Privacy Policy
This policy explains how WAGMI Game Co. (d/b/a NiFe WARS), 8924 E Pinnacle Peak Rd, Ste G5, Scottsdale, AZ 85255, handles personal information. It covers every site and service listed in our Terms of Use. We are the controller of this data. Contact: support@nifewars.com.
1. What we collect
COLLECT account: email, optional phone, display name, items you register, scan events (item ID and time), points and rewards.
Shop orders: name, billing and shipping address, email, phone, order history. Card details go to Shopify Payments; we never see full card numbers.
Retailer portal: store name, contact names, emails, phone, shipping address, Instagram, logos and artwork you upload, order and proof history, sign-in times.
Holders site and wallets: wallet address, signed message, email, presale allocations. Wallet activity on public blockchains is public by nature.
Messaging: phone number, message history, delivery status, STOP/HELP replies.
Promotions: entries, age confirmation, consent records, prize claims.
Automatic: IP address, device and browser type, pages viewed, crash logs, cookies (see the Cookie Notice).
When you scan or view an NFC collectible, we log the item, the time, your account if signed in, your device type and IP address, and an approximate location (city, region and country) derived from your IP address. We do not use your device GPS for scans. When an artist signs a collectible, we may record where the signing took place. We use this to verify authenticity, show ownership history and investigate lost or stolen items. Location data is never shown publicly. A promotion you join may also check your location if its rules say so. In that case we check only whether you are in the promotion area and do not store your coordinates.
2. How we use it
To run accounts, fulfill orders, produce retailer exclusives and verify items (performance of a contract).
To send service messages: sign-in codes, invoices, proof and shipping updates (contract).
To prevent fraud and keep the Services secure (legitimate interest).
To improve the Services with analytics (legitimate interest, or consent where required).
To send marketing email or texts. US users can opt out at any time. EU and UK users receive marketing only if they opt in.
To meet legal and tax obligations.
3. Who we share it with
Only with service providers working for us, under contract:
Shopify: store and payments
Supabase: database
Vercel and Framer: hosting
Twilio: texts
Resend and EmailOctopus: email
Google: Workspace, Drive for artwork files, Analytics
Shipping carriers
We also share data:
with retail partners on a co-branded exclusive, limited to the store details shown on the release
with authorities when the law requires it
with a buyer if the business is sold
We do not sell personal information. We do not share it for cross-context behavioral advertising. Mobile numbers and SMS consent are never shared with third parties for their marketing.
4. Public information
Some information is public:
a retailer’s COLLECT page (store name, logo, city, socials)
release credits
your COLLECT display name, if you choose to show it
blockchain records
5. Retention
Accounts: while open, then deleted within 90 days of closure.
Orders, invoices and retailer orders: 7 years (tax).
Scan events: while your account is open. IP addresses and coordinates are deleted after 12 months.
Message logs and consent records: 4 years after your last message.
Sign-in codes: 24 hours.
Analytics: 14 months.
Artwork files: for the life of the release, plus archive.
6. Your rights
You can ask to:
access your data
correct it
delete it
export it
object to or restrict its use
withdraw consent
Email support@nifewars.com. We answer within 45 days, and may verify your identity first. You can use an authorized agent. We will not treat you differently for using your rights. Blockchain records cannot be erased.
US states (California, Colorado, Virginia, Connecticut, Texas and others): the rights above apply. In the past 12 months we collected the categories in section 1 for the purposes in section 2, and disclosed them only to the recipients in section 3. You may appeal a refusal by replying to our decision.
EU/UK: our legal bases are listed in section 2. You can complain to your local data protection authority. Data is transferred to the US under Standard Contractual Clauses or the EU-US Data Privacy Framework, where our providers participate.
7. Children
The Services are not for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us data, email us and we will delete it.
8. Security
We use encryption in transit, access controls and email-code sign-in. No system is perfectly secure. We will notify you of a breach as the law requires.
9. Changes
We’ll post the new effective date. For material changes we’ll notify you by email or in the Services.