KEYRING ADDRESS BOOK – Privacy Policy

Effective Date: July 29th, 2026
Last Updated: July 29th, 2026

Bacoor Dapps (“Bacoor,” “we,” “us,” or “our”) operates KEYRING ADDRESS BOOK, including its website, interfaces, smart contracts, blockchain-based functions, non-fungible tokens, and related services collectively referred to as the “Service.”

This Privacy Policy explains how we collect, use, disclose, store, and protect information in connection with the Service.

By accessing or using the Service, you acknowledge the practices described in this Privacy Policy.

1. Scope of This Privacy Policy

This Privacy Policy applies to information processed by Bacoor through:

• The KEYRING ADDRESS BOOK website;
• Interfaces operated by Bacoor;
• Address book registration functions;
• NFT minting and management functions;
• Wallet connection functions;
• Contact forms and support communications;
• Analytics, security, and fraud-prevention systems; and
• Other services that refer to this Privacy Policy.

This Privacy Policy does not govern independent blockchain networks, wallet providers, NFT marketplaces, decentralized applications, or other third-party services.

2. Information We Collect

The information we collect depends on how you interact with the Service.

2.1 Wallet and Blockchain Information

When you connect a wallet or use blockchain-based functions, we may process:

• Public wallet addresses;
• Blockchain network information;
• Transaction hashes;
• Token or NFT identifiers;
• Smart contract interactions;
• Transaction status;
• Blockchain timestamps;
• Publicly available transaction history; and
• Other information recorded on or derived from a public blockchain.

Wallet addresses and blockchain activity may constitute personal information where they can be connected to an identifiable individual.

2.2 Address Book Information

When you create or manage an address book entry, we may process:

• Nicknames;
• Display names;
• Contact labels;
• Email addresses;
• Public wallet addresses;
• Profile images or avatars;
• Verification status;
• NFT metadata;
• Information included in an address book record; and
• Other information you choose to submit.

You must not submit another person’s personal information unless you have the necessary authority, consent, or other lawful basis to do so.

2.3 Verification Information

Where the Service provides a verification function, we may collect information necessary to verify control of a wallet address or the accuracy of a contact entry, including:

• Wallet signatures;
• Verification requests and responses;
• Email verification records;
• Verification timestamps;
• Verification status;
• Records showing control of a wallet address; and
• Related communications.

A wallet signature used for verification does not normally disclose your private key.

2.4 Technical and Usage Information

When you access the Service, we or our service providers may automatically collect:

• Internet Protocol address;
• Browser type and version;
• Device type;
• Operating system;
• Language settings;
• Approximate location derived from an IP address;
• Referral pages;
• Pages and functions accessed;
• Access dates and times;
• Session identifiers;
• Error reports;
• Performance information;
• Security logs; and
• Other technical information about your interaction with the Service.

2.5 Cookies and Similar Technologies

We may use cookies, local storage, pixels, software development kits, and similar technologies to:

• Operate the Service;
• Maintain sessions;
• Remember settings;
• Measure website performance;
• Understand how the Service is used;
• Detect fraudulent or malicious activity; and
• Improve functionality.

Where required, we will obtain consent before using non-essential cookies.

You may control cookies through your browser settings. Disabling certain cookies may prevent some Service functions from working correctly.

2.6 Communications and Support Information

When you contact Bacoor, we may collect:

• Your name;
• Email address;
• Wallet address;
• Company or organization;
• The contents of your inquiry;
• Screenshots or files you submit;
• Support history; and
• Other information you voluntarily provide.

You should not send your private key, seed phrase, recovery phrase, or wallet password to Bacoor.

2.7 Information from Third Parties

We may receive information from:

• Public blockchain networks;
• Wallet connection providers;
• RPC providers;
• Block explorers;
• Verification providers;
• Analytics providers;
• Security providers;
• Infrastructure providers; and
• Other services you choose to connect to KEYRING ADDRESS BOOK.

Information received from third parties is handled in accordance with this Privacy Policy and any restrictions imposed by the relevant third party.

3. Information We Do Not Intentionally Collect

KEYRING ADDRESS BOOK is intended to operate with self-custodial wallets.

Bacoor does not require you to provide and does not intentionally collect or store:

• Private keys;
• Seed phrases;
• Recovery phrases;
• Wallet passwords; or
• Information that would independently allow Bacoor to control your wallet.

You must never send this information to Bacoor.

If such information is accidentally submitted to us, you should immediately move your digital assets to a new secure wallet. We may delete the submitted information where reasonably possible, but we cannot guarantee that credentials already exposed remain secure.

4. Purposes of Use

We process information for the following purposes:

4.1 Providing the Service

To:

• Connect supported wallets;
• Create and display address book entries;
• Associate contact information with wallet addresses;
• Mint or display NFTs;
• Process verification requests;
• Display transaction status;
• Provide search and contact-selection functions;
• Maintain user preferences; and
• Provide other requested functions.

