Privacy Policy

Effective Date: 28 August 2026 · Last Updated: 28 September 2026

This Privacy Policy details how Bolor Geo MPC Corp. collects, processes, uses, stores, and protects personal information when you access or interact with GlobalMPC websites.

This Policy applies universally across all of the following digital platforms (collectively, the “Sites”):

• Main Site: https://www.globalmpc.tech and all associated subpages (including whitepapers, project disclosures, and contact interfaces).
• Project Waitlist: Waitlist / app: https://app.globalmpc.tech

This Policy does not apply to third-party websites, applications, or services outside the direct operational control of Bolor Geo MPC Corp. By accessing or using any of the Sites, you acknowledge the data handling practices described in this document.

1. Entity Responsibility & Governance (Data Controller)

Throughout this Policy, references to “we,” “us,” or “our” mean the data controller. The data controller responsible for determining the purposes and legal means of processing personal information collected on the Sites is:

Bolor Geo MPC Corp.
Advanced Tower Building, Floor 1, Ricardo Arias Street, Panama City, Panama
Contact Email: mpc@globalmpc.tech

Technical Infrastructure Provider: Software development, technical architecture, and web hosting for the Sites are managed by BOLOR GEO SG PTE. LTD. (Singapore) under data processing instructions from Bolor Geo MPC Corp. BOLOR GEO SG PTE. LTD. operates strictly as a technical infrastructure vendor; it does not issue tokens, manage token distributions, or hold custody of digital asset wallet keys.

2. Platform Scope & Operational Purpose

The Sites function exclusively as informational portals for the GlobalMPC project. The Sites do not operate as a digital asset exchange, broker-dealer, or crypto wallet service. We maintain a strict non-custodial framework and never request, store, or hold your private cryptographic keys or wallet recovery phrases.

We collect personal information solely for specific operational needs: operating and securing the Sites, responding to incoming inquiries, administering project waitlists, and measuring how the Sites and the waitlist are used (sections 3.2 and 4.1).

3. Information We Collect

We observe strict data minimization principles, collecting only the information necessary to fulfill explicit operational purposes. We do not aggregate or sell personal data from the Sites for marketing purposes.

3.1 Information You Provide Directly

• Whitepaper & Public Documentation: Accessing or reading project whitepapers requires no personal data submission.
• Contact Form Submissions: When submitting inquiries on our main platform, you voluntarily provide your name, organization, job title, work email address, primary area of interest, and message content. This data is transmitted directly to our institutional desk for the sole purpose of responding to your inquiry.
• Waitlist / app (https://app.globalmpc.tech): You join by connecting a wallet you control (for example MetaMask, Trust Wallet, Binance Wallet, or another wallet offered through WalletConnect / Reown) and, where the page asks, signing a message. We record the wallet address and waitlist activity tied to that address (including daily check-in / participation if you use it). We do not collect name, phone, or email for waitlist access. We do not hold your recovery phrase or private key. A wallet address is not anonymous. Together with technical logs (section 3.2) and on-chain activity, it can identify a person.

3.2 Technical Data We Automatically Collect

Like most web infrastructure, our servers automatically collect technical system logs upon access, including your IP address, browser type and version, device hardware specifications, operating system, referring URL, pages viewed, and access timestamps. This data is processed strictly to maintain operational stability, diagnose technical errors, and defend against malicious cyber activity.

Waitlist / app first-party analytics (https://app.globalmpc.tech): On the app's main page (including its quest, mine and vote tabs) and its security page, we measure visits and sessions with our own analytics. Nothing is sent to Google Analytics for this measurement. It works as follows:

• The app stores a random browser ID in your browser (section 8.1). Our servers do not store the ID itself. They store a keyed hash of it, together with the days and times it was seen and when each session started.
• After you sign in with a wallet, we link that browser hash to the signed-in wallet address. This lets us measure new registrations and returning users. The link is created even if you sign in and never complete the waitlist.
• These records are pseudonymous, not anonymous: once linked to a wallet address, they relate to that wallet.
• Known bots and the project's own administrators are excluded.

3.3 Cookies & Tracking Identifiers

• Main Platform: We place a single essential cookie to remember your analytics consent choice (Accept or Decline). Optional Google Analytics cookies operate only if you explicitly select “Accept.”
• Waitlist / app (https://app.globalmpc.tech): The waitlist / app may store a session so the page remembers a connected wallet. That is not an advertising cookie. WalletConnect / Reown may also set its own cookies or local storage to complete the connection. The app also keeps a first-party analytics browser ID in local storage (section 3.2). It is not an advertising identifier and is not shared with Google Analytics.

3.4 Private Keys & Sensitive Security Exclusion

We will never request private cryptographic keys, seed phrases, recovery passwords, government identification numbers, or banking credentials on any form across the Sites. Do not enter sensitive credentials on any web interface. Any party claiming affiliation with GlobalMPC while requesting your private keys or recovery seed is an unauthorized impersonator and not us.

4. Purposes & Legal Bases for Data Processing

We process personal data strictly under lawful frameworks established by international privacy standards, including the EU/UK General Data Protection Regulation (GDPR).

4.1 Operational Processing Activities & Lawful Bases

• Contact Form Communications: We process message submissions from our contact form based on our legitimate interest in communicating with institutional contacts and responding to user-initiated inquiries.
• Waitlist Administration: We record the wallet address and waitlist activity based on our legitimate interest in recording a waitlist you chose to join by connecting a wallet.
• Platform Security & Infrastructure: We process server logs and IP addresses based on our legitimate interest in maintaining uptime, optimizing system performance, and defending against hostile cyber threats.
• Website Usage Analytics: We analyze platform traffic and interaction patterns to improve user experience based on your explicit consent, which is requested through our cookie consent mechanism and activated only after you select “Accept.”
• Waitlist / App First-Party Analytics: We measure visits, sessions, registration conversion and returning users on the waitlist / app based on our legitimate interest in understanding how the waitlist is used. You can turn this measurement off at any time (section 8.2), and a Global Privacy Control signal turns it off automatically.
• Cookie Preference Storage: We deploy essential consent cookies based on our legitimate interest in maintaining regulatory compliance and honoring your stored privacy choices.
• Regulatory & Legal Compliance: We retain mandatory operational, tax, and accounting records to comply with explicit legal obligations under applicable domestic and international laws.

4.2 Commercial Restrictions & Processing Safeguards

• Personal data and connected wallet details are never sold, leased, or monetized.
• We do not engage in commercial email marketing. Email contact is restricted strictly to users who voluntarily submit an institutional contact form inquiry.
• We do not subject users to decisions based solely on automated processing that produce legal or similarly significant effects.

5. Service Providers & Third-Party Disclosures

5.1 We do not sell personal information. We share data with a limited group of specialized third-party infrastructure vendors (data processors) operating under strict contractual duty to process information solely on our instructions:

• Vercel Inc. (United States): Provides primary hosting and cloud infrastructure for the Sites.
• Reown / WalletConnect: Completes wallet connection on the waitlist / app. You choose the wallet. They are not a custodian of your keys.
• Resend, Inc. (United States): Delivers contact form inquiries submitted on the main site directly to our institutional desk. (Does not process waitlist data, as no email addresses are collected for the waitlist).
• Google LLC - Fonts (United States): Delivers typography assets for the main site. Requesting font files transmits your IP address to Google upon page load (this asset delivery is non-essential to core site functionality).
• Google LLC - Analytics (United States): Measures performance metrics on the main platform, executed exclusively when explicit consent is granted.

5.2 Authorized Access: Within Bolor Geo MPC Corp., access to personal information and connected records is strictly restricted to designated personnel on a need-to-know basis solely to answer inquiries.

6. International Data Transfers

Interacting with the Sites involves the cross-border transmission of personal information to processing infrastructure in the United States, as well as to Panama, where Bolor Geo MPC Corp. is domiciled.

• EEA and UK Data Subjects: Transfers of personal data originating from the European Economic Area (EEA) or the United Kingdom to non-adequate jurisdictions are conducted pursuant to standard contractual safeguards, specifically the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
• Panamanian Data Protection Law: Data handling operations comply with the provisions of Panamanian Law No. 81 of 2019 on Personal Data Protection.
• South Korean Residents (PIPA Disclosures): In compliance with South Korea’s Personal Information Protection Act (PIPA), details regarding overseas data transfers to our US-based service providers are detailed below:
  • Resend, Inc. (USA): Receives contact form entry fields via encrypted transmission to deliver incoming user inquiries; retained pursuant to Section 7 schedule.
  • Vercel Inc. (USA): Receives technical log data, IP addresses, and waitlist wallet records.
  • Google LLC (USA): Receives IP addresses for typography delivery and analytics telemetry (upon consent) via encrypted transit; retained pursuant to Section 7 schedule.

7. Data Retention Schedule

7.1 We retain personal information and technical logs only for as long as necessary to fulfill operational goals, maintain requested services, or comply with legal retention requirements:

• Contact Form Communications: Retained for up to 24 months following the last communication, after which records are purged from active mailboxes unless extended retention is required by law.
• Waitlist / connected-wallet records: Retained until you ask us to delete the record (a wallet signature may be required), or 24 months after last waitlist activity, whichever is later, unless the law requires a longer period. Then deleted, unless the law requires us to keep a record.
• Waitlist / App First-Party Analytics: The browser ID in your browser expires 90 days after its last measured use and is renewed on each measured visit. The server-side analytics records described in section 3.2 have no automatic deletion period, including records for wallets that signed in without joining the waitlist. You can ask us to delete them under Section 9.
• Essential Consent Cookie: Saved locally in your browser for 180 days before automatic expiration.
• Analytics Cookies: Retained for up to 24 months, automatically expiring earlier if you revoke consent.
• Server Log Files: Retained for 30 to 90 days before being automatically overwritten or anonymized during routine server maintenance.

7.2 Early Deletion Requests: Users retain the right to submit early erasure requests pursuant to Section 9. Where statutory retention duties or legal obligations prevent immediate deletion, we will notify you of the specific legal basis requiring continued storage.

8. Cookies & Tracking Technologies

8.1 Upon accessing our main platform, a banner presents the choice to Accept or Decline optional analytics cookies. Refusing analytics cookies does not restrict access to or functionality across the Sites.

Essential Identifiers:

• mpc_cookie_consent (Main Platform): Functional cookie used to record your analytics preference (Accept or Decline) for 180 days.
• Waitlist / app session (app.globalmpc.tech): Essential to remember a connected wallet. Lasts for the session or until you disconnect. WalletConnect / Reown may set additional cookies or local storage to complete the connection.

Optional Analytics Identifiers:

• _ga and _ga_* (Google Analytics): Telemetry cookies used to evaluate main platform traffic patterns for up to 24 months, deployed solely upon affirmative consent.
• mpc.website.visitor.v1 (Waitlist / app, local storage): A random browser ID for first-party analytics. Unlike the Google Analytics cookies above, it is set by default without a consent prompt. You can turn it off at any time (section 8.2). It expires 90 days after its last measured use.
• mpc.website.opt-out (Waitlist / app, local storage): Remembers that you turned first-party analytics off or back on in this browser. It lasts until you change it or clear site data.
• mpc_analytics_internal (Waitlist / app, cookie): Marks the project team's own test browsers so their visits are not counted. The app never sets it for other visitors; team members add it by hand.

8.2 Managing Preferences: You may modify or reset analytics preferences on the main site by clearing browser cookies for globalmpc.tech, which reinstates the consent prompt on your next visit. Clearing globalmpc.tech does not clear app.globalmpc.tech. To forget a waitlist wallet session, disconnect the wallet on the waitlist / app and clear cookies / site data for app.globalmpc.tech. To stop first-party analytics on the waitlist / app, open “Analytics preferences” in the app footer and turn it off. This affects only that browser. It stops future collection but does not delete records already collected, and it does not change Google Analytics settings.

9. Individual Rights & Verification Protocols

9.1 Depending on your geographic location, you hold statutory rights regarding your personal data. Verification of identity is required prior to processing any data subject request.

Regional Rights Frameworks:

• EEA & UK Data Subjects (GDPR): Rights include requesting access to, rectification of, or erasure of personal data; restricting or objecting to specific processing activities; data portability; and consent revocation. You also hold the right to lodge a complaint with your local Data Protection Authority.
• California Residents (CCPA/CPRA): Rights include knowing, accessing, correcting, and deleting personal data without non-discrimination penalties. We do not sell personal data or share it for cross-context behavioral advertising. Our platform recognizes Global Privacy Control (GPC) signals to automatically opt browser sessions out of optional analytics.
• South Korean Residents (PIPA): Rights include inspecting, correcting, deleting, or suspending the processing of personal information, contact mpc@globalmpc.tech or use the contact form on the main site.

9.2 Cryptographic Verification for Wallet Records (Waitlist): Because the waitlist portal does not collect traditional contact details (such as names or email addresses), processing data rights requests concerning wallet-associated records requires cryptographically signing a message using the wallet address in question to authenticate authorization and account control. Direct data rights inquiries to mpc@globalmpc.tech or through our contact form. Never transmit seed phrases, private keys, or wallet passphrases in any submission.

10. Protection of Minors

The Sites are designed exclusively for institutional, corporate, and adult audiences. They are not intended for individuals under 18 years of age (or 16 where applicable by statute). We do not knowingly collect personal data from minors. If you believe a minor has submitted personal information to our platform, please contact us for immediate deletion.

11. Policy Amendments & Scope

We reserve the right to amend this Privacy Policy to reflect changing legal standards or operational practices. Revisions take effect immediately upon publication, marked by the updated date stamp at the top of this document. This single, comprehensive Privacy Policy serves as the sole, authoritative notice governing the main platform and waitlist interfaces.

12. Contact Information

For questions regarding this Privacy Policy, data handling practices, or to exercise your statutory privacy rights, please contact our Data Controller:

Bolor Geo MPC Corp.
Advanced Tower Building, Floor 1, Ricardo Arias Street, Panama City, Panama
Contact Email: mpc@globalmpc.tech