This Policy describes how Toko collects, uses, and protects information in connection with your use of our website and our Token creation and transfer services on the Internet Computer. Privacy is a fundamental right, and we collect only the minimum data needed to run the Platform.
This summary is for convenience only. The numbered sections below are the full Policy.
This Privacy Policy describes how Toko (“we”, “our”, or “us”), operated by Toko Studios Ltd, collects, uses, and protects information in connection with your use of our website and our Token creation and transfer services on the Internet Computer blockchain. We are committed to protecting your privacy and to complying with the EU General Data Protection Regulation (GDPR) and applicable United States privacy laws, including the California Consumer Privacy Act (CCPA).
We believe privacy is a fundamental right. We collect and store only the minimum data necessary to operate the Platform. We do not sell, rent, or trade personal information, and we do not track, profile, or market to users.
This data is public and connected to your on-chain activity. We do not collect your email, password, date of birth, phone number, or wallet seed phrase to use the core Platform.
If you purchase or redeem a physical item (a “real-world asset”) from our sister company, Catcha, you may be asked to provide your full name, shipping address, and an optional contact phone number. This is used solely for fulfilment and delivery. Catcha handles shipping data under its own privacy policy and does not use it for marketing or analytics.
If you contact us for support, we process the information you choose to share (for example, a message and a contact handle) solely to respond to and resolve your request.
We use collected information only to:
We do not use your data for advertising, analytics profiling, or resale.
Where GDPR applies, we process personal data on the following bases: performance of a contract (to provide the Platform and fulfil redemptions you request), legitimate interests (to keep the Platform secure and functioning), legal obligation (where the law requires it), and consent (where you provide optional information). You may withdraw consent at any time where processing is based on it.
Your activity on the Platform — including Tokens minted or transferred, and your principal ID — is recorded on the Internet Computer, which is public, permanent, and decentralised. All such on-chain data is publicly accessible by design. We cannot modify, delete, or obscure data stored on-chain.
We use only what is necessary to make the Platform work — for example, essential session or local-storage entries that keep you signed in and remember basic interface preferences. We do not use advertising cookies, cross-site trackers, or third-party analytics profiling.
We share limited data only when necessary:
We do not share or sell user data for commercial purposes.
We keep off-chain personal data only for as long as needed for the purpose it was collected — for example, shipping data for the period required to fulfil and support your order and to meet legal obligations — after which it is deleted or anonymised. On-chain data is permanent and outside our control (see Section 6).
We use industry-standard measures to protect stored information, including encryption, access controls, and secure hosting environments. No method of electronic transmission or storage is completely secure, but we take every reasonable step to protect your data.
Depending on your jurisdiction (EU, EEA, UK, or U.S.), you may have the right to access the information we hold about you, request correction or deletion (where applicable), object to or restrict certain processing, request data portability, and lodge a complaint with your local data-protection authority. California residents have the right to know, delete, and opt out of “sale” of personal information — and we do not sell personal information.
To exercise your rights, contact us at [email protected]. Please note that on-chain data cannot be altered or deleted.
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect or process personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.
Data may be processed in or transferred to jurisdictions outside your own, including the United States and the European Economic Area. Where required, we ensure such transfers are protected by appropriate safeguards (for example, Standard Contractual Clauses).
We may update this Privacy Policy from time to time. The updated version will be posted on our website with a new “Last updated” date. Continued use of the Platform after changes take effect signifies your acceptance of the revised Policy.
For any questions, requests, or privacy concerns, please contact:
Toko Studios Ltd
Email: [email protected]