Privacy & Cookies

Stoncat is a non-custodial NFT project on the TON blockchain. This page describes what data we collect, why we collect it, and what choices you have. It is written to be readable rather than exhaustive — if anything here is unclear, contact us at the address below.

Who runs this site

Stoncat is a project by STON.fi. Questions about this policy or requests to exercise any of the rights described below can be sent to [email protected].

What we collect

Wallet address and on-chain activity

When you connect a TON wallet, we store your public wallet address and link it to the Stoncats you mint, feed, and dress through the site. We use this address to render your inventory, credit GEMSTON balances, and issue NFTs to the correct owner. Wallet addresses are public data by nature — anyone can inspect them on a TON explorer. We do not receive or store your private keys, seed phrases, or any signature material.

Session data

We use a first-party session cookie (PHPSESSID) to keep you signed in after you prove wallet ownership. It contains a random session identifier — no personal data. For a connected wallet it lasts up to one year from your last visit to the site. It is cleared when you disconnect your wallet, or after a year of inactivity.

Analytics

We load Google Tag Manager, which in turn loads Google Analytics 4. This helps us understand which pages are viewed, how long visitors stay, and which parts of the mint / roll / Dress up flow drop off. Google Analytics sets first-party cookies (typically _ga, _ga_<id>) that contain a random client identifier — not your name, email, or wallet address. Data is processed by Google Ireland Limited and Google LLC under Google's own terms.

We do not currently run advertising pixels, retargeting tags, or third-party marketing trackers. If that changes we will update this page and the notice banner accordingly.

Cookies and similar technologies we use

• Session cookie — first-party, cleared when the browser closes. Needed to keep you signed in.
• Google Analytics cookies (_ga, _ga_<id>) — first-party, contain a random client identifier used for measurement. Retention up to 2 years unless you clear cookies or opt out.

Third parties

In addition to Google Analytics, the site loads code from the following third parties in your browser:

• TON Connect — client library used to talk to your TON wallet. They run entirely in your browser and do not send personal data to us or to their maintainers under normal use.
• STON.fi widget — used on the "Buy GEMSTON" flow. When opened, it interacts with STON.fi's own services under STON.fi's terms.
• Google Fonts — serves the Inter and Manrope typefaces. Requests may include your IP address and user-agent per Google's own policy.

Data retention

Wallet addresses, Stoncat metadata, and transaction records are retained for as long as the site operates — they are core to how the game works. Server access logs are retained for approximately 30 days. Application logs are retained indefinitely for operational history. Analytics data follows Google Analytics retention settings (currently 14 months).

International transfers

Our infrastructure runs in Europe. Some third-party services referenced above (Google in particular) may process data in the United States and other jurisdictions under their own transfer safeguards.

Changes to this policy

We may update this page as the product evolves. The "Last updated" date at the top will reflect the most recent change. Material changes (new categories of data, new third-party trackers) will also refresh the notice banner so returning users see it again.