@liquidium.fi to exercise these rights. We may need to verify your identity.

11) Analytics, Cookies, and Controls

Website cookieless measurement

Unless the stored all-analytics opt-out is enabled, the Website starts basic cookieless PostHog audience and interaction measurement when a page loads. If that stored opt-out is detected, PostHog is not initialized. Otherwise, this measurement remains enabled while the cookie banner is unanswered and after analytics cookies are rejected. It operates without PostHog cookies or local/session storage and uses a privacy-preserving identifier generated on PostHog's servers from transient technical signals. The identifier is designed to rotate daily and not recognize a visitor across days. Liquidium configures PostHog not to retain IP addresses.

Cookieless events may include sanitized page paths, interaction names, form outcomes, performance data, and error categories. Sensitive URL parameters and credential-like fragments are removed; limited campaign attribution may be retained. Submitted form values, session recordings, and cross-site activity are not included.

Website persistent analytics

If you accept analytics cookies, PostHog upgrades from basic cookieless measurement to persistent analytics and the Website loads Google Analytics. PostHog may use first-party cookies and local storage for up to six months to recognize the same browser across visits. Its persistent analytics may include autocaptured interactions, heatmaps, web-vitals performance data, page-leave events, and sanitized error telemetry. Session recording is disabled on the Website.

Google Analytics receives page-view and interaction events and uses analytics storage, including the _ga browser client ID and related first-party identifiers, to distinguish browsers and measure activity across visits according to the applicable Google Analytics and Liquidium retention settings. Liquidium enables Google Analytics IP anonymization. Google advertising storage, advertising user data, and ad personalization remain denied.

Website controls

The Website cookie banner controls whether PostHog may use persistent analytics cookies and storage and whether Google Analytics is loaded. Google Analytics is not loaded before you accept, after you decline, or while the all-analytics opt-out is active. Rejecting analytics cookies does not turn off basic cookieless PostHog measurement. Use the controls on this page to turn off all Website analytics, including cookieless measurement, in that browser. While that stored all-analytics opt-out remains enabled, PostHog is not initialized and Google Analytics is not loaded on later page loads. Cookie settings in the Website footer lets you change the persistent-cookie choice.

The Website does not rely on the browser's Do Not Track signal to disable basic measurement because that signal is deprecated and inconsistently supported. Use the explicit control on this page to opt out of all Website analytics.

App analytics

The App separately provides Privacy & analytics settings. Basic cookieless App measurement is enabled by default and can be disabled in Advanced privacy settings. Optional product analytics remain off unless accepted and may include more detailed events, exact transaction amounts, and error diagnostics.

12) Children

The Website and App are not intended for children. We do not knowingly collect personal data from children under 18.

13) Changes to This Policy

We may update this policy from time to time and will post the updated version with a revised "Last updated" date.

14) Contact

For privacy requests or questions, email info@liquidium.fi.

Read this policy together with our Terms of Use.