RNS.ID Privacy Notice

This Privacy Notice explains how Cryptic Labs LLC collects, uses, discloses, and protects personal information in connection with its operation of the RNS.ID online platform when you:

• visit `rns.id` or another RNS.ID webpage that links to this notice;
• create, access, or manage an RNS.ID account;
• use a Platform-level waitlist, referral, rewards, or support feature for which Cryptic is identified as responsible;
• use general platform features; or
• interact with a product flow to the extent that the flow identifies Cryptic as responsible for the relevant processing.

Products and services made available through the RNS.ID platform are not necessarily provided by Cryptic. A product provider or another party may collect personal information for its own purposes and may act as an independent controller or business, a joint controller, or a service provider or processor, depending on the applicable arrangement. A product-specific privacy notice or in-context disclosure will identify the relevant entity and its role where appropriate.

This notice applies only to processing for which Cryptic is responsible. Each product-specific or third-party notice applies to the processing performed by the entity it identifies; one entity's notice does not replace another entity's notice for separate processing.

This notice does not govern a product provider's or other third party's independent processing under its own privacy notice.

Cryptic Labs LLC ("Cryptic," "we," "us," or "our") operates the RNS.ID online platform (the "Platform").

Cryptic is responsible for personal information where Cryptic determines why and how it is processed for Platform-level activities, such as general website operation, RNS.ID accounts, Platform security, Platform support, and Cryptic's use of cookies and similar technologies. Where an in-context notice identifies another entity, that entity is responsible for the processing described in its notice in the capacity stated there.

For privacy questions or requests, contact:

Email: support@rns.id

The information Cryptic collects depends on how you interact with the Platform and which Platform functions you request.

Information You Provide

We may collect:

• Account and profile information, such as your email address, display name, profile image, language, account identifiers, and authentication information;
• Contact and communication information, such as messages to support, feedback, survey responses, waitlist submissions, and communication preferences;
• Referral and rewards information, such as referral codes, referrer relationships, eligibility, points, balances, redemption activity, and program participation;
• Wallet and blockchain information, such as public wallet addresses, network identifiers, wallet type, signatures used to authenticate or authorize an action, and public blockchain transaction data;
• Platform order and transaction information, such as the offering selected, order-routing or display status, amount, currency, payment method category, discounts, billing-related identifiers, and refund or dispute status that the Platform receives or maintains;
• Files and content, such as documents, images, or other materials you choose to upload through a feature; and
• Other information you provide in a form, product flow, event, or promotion.

Do not submit sensitive documents or other information unless the relevant feature requests them and provides the applicable notice.

Information Collected Automatically

When you use the Platform, Cryptic and service providers processing information for Cryptic may automatically collect:

• IP address and approximate location derived from it;
• device type, operating system, browser type, language, and user-agent information;
• page views, referring and exit pages, timestamps, clicks, scrolling, session activity, and feature interactions;
• account access, authentication, failed-login, security, fraud-prevention, and diagnostic events;
• cookie choices, local-storage values, and similar technology identifiers; and
• error, performance, and service-availability information.

See our Cookie and Similar Technologies Policy for more information and available controls.

Information From Other Sources

We may receive information from:

• payment, wallet, identity-verification, communications, hosting, security, and product providers, to the extent they send information to Cryptic for a Platform function;
• referral partners or another user who provides your referral code or contact information as permitted by the applicable program;
• public blockchains and publicly available sources; and
• authorities or other parties where permitted or required by law.

We may use personal information to:

• provide, operate, maintain, secure, and improve the Platform;
• create and manage accounts, authenticate users, and connect supported wallets;
• present offerings, route requests or orders, support applicable payment and checkout functions, display status, and facilitate delivery by the responsible party;
• administer referrals, rewards, points, waitlists, promotions, and related eligibility for which Cryptic is responsible;
• communicate about Platform accounts, transactions visible through the Platform, support requests, security, and Platform changes;
• personalize language, settings, content, and user experience;
• measure site and feature performance and understand how users interact with the Platform;
• send marketing communications or use advertising technologies where permitted and subject to applicable choices;
• detect, investigate, and prevent fraud, abuse, security incidents, sanctions violations, and other prohibited conduct;
• debug errors, protect our systems, enforce applicable terms, and resolve disputes;
• comply with law, lawful requests, recordkeeping duties, and regulatory obligations; and
• establish, exercise, or defend legal claims.

We will not use personal information for a materially different purpose without providing any notice or choice required by applicable law.

Where applicable law requires a legal basis, we process personal information on one or more of the following grounds:

• Contract: processing is necessary to provide a Platform function for which Cryptic is the contracting party, administer an account, or take steps at your request before entering into a contract with Cryptic;
• Legitimate interests: processing is necessary for interests such as operating and securing the Platform, preventing fraud, supporting users, improving Platform functions, and managing business operations, where those interests are not overridden by your rights;
• Legal obligation: processing is necessary to comply with applicable legal, tax, accounting, sanctions, law-enforcement, or regulatory requirements; and
• Consent: you have consented to a specific activity, such as certain optional cookies or marketing. You may withdraw consent prospectively as described below.

