Privacy Policy

Version 1.0 · Effective 23 October 2026

This policy explains what information Coreezy Vibes LLC ("Coreezy", "we") handles when you use coreezy.xyz (the "Site"), why, and for how long. Eezy OS has its own privacy policy.

Short version

• No tracking cookies, no advertising, no third-party analytics. Visits are counted only as daily totals on our own server.
• A cookie only if you sign in: a secure session cookie that keeps you signed in. It isn't used for tracking.
• Sign-in is a signed message, never a transaction. We never ask for your private keys or recovery phrase.
• The Sloth Race is public. Every wallet delegating to Coreezy takes part automatically. Wallets that qualify for prizes appear on the public leaderboard with their rankings, distances, classes and achievements, so anyone can check the results. A racer is shown by the name they choose, or else by their wallet's verified domain name, or else by their address. A linked X account stays private unless you choose to show it as your name. Race results are kept permanently.
• Wallet addresses are pseudonymous, not anonymous. An address doesn't show your name, but anyone who knows which address is yours can connect it to you.
• Blockchain data is public. Much of what the Site shows is read from the public TX network.
• We don't sell or share personal information for advertising.

1. Information we handle

a. Visiting the Site. Our server receives standard technical information with each request (IP address, browser type, page requested, referring site) to deliver the Site and keep it secure. The Site's own software doesn't write visitors' IP addresses to its logs. Our server's web proxy may keep standard request logs for security and troubleshooting; they aren't used for analytics and are kept only as long as needed for those purposes. To limit abuse, IP addresses are also held briefly in the server's memory (for example to limit repeated sign-in attempts) and are never written to disk for that purpose.

b. Aggregate visit counts. We count page views, referrer groups (for example "search" or "X") and clicks on outbound links, as daily totals. To estimate how many different visitors came on one day, our server makes a one-way code from your IP address and browser information combined with a random value that changes every day. The code can't be reversed, can't be linked across days, isn't stored with anything else about you, and is deleted, with that day's random value, within 2 days. Raw IP addresses, browser strings and full referring addresses are not stored for analytics. If your browser sends a "Do Not Track" or "Global Privacy Control" signal, your visit isn't counted at all. Analytics uses no cookies or device storage, and no outside analytics company receives anything. Small groups are hidden so no single visitor can be picked out.

c. Signing in with a wallet. When you sign in, you sign a short message in your wallet. We check the signature against your wallet's public key and address, then set a secure, HTTP-only session cookie holding your wallet address and an expiry (7 days for the Sloth Race features; 12 hours for admin pages, which only approved administrator wallets can use). Signing in never gives us access to your funds. While you're signed in, opening My Sloth records that day's race check-in against your wallet address and the UTC date only; no IP address, device details or other tracking are used for it.

For the Sloth Race features, the message you sign includes your agreement to the Terms of Service and Sloth Race Rules, with their version numbers. We keep a record of that agreement: your wallet address, the document versions, the time, the signed message, your wallet's public key and the signature, so the agreement can be checked later. It is never shown publicly. For admin sign-in we don't keep the signature after checking it.

d. Sloth Race. We keep two kinds of race information.

The competition record — kept permanently so every season can be checked later:

• public network data for every wallet delegating to the Coreezy validator: daily delegation amounts, REStake authorisations and restake transactions, and (for the Liquidity Explorer bonus) the wallet's liquidity-pool positions in the TXDex and Cruise Control COREZ pools, with the COREZ they represent and when and at which block they were checked. Every delegating wallet takes part, whether or not it has ever used the Site. Liquidity positions are shown only to the racer in My Sloth and to Coreezy in Eezy OS; the public pages show only the bonus and the badge;
• the results worked out from it: classes, eligibility, distances, Sleep Mode, standings and winners, and the scoring facts behind them: which days a wallet checked in, and which boosts counted (platform, dates and bonus);
• prize payments: the winning wallet, the amount and the transaction, which are also public on the network. When a season closes, its winners and each class's top ten (wallet addresses and race totals only) are sent to Eezy OS, Coreezy's own admin system, where prizes are approved and paid.

Optional information you choose to add when signed in:

• a display name and the rivals you pick;
• an X account link, only with your explicit consent, with the time you consented. It isn't shown publicly unless you choose to show your X handle as your sloth's name. You can unlink it at any time;
• connect messages: when you choose Connect X, we give you a short message to post from your X account and keep it with your wallet address and the time it was issued. It's valid for 24 hours and deleted when used or expired;
• the posts, videos and articles you submit for boosts (their links, the X account or channel, and for articles a one-way fingerprint of the text so the same article can't be claimed twice);
• name moderation records: if we remove a sloth name or stop showing an X handle as a name, we keep a record of the wallet, the name, the time, the reason and the administrator wallet that removed it, so the decision can be reviewed and the same name isn't reused straight away. It is never shown publicly.

To check boosts, our server looks up the public post, video or article you submit using X's public embed service, the YouTube Data API (Google) or the article's own website. Only the link you submitted is sent; nothing about your visit is. While YouTube and TikTok videos are checked by hand, the video link, your wallet address and when you submitted it are passed to Eezy OS, Coreezy's own admin system, so Coreezy can review it; the decision (and the reason, if it isn't approved) comes back to your My Sloth page.

