Privacy Policy

Last updated: October 15, 2026

Volaro ("we", "us", "our") operates the website at volaro.fun and the crypto prediction game at game.volaro.fun. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

Information You Provide

• Investor Application Form: full name, email address, EVM wallet address, and investment interest range.
• Newsletter Subscription: email address.
• App Launch Notification: email address.

Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. Processed by the hosting and security services serving the requested page.
• Bot Verification: Cloudflare Turnstile collects interaction data to distinguish humans from bots. This may include browser characteristics, mouse movements, and challenge completion data. See Cloudflare's Privacy Policy.

Landing Analytics

Page views, game-entry clicks, selected mode, FAQ interaction, referring campaign and page version may be recorded. Browser-generated visitor and transition identifiers help connect a landing visit to the game entry. Cloudflare Web Analytics may also measure page traffic.

Information We Do Not Collect

• We do not track you across other websites.
• We do not sell, rent, or share your data with advertisers.

2. How We Use Your Information

• Investor applications: To review your interest, contact you about investment opportunities, and send a confirmation email.
• Newsletter: To send updates about Volaro, including new features, the token generation event (TGE), and product launches.
• App notifications: To notify you when the Volaro mobile app is available on iOS and Android.
• Security: To prevent abuse, bot submissions, and fraudulent activity via Cloudflare Turnstile verification.

3. Where Your Data Is Stored

Your data is processed and stored using the following infrastructure:

• AWS DynamoDB (EU: Frankfurt, eu-central-1): Form submissions are stored in an encrypted-at-rest DynamoDB table.
• AWS SES (EU: Frankfurt): Confirmation emails are sent from hello@volaro.fun via Amazon Simple Email Service.
• Cloudflare Pages: The landing site is hosted and served through Cloudflare's network.
• Cloudflare: DNS, content delivery, traffic measurement and security. Turnstile applies to forms that use bot verification.

4. Third-Party Services

Service	Purpose	Data Shared
Amazon Web Services (AWS)	Legacy form processing, database and email delivery where used	Form data, IP addresses
Cloudflare	DNS, Pages hosting, traffic measurement and bot verification where used	IP address, browser data

With your consent, optional analytics providers receive usage data as described below. Essential hosting and security services process requests to deliver and protect the site.

5. Cookies and Privacy Choices

Essential storage keeps the site and game working, saves game preferences and remembers your cookie choice. The volaro_consent cookie lasts 180 days and applies to volaro.fun and game.volaro.fun.

Optional analytics is off until you accept it. If you opt in, browser identifiers and campaign parameters help us measure visits and Demo interactions. Our own collector stores these events in Cloudflare D1. Cloudflare Web Analytics loads after consent on the site and game. Ahrefs runs on the landing site. Yandex Metrica runs on the site and game; Google Tag Manager runs in the game. All load after consent. Session replay and click maps are disabled in the game.

Choose Reject optional to keep analytics off. Demo remains available. Use Cookie settings at the bottom of any page to change your choice. Disabling analytics clears our optional browser identifiers and refreshes the page to stop loaded trackers. A current Demo round may reset. This does not delete events already received; contact us about server-side data.

6. Data Retention

• Investor applications: Retained for the duration of the investment process and for 3 years after for legal and compliance purposes.
• Newsletter subscriptions: Retained until you unsubscribe.
• Browser identifiers: Session values expire with the browser session. Local storage remains until cleared. Contact us for information about server-side records associated with your visit.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Withdraw consent for newsletter communications at any time.
• Export your data in a portable format.
• Object to processing of your data for specific purposes.

To exercise any of these rights, email us at hello@volaro.fun. We will respond within 30 days.

8. Data Security

We protect your data with:

• Encryption at rest (DynamoDB) and in transit (HTTPS/TLS everywhere).
• Content Security Policy (CSP) headers restricting script and connection sources.
• Cloudflare Turnstile on forms that use automated-abuse verification.
• Input validation and sanitization on all form submissions.
• AWS IAM least-privilege access controls.

9. Children's Privacy

Volaro is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has submitted data to us, contact hello@volaro.fun and we will delete it promptly.

10. International Transfers

Your data may be processed in the European Union (AWS eu-central-1 region) and the United States (Cloudflare CDN edge nodes). We rely on AWS and Cloudflare's data protection measures for cross-border transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or data requests:

• Email: hello@volaro.fun
• Website: volaro.fun