BATONMARKETS
YOUR DATA

Privacy Policy

What we process, why we use it, and the choices you have.

AniDraft Limited · Effective 2026-10-13 · v1.5.0

1. Who we are

AniDraft Limited operates BATON Markets at baton.markets. This policy covers this website and information you send to us about it. Contact baton-privacy@anidraft.com for privacy questions or requests.

2. Information we process

Public community activity: when you verify a wallet and post or upload, we store your display name, messages, posts, replies, reactions, uploaded media and timestamps, associated with an internal identifier derived from that wallet. Community readers see your display name and public activity. Wallet ownership is verified by a signed message; connecting a wallet alone does not authenticate writes. A ChatGPT account is not required for community participation. Older activity retains its original author identifier.

Wallet and creation activity: connecting a wallet exposes its public address to the relevant wallet integration. Balance, token, activity, quote and transaction requests may process public addresses, transaction hashes, order identifiers and transaction metadata. NFT or launch workflows may store uploaded images, descriptions, metadata, creator or owner addresses, verification challenges and confirmed transaction records. We do not ask for or hold your seed phrase or private keys.

Support: if you email us, we receive your address, message and any information or attachments you choose to send. Please avoid sending wallet secrets or unnecessary sensitive information.

Technical data: our hosting, storage, security, authentication and network providers may process IP addresses, request details, device or browser information, cookies and operational logs. These providers may have their own retention practices.

Holder editing is optional. If you verify and join a holder directory, we link a signed wallet ownership proof to your verified wallet identity and store the wallet address, ecosystem membership, portfolio valuations, balance observations, rank and attributed edit history. Joined holder addresses, balances, ranks and community revisions are public. Simply connecting a wallet does not enrol you in this directory.

Community memes: uploads store image files, captions, display names, timestamps, reactions and moderation records. Published images and captions are public. Reports are restricted to moderation workflows. Eligible verified room holders can hide or restore memes; removal does not immediately erase retained files or audit records. Contact us for deletion requests.

Workspace and pets: after a separate wallet ownership message is verified, we store private workspace settings, pet appearance and skill names, earned experience, play-credit ledger entries, queue entries and battle records. An HttpOnly session cookie keeps this verification active for up to seven days. Guest workspace settings and pet cosmetics stay in browser storage. Battle opponents can see the public wallet address, pet name, combat actions and match result; private workspace preferences and credit history are not public.

Relay Run game saves: a verified wallet account stores its selected starter, companions, levels, experience, inventory, location, encounters and action receipts with timestamps. These saves are private account data, not public blockchain tokens. Guest practice saves stay in this browser and are never imported as account inventory. Game actions use revision checks and idempotency records to prevent duplicate item or reward grants.

3. Why we use information

We use information to operate public markets and communities, authenticate contributions, provide requested wallet and creation features, store and serve uploads, keep records consistent, maintain caches and snapshots, prevent misuse, investigate errors, and respond to enquiries or applicable legal obligations.

Where data protection law requires a legal basis, we rely on providing a requested service, our legitimate interests in operating and securing the platform, compliance with legal obligations, or consent where required. You can contact us about the basis applicable to your information.

4. Public information and sharing

Coin rooms, posts, replies and chat are public. Token records, published NFT metadata, market snapshots and exported reports may also be publicly accessible. Other people can copy or share public material. Blockchain transactions and addresses are public and may remain permanently available.

We use service providers for hosting, databases, media storage, authentication, email and network security. Wallet providers, Solana RPC services, Jupiter, Pump.fun and other data or protocol services receive information needed for the integrations you use. External links, fonts, embeds and images can involve requests to third parties. Their services have their own privacy policies.

We may disclose information where required by law, to protect rights or security, or as part of a lawful business transfer with applicable safeguards. The current site does not include our own advertising trackers or a sale of personal information for targeted advertising.

5. Browser storage and preferences

The site saves theme, sound settings, saved tokens, mint-scoped chart drawings and learning progress in browser storage. Wallet integrations may remember your selected wallet. An opaque, HttpOnly, Secure, SameSite=Strict wallet-session cookie maintains verified sign-in for API requests. The database stores a hash of the session token, not your wallet keys. Clearing browser storage removes local preferences and progress; disconnecting your wallet stops its active connection, subject to your wallet’s controls.

UI sound does not record audio. Shared reports are created from a captured market dataset; using a share or download action is your choice.

Guest and wallet workspace caches are stored separately on this device. Wallet verification signs a purpose-specific message and does not approve a transaction. Verified trade receipts can be checked for pet experience; current-mark volume estimates are advisory and are not historical execution prices or proof of organic trading.

6. Retention and security

We keep information for as long as needed to provide features, preserve appropriate operational records, maintain security, resolve disputes or comply with applicable law. Not every record has an automatic deletion timer. We use access controls and technical safeguards, but cannot guarantee absolute security.

You can delete your own supported community entries using the site’s controls. Removal from our interface does not remove blockchain records, downloaded reports, third-party copies or all backup and operational records. Contact us about other deletion requests.

7. Your choices and rights

Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing, and withdraw consent where processing relies on it. Email baton-privacy@anidraft.com. We may need proportionate verification to protect your information; never send a seed phrase. You may also complain to your local data protection authority.

You can use public discovery pages without posting, avoid connecting a wallet, control sound and theme, and clear local storage. Providers may process information in countries different from yours, subject to applicable transfer safeguards.

8. Children

Transaction features are intended for adults legally able to use them. We do not knowingly seek personal information from children. Contact us if you believe a child has supplied personal information so we can assess the appropriate action.

9. Changes

We will update this page when our practices change and show the effective date. Material changes will be highlighted on the site where appropriate. This policy describes current practices; it does not replace your statutory rights.

Companions on Home

While Home is open, your companion name, appearance, position and gesture are visible to other visitors on the shared platform. We use a separate random browser session cookie and temporary presence records to show who is connected. Wallet addresses and sign-in credentials are not part of this public presence feed. Presence disappears after 30 seconds without a heartbeat.