Privacy Policy

Privacy Policy Last updated: October 16 2026 1. Who We Are Oncade, Inc. (“Oncade,” “we,” “us,” or “our”) operates the Oncade e-commerce platform, enabling independent game studios (“Sellers”) to list and sell digital or physical items to end users (“you”). 2. Information We Collect Category Examples Purpose Identity & Contact Data Name, email address Account creation, order confirmations, support Usage Data Pages visited, features used, in-app events, referring URLs, device/browser info, IP address (truncated where required) Service improvement, analytics, fraud prevention Authorized Agent & Connected Application Data Identifiers and activity of any person or third-party application (including automated or AI agents) you authorize to access your account or act on your behalf, and a record of the permissions you grant or revoke Operate delegated access, authenticate and attribute the instructions you authorize, and prevent fraud Identity Verification Data Legal name, date of birth, residential address, government-issued identification documents and images of them, tax identification number, selfie or liveness checks, and, for businesses, company registration and ownership details Verify your identity or your business, meet anti-money-laundering and sanctions obligations, and prevent fraud Financial Data Bank account and routing details, local account identifiers used for payouts, transaction history, balances, and card account details Process deposits, payouts, withdrawals, and card transactions, and keep records the law requires Wallet & Blockchain Data Wallet addresses linked to your account, and the transactions those addresses make. Blockchain transactions are public and permanent, and we cannot delete or change them Operate your wallet, show your balance and history, and process transfers Location Data Country derived from your IP address, and the country you provide Show the features and payment methods available where you are, and comply with sanctions and local law Device & Notification Data Device identifiers and push notification tokens Send notifications you have enabled and keep your account secure Other Operational Data Other information needed to provide, secure, or support the Platform, such as support messages, error logs, and records of the terms and consents you accept Operate the Platform, fix problems, and meet legal obligations We do not collect or store payment card numbers. Payments are handled directly by integrated payment processors who act as independent controllers or processors under their own privacy terms. 3. How We Use Your Information Perform our contract with you (e.g., deliver purchased items, provide support). Improve and secure the platform (analytics, debugging, fraud detection). Communicate service notices, transactional emails, or—where you opt in—product updates and marketing. Comply with legal obligations, resolve disputes, and enforce our Terms of Service. 4. Cookies & Analytics We and approved third-party providers (e.g., Google Analytics) use cookies and similar technologies to understand site traffic and feature usage. You can control cookies via browser settings; however, disabling them may limit certain features. 5. How We Share Data Recipient What They Get Why Sellers (Store Providers) Your name, email, order details To fulfill your purchase and provide customer support Service Providers (cloud hosting, analytics, email delivery) Data required to perform services Operate, analyze, and secure the platform Identity Verification, Banking, Card, and Payment Partners The identity, financial, wallet, and transaction data needed for the service you use To verify your identity, move funds, issue and operate cards, and meet legal obligations Legal or Safety Disclosures As required by law or to protect rights, property, or safety Compliance & risk management Connected Applications & Authorized Agents (those you authorize) The account, transaction, and instruction data needed to act on your authorization To carry out actions you have authorized them to perform on your behalf We do not sell or rent your personal information to advertisers or other third parties. 6. International Transfers We are headquartered in the United States. If you are located outside the U.S., your data may be processed here or in other jurisdictions where our vendors operate. For transfers from the EEA/UK, we rely on Standard Contractual Clauses or other approved safeguards. 7. Legal Bases (GDPR / UK GDPR) We process personal data under these bases: Performance of a contract (Article 6 (1)(b)) Legitimate interests (Article 6 (1)(f))—e.g., analytics, fraud prevention (balanced with your rights) Legal obligation (Article 6 (1)(c)) Consent (Article 6 (1)(a)) for optional marketing; you may withdraw at any time 8. Retention We retain personal data only as long as necessary to meet the purposes above or to comply with legal, tax, or accounting requirements, after which we securely delete or anonymize it. 9. Security We employ administrative, technical, and physical safeguards - including encryption in transit and access controls - to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. 10. Children’s Privacy Our platform is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from such minors. If you believe a child has provided us personal data, please contact us and we will promptly delete it. 11. Your Rights Depending on where you live, you may have rights to: Access, correct, or delete personal data Object to or restrict processing Receive data in portable form Opt-out of “sale”/“sharing” under the California Consumer Privacy Act (CCPA/CPRA) Lodge a complaint with a supervisory authority (EEA/UK) You can exercise these rights by emailing us at privacy@oncade.xyz. 12. Changes to This Policy We may update this Privacy Policy from time to time. Material changes will be announced via the platform or email. Continued use after changes signals acceptance. 13. Contact Us Questions? Reach us at: Oncade, Inc. 8 The Green #21571 Dover, DE, 19901, United States Email: privacy@oncade.xyz 14. Governing Law & Jurisdiction This Privacy Policy is governed by the laws of the State of California and the United States, without regard to conflict-of-law principles. All disputes shall be resolved exclusively in the state or federal courts located in San Francisco County, California.