4.2 Operating and Improving the Service

To:

• Monitor performance;
• Diagnose technical problems;
• Develop new functions;
• Improve usability;
• Conduct internal analysis;
• Test updates;
• Maintain compatibility with supported networks and wallets; and
• Understand how users interact with the Service.

4.3 Security and Misuse Prevention

To:

• Protect users and the Service;
• Detect phishing, fraud, impersonation, and malicious activity;
• Prevent unauthorized access;
• Investigate suspicious activity;
• Enforce our Terms of Service;
• Protect Bacoor’s rights and systems; and
• Respond to security incidents.

4.4 Communications and Support

To:

• Respond to inquiries;
• Provide technical support;
• Send service-related notices;
• Inform users about important changes;
• Handle complaints;
• Provide security alerts; and
• Maintain records of communications.

4.5 Legal and Regulatory Compliance

To:

• Comply with applicable laws, regulations, court orders, and governmental requests;
• Establish, exercise, or defend legal claims;
• Maintain required records;
• Respond to lawful requests from authorities; and
• Protect the rights, property, and safety of users, Bacoor, and third parties.

4.6 Additional Purposes

Where we intend to use personal information for a purpose not reasonably related to the purposes described above, we will notify you and obtain consent where required by applicable law.

5. Public Blockchain Information

KEYRING ADDRESS BOOK uses public blockchain technology.

You should understand that information submitted to a blockchain may be:

• Publicly visible;
• Permanently recorded;
• Accessible worldwide;
• Copied or indexed by third parties;
• Combined with other publicly available information;
• Associated with your wallet activity; and
• Difficult or impossible to change or delete.

Blockchain networks are generally operated by independent participants rather than Bacoor. Bacoor does not control how public blockchain records are stored, copied, validated, or displayed.

Removing an address book entry from an interface operated by Bacoor does not necessarily remove:

• The underlying blockchain transaction;
• NFT ownership records;
• Smart contract records;
• Transaction hashes;
• Information copied by block explorers;
• Information stored by decentralized storage systems; or
• Information retained by third parties.

Before placing a nickname, name, email address, or other personal information on a blockchain, carefully consider whether you are comfortable making it public and potentially permanent.

6. Legal Handling of Personal Information

Bacoor processes personal information in accordance with the Act on the Protection of Personal Information of Japan and other applicable laws.

We will not handle personal information beyond the scope necessary to achieve the disclosed purposes of use without obtaining consent or another lawful basis, except where permitted or required by law.

We will not obtain personal information through deception or other improper means.

7. Sharing and Disclosure of Information

We may disclose information in the circumstances described below.

7.1 Service Providers

We may entrust information to service providers that assist us with:

• Website hosting;
• Cloud infrastructure;
• Database management;
• Analytics;
• Error monitoring;
• Customer support;
• Email delivery;
• Cybersecurity;
• Wallet connectivity;
• Blockchain data access; and
• Other operational services.

Service providers may process information only as necessary to provide services to Bacoor and must handle it in accordance with applicable contractual and legal requirements.

7.2 Public Blockchain Networks

When you submit a blockchain transaction, information included in that transaction is transmitted to the relevant blockchain network and may become publicly available.

This disclosure is necessary to perform the blockchain action you request.

7.3 At Your Direction

We may disclose information when:

• You instruct us to do so;
• You connect a third-party service;
• You make information publicly available through the Service; or
• Disclosure is necessary to complete a transaction or function you request.

7.4 Legal Requirements and Protection

We may disclose information where reasonably necessary to:

• Comply with applicable law;
• Respond to a court order, subpoena, warrant, or governmental request;
• Investigate fraud or unlawful activity;
• Enforce our Terms of Service;
• Protect the security of the Service;
• Protect the rights or safety of Bacoor, users, or third parties; or
• Establish, exercise, or defend legal claims.

7.5 Business Transfers

Information may be disclosed or transferred in connection with:

• A merger;
• Acquisition;
• Corporate reorganization;
• Financing;
• Sale of assets;
• Transfer of the Service; or
• Insolvency or similar proceeding.

Where required by law, we will provide appropriate notice concerning such a transfer.

7.6 Third-Party Provision

Except as described in this Privacy Policy or otherwise permitted by law, Bacoor will not provide personal data to an independent third party without obtaining the individual’s prior consent.

Service providers processing information on Bacoor’s behalf are not treated as independent third-party recipients to the extent provided under applicable law.

8. International Processing and Transfers

The Service may use blockchain networks, infrastructure providers, cloud-service providers, analytics providers, and other service providers located outside Japan.

As a result, information may be processed or stored in countries or regions that have privacy and data-protection systems different from those of Japan.

Where required by applicable law, Bacoor will:

• Provide information concerning the foreign recipient or relevant privacy system;
• Obtain consent for an overseas transfer;
• Confirm that the recipient maintains an appropriate system for protecting personal information; or
• Implement another legally permitted transfer mechanism.