We may disclose personal information to:

• Service providers and contractors that support hosting, storage, communications, customer support, analytics, security, fraud prevention, identity verification, payments, and other Platform functions for which Cryptic is responsible;
• Product providers and transaction parties where disclosure is necessary to route a request, complete an order, process a selected payment method, or enable the responsible party to provide the product or service you requested;
• Analytics and advertising providers where permitted by law and consistent with your cookie and privacy choices;
• Professional advisers, auditors, insurers, and financial institutions where reasonably necessary for business, compliance, or legal purposes;
• Authorities and other parties when we reasonably believe disclosure is required by law or necessary to protect rights, safety, users, or the integrity of the Platform or our operations; and
• Parties to a corporate transaction, such as a merger, financing, reorganization, asset sale, or similar transaction, subject to appropriate safeguards.

We do not sell personal information for money. We may allow advertising or analytics providers to receive online activity or device information. Some laws may define those disclosures as a "sale," "sharing," or targeted advertising even when no money is exchanged. Where those laws apply, we provide the required rights and controls.

An entity processing information for Cryptic as a service provider or processor is subject to the applicable agreement and law. A product provider or other party identified as an independent business or controller determines its own processing purposes as described in its privacy notice. The fact that its offering or interface is accessible through the Platform does not make its processing Cryptic's processing.

Cryptic uses cookies, local storage, pixels, tags, SDKs, and related technologies when operating the Platform. Technologies that are not strictly necessary are used only as permitted by applicable law and your available choices.

You can manage optional categories through Cookie Settings on the Platform. Withdrawing consent does not affect processing that occurred before withdrawal. Browser controls may also allow you to delete or block stored data, but blocking necessary technologies may prevent account or security features from working.

Where required, we recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, for the browser and device that sends the signal.

Some browsers also offer a legacy "Do Not Track" setting. Because there is no uniform standard that defines how websites must interpret that setting, Cryptic does not treat the Do Not Track setting by itself as a Cookie Settings selection. This does not affect our treatment of a legally recognized opt-out preference signal where applicable law requires a response.

For details, see our Cookie and Similar Technologies Policy.

Where permitted, we may send Platform news, promotions, event information, or information about offerings available through the Platform. A product provider may separately send communications under its own notice and choices. You can opt out of Cryptic's promotional email by using the unsubscribe method in the message or contacting us. You may still receive nonpromotional communications about your Platform account, transactions, security, legal notices, or requested support.

Public blockchain transactions are generally visible to the public and may be difficult or impossible to alter or delete. A public wallet address may become associated with you through your use of the Platform or information available from other sources.

We do not control an independent blockchain network. Requests to delete or correct information held by Cryptic do not change records independently maintained on a public blockchain.

Cryptic and service providers processing information for Cryptic may process personal information in countries other than the country where you live. A product provider may make separate international transfers as described in its own notice. Those countries may have different privacy laws.

Where required, we use recognized transfer mechanisms or other appropriate safeguards for international transfers. You may contact us for information about safeguards relevant to your personal information, subject to lawful limitations.

Cryptic retains personal information for which it is responsible only for as long as reasonably necessary for the purposes described in this notice, including to operate the Platform, maintain security, comply with legal and accounting obligations, resolve disputes, and enforce agreements. A product provider determines retention for its separate processing under its own notice.

Retention depends on the type of information:

• account and profile information held by Cryptic is generally retained while the account is active and for an appropriate period afterward;
• order, payment, rewards, and transaction records held by Cryptic may be retained for financial, fraud-prevention, contractual, and legal limitation periods;
• security, access, device, and diagnostic records are retained for periods proportionate to the security or operational purpose;
• support communications and submitted content are retained while needed to address the request and related obligations;
• cookie consent and preference records are retained as needed to honor and demonstrate your choices; and
• product-specific information held by Cryptic follows the retention terms applicable to Cryptic's role, while another responsible entity may apply the retention terms in its own notice.

We may retain information longer when required by law, subject to a legal hold, or necessary to establish, exercise, or defend legal claims. When information is no longer needed, we delete, de-identify, or securely isolate it as appropriate.

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission, storage, or authentication is completely secure. You are responsible for protecting your account credentials, devices, wallet keys, and recovery information, and for notifying us if you suspect unauthorized access.

Depending on where you live, you may have the right to:

• request access to or a copy of personal information;
• request correction or deletion;
• object to or restrict certain processing;
• withdraw consent prospectively;
• request portability of information you provided;
• opt out of certain sales, sharing, targeted advertising, profiling, or marketing;
• appeal our decision on a privacy request; and
• complain to a privacy or data-protection authority.

To submit a request, email support@rns.id. We may verify your identity and authority before acting. An authorized agent may submit a request where permitted by law, subject to verification. We will not unlawfully discriminate against you for exercising a privacy right.

These rights are subject to legal exceptions. For example, we may retain information needed for security, fraud prevention, legal compliance, transactions, or legal claims.

The Platform is not directed to children under 18, and Cryptic does not knowingly collect personal information from a child under 18 through the general Platform. If you believe a child has provided personal information, contact us so we can review the matter.

The Platform may link to or integrate with product providers, third-party websites, wallets, blockchains, or services. Their privacy practices are governed by their own notices for their independent processing. Review the in-context disclosures and applicable notices before providing information to another entity.

We may update this Privacy Notice to reflect changes to the Platform, Cryptic's data practices, or our legal obligations. The published notice will display its effective date. If a change is material, we will provide any additional notice required by applicable law.

For privacy questions or requests:

Cryptic Labs LLC
Email: support@rns.id