To find your connect post without a link, our server uses the X API (X Corp.): it reads recent public posts that mention @CoreezyVibes, finds the one with your message, and confirms which X account posted it using X's public embed service. X receives nothing about your wallet or your visit.

g. Sloth AI. If you ask Sloth AI to write a post, we send Anthropic (the maker of Claude) the topic and tone you pick, the idea you type (if any) and your race facts (class, distance, check-in streak and restake days). Your wallet address isn't sent. We don't store the drafts; a short fingerprint of recent drafts is kept in the server's memory for up to 6 hours so two people don't get the same post. Nothing is posted for you: you decide whether to post a draft, from your own X account.

What is public: only wallets that qualify for prizes (at least 100 TX delegated to Coreezy and a class set) appear on the leaderboard and racer pages, which show their wallet addresses, rankings, distances, classes, sleep status, check-in and restake counts, and achievements, and a name: the one the racer chose (their linked X handle only if they chose it), or else their wallet's verified domain name, read from the public TX naming services (Bidds and Zephyr). Other delegating wallets still take part but aren't listed.

e. Things you send us. If you email support@coreezy.xyz, or send a partnership or investor inquiry through the form on our Investors page (your name, organisation, email, optional website, area of interest and message), we keep your message and contact details to respond. Form inquiries are stored on the Site's server and passed to Eezy OS, Coreezy's own admin system, where we follow up.

Videos from X on our homepage. Videos in Ecosystem Pulse show a still image stored on our site. X's player loads only if you press play; X then receives your visit as it does on any page that shows its content (for example your IP address and browser details), under X's own privacy policy. We ask it not to use that visit for tracking. Nothing from X loads before you press play.

f. Public blockchain data. The Site displays public network data such as validator stake and votes, Coreezy Vault and Treasury balances and liquidity-pool positions, COREZ markets and NFT ownership. It is read from public network services, not collected from you.

2. Why we use it (and legal bases in the EU/UK)

3. What we don't do

We don't sell personal information or share it for cross-context advertising, don't use advertising cookies, and don't link analytics counts to wallets, Sloth Race profiles or Eezy OS accounts. Eezy OS account data is not shared with the Site. Our server reads three public feeds from Eezy OS (the partner directory, partner logos and the race prize-pool figures) and serves them from coreezy.xyz, so your browser doesn't contact Eezy OS and no visitor information goes to Eezy OS through them.

4. Who else is involved

• Hosting: the Site runs on Coreezy's own server, provided by HostRush (ServerCheap) in Dallas, Texas, USA, and managed with Coolify.
• Email: support@coreezy.xyz is hosted by Titan Email.
• X API (X Corp.) for finding connect posts, and Anthropic for Sloth AI drafts, as described in section 1. Both are service providers we pay per use.
• Services our server contacts: public TX network data providers (for example ECO Stake and PublicNode) and naming services (Bidds and Zephyr), Eezy OS's public feeds, X's public embed service, the YouTube Data API and article websites you submit. None receives information about your visit.
• Your wallet (Keplr) and links to TXDex, REStake, Cruise Control, Bidds, xrp.cafe, the TX Explorer, X, YouTube, Telegram and Eezy OS take you to services with their own privacy policies.
• Posts from X in Ecosystem Pulse are displayed by our server; X's scripts aren't loaded on the Site. Fonts are served from our own server.

We may disclose information where required by law or to protect our rights, users or the Site.

5. How long we keep it

6. Your choices and rights

• Turn on Global Privacy Control or Do Not Track and your visits won't be counted.
• Sign out to remove the session cookie; unlink your X account and remove your display name at any time.
• Depending on where you live (for example the EU/UK, or certain US states), you may have rights to access, correct or delete your personal information, to object to its use, and to complain to a data protection authority. Email support@coreezy.xyz. We verify that a request comes from the person concerned (for a wallet, by a signed message).
• Limits: we can't change or delete records on a public blockchain. Wallet addresses, rankings and results stay in the race record, because they are the verifiable record of the competition; the optional information you added can be removed without changing any result. Aggregate counts can't be traced back to you.

7. Security

We use HTTPS, signed and HTTP-only session cookies, short-lived single-use sign-in messages, limits on repeated requests, and keep collection to a minimum. Admin pages are restricted to approved wallets. No method is perfectly secure.

8. Children

The Site isn't directed at children, and you must be at least 18 (or the age of majority where you live, if higher) to sign in. We don't knowingly collect children's information; contact us if you think we have.

9. International transfers

Coreezy is based in the United States and the Site's server is in the United States. If you use the Site from elsewhere, your information is processed there.

10. Changes to this policy

We update this policy as features change. Each version carries its version number and effective date, and earlier versions are kept in the version history below. Where practical we give reasonable advance notice of material changes on the Site.

11. Contact

Coreezy Vibes LLC · support@coreezy.xyz (including privacy requests)

Version history