Public blockchain information may be distributed among nodes located in many countries. Because Bacoor does not control the location or operation of independent blockchain nodes, we may be unable to identify every country in which a public blockchain record is stored or processed.

9. Data Retention

We retain personal information only for as long as reasonably necessary for:

• The purposes described in this Privacy Policy;
• Providing the Service;
• Maintaining security;
• Resolving disputes;
• Enforcing agreements;
• Satisfying accounting or audit requirements; and
• Complying with legal obligations.

Retention periods may vary depending on the type of information and the reason it was collected.

We may retain:

• Support records for a reasonable period after an inquiry is resolved;
• Security logs for as long as necessary to investigate and prevent misuse;
• Transaction-related records as required for operational, accounting, or legal purposes; and
• Records necessary to demonstrate compliance with legal obligations.

Information permanently stored on a public blockchain may remain available indefinitely and may not be deletable by Bacoor.

We may anonymize or aggregate information so that it can no longer reasonably identify an individual. Anonymized or aggregated information may be retained for analysis, security, and service-improvement purposes.

10. Security Measures

Bacoor implements reasonable and appropriate safeguards for personal information, taking into account the nature of the information, the risks involved, and applicable legal requirements.

These safeguards may include:

• Internal policies concerning personal information;
• Access controls;
• Authentication measures;
• Encryption in transit and, where appropriate, at rest;
• Logging and monitoring;
• Restrictions on employee and contractor access;
• Security training;
• Vendor-management procedures;
• Vulnerability management;
• Incident-response procedures;
• Backup and recovery measures; and
• Physical and organizational safeguards.

No method of internet transmission or electronic storage is completely secure. Bacoor cannot guarantee absolute security.

You are responsible for protecting your wallet, devices, passwords, authentication methods, and account credentials.

11. Personal Data Incidents

If Bacoor becomes aware of a loss, destruction, alteration, unauthorized disclosure, or other security incident involving personal data, we will investigate and take reasonable corrective measures.

Where required by applicable law, Bacoor will report the incident to the Personal Information Protection Commission of Japan and notify affected individuals.

Notifications may include:

• The nature of the incident;
• The categories of information affected;
• The likely cause;
• Potential consequences;
• Measures taken by Bacoor; and
• Steps individuals may take to protect themselves.

Public blockchain transactions resulting from a compromised private key may be irreversible and may not be recoverable by Bacoor.

12. Your Rights

Subject to the requirements and exceptions under applicable law, you may request:

• Notification of the purposes of use;
• Disclosure of retained personal data;
• Disclosure of records concerning third-party provision;
• Correction of inaccurate information;
• Addition of incomplete information;
• Deletion of information;
• Suspension or cessation of use;
• Erasure of retained personal data; or
• Suspension of provision to third parties.

To submit a request, contact us using the information in Section 19.

We may ask you to provide information reasonably necessary to:

• Confirm your identity;
• Confirm that you control the relevant wallet address;
• Identify the information concerned; and
• Prevent unauthorized or fraudulent requests.

We will respond within a reasonable period in accordance with applicable law.

A request may be refused or limited where permitted by law, including where disclosure would:

• Harm the rights or interests of another person;
• Materially interfere with Bacoor’s operations;
• Violate another law;
• Compromise security; or
• Require alteration of information that Bacoor does not control.

Bacoor may be unable to delete or modify information permanently recorded on a public blockchain. Where appropriate, we may instead remove or restrict information displayed through interfaces controlled by Bacoor.

13. Information About Other People

The Service may allow you to associate another person’s nickname, name, email address, or other information with a wallet address.

Before submitting information about another person, you are responsible for:

• Informing that person as appropriate;
• Obtaining any necessary consent;
• Confirming that the information is accurate;
• Ensuring that you have the right to submit it;
• Avoiding unnecessary or sensitive information; and
• Understanding whether the information will be publicly recorded.

You must not use KEYRING ADDRESS BOOK to publish another person’s personal information without authorization.

Bacoor may remove or restrict information from its interfaces where we reasonably believe it violates privacy rights, applicable law, or our Terms of Service. Such action may not remove information already recorded on a blockchain.

14. Children

The Service is intended for individuals who are at least 18 years old.

Bacoor does not knowingly collect personal information from children through the Service.

If you believe that a child has provided personal information to us, contact us. We will review the matter and take appropriate action where reasonably possible.

Information recorded on a public blockchain may not be removable by Bacoor.

15. Third-Party Wallets and Services

The Service may link to or interact with:

• Wallet applications;
• Wallet connection protocols;
• Blockchain networks;
• RPC providers;
• Block explorers;
• NFT marketplaces;
• Decentralized storage networks;
• Analytics services; and
• Other third-party websites or applications.

These services operate independently and may collect information under their own privacy policies.

Bacoor is not responsible for the privacy, security, or data-handling practices of independent third parties. You should review the applicable privacy policies before using those services.

16. Analytics and Aggregated Information

We may analyze technical and usage information to understand:

• Service traffic;
• Feature usage;