Privacy Policy

Last updated: March 29, 2026

Volaro ("we", "us", "our") operates the website at welcome.volaro.fun and the crypto prediction game at volaro.fun. This Privacy Policy explains how we collect, use, store, and protect your personal information.

1. Information We Collect

Information You Provide

• Investor Application Form: full name, email address, EVM wallet address, and investment interest range.
• Newsletter Subscription: email address.
• App Launch Notification: email address.

Information Collected Automatically

• Log Data: IP address, browser type and version, operating system, referring URL, pages visited, and timestamps. Collected by AWS CloudFront access logs.
• Bot Verification: Cloudflare Turnstile collects interaction data to distinguish humans from bots. This may include browser characteristics, mouse movements, and challenge completion data. See Cloudflare's Privacy Policy.

Information We Do Not Collect

• We do not use Google Analytics or any third-party tracking scripts.
• We do not track you across other websites.
• We do not sell, rent, or share your data with advertisers.

2. How We Use Your Information

• Investor applications: To review your interest, contact you about investment opportunities, and send a confirmation email.
• Newsletter: To send updates about Volaro, including new features, the token generation event (TGE), and product launches.
• App notifications: To notify you when the Volaro mobile app is available on iOS and Android.
• Security: To prevent abuse, bot submissions, and fraudulent activity via Cloudflare Turnstile verification.

3. Where Your Data Is Stored

Your data is processed and stored using the following infrastructure:

• AWS DynamoDB (EU — Frankfurt, eu-central-1): Form submissions are stored in an encrypted-at-rest DynamoDB table.
• AWS SES (EU — Frankfurt): Confirmation emails are sent from hello@volaro.fun via Amazon Simple Email Service.
• AWS S3 + CloudFront: The static website is hosted on S3 and served through CloudFront CDN.
• Cloudflare: DNS resolution and Turnstile bot verification.

4. Third-Party Services

Service	Purpose	Data Shared
Amazon Web Services (AWS)	Hosting, database, email delivery	Form data, IP addresses
Cloudflare	DNS, CDN, bot verification (Turnstile)	IP address, browser data

We do not share your data with any other third parties unless required by law.

5. Cookies

We use minimal cookies:

• Cloudflare Turnstile: Sets temporary cookies required for bot verification. These are strictly functional and do not track you across websites.

We do not use analytics cookies, advertising cookies, or social media tracking pixels.

6. Data Retention

• Investor applications: Retained for the duration of the investment process and for 3 years after for legal and compliance purposes.
• Newsletter subscriptions: Retained until you unsubscribe.
• Server logs: CloudFront access logs are retained for 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten").
• Withdraw consent for newsletter communications at any time.
• Export your data in a portable format.
• Object to processing of your data for specific purposes.

To exercise any of these rights, email us at hello@volaro.fun. We will respond within 30 days.

8. Data Security

We protect your data with:

• Encryption at rest (DynamoDB) and in transit (HTTPS/TLS everywhere).
• Content Security Policy (CSP) headers restricting script and connection sources.
• Cloudflare Turnstile on all forms to prevent automated abuse.
• Input validation and sanitization on all form submissions. See our FAQ on security.
• AWS IAM least-privilege access controls.

9. Children's Privacy

Volaro is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has submitted data to us, contact hello@volaro.fun and we will delete it promptly.

10. International Transfers

Your data may be processed in the European Union (AWS eu-central-1 region) and the United States (Cloudflare CDN edge nodes). We rely on AWS and Cloudflare's data protection measures for cross-border transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or data requests:

• Email: hello@volaro.fun
• Website: welcome.volaro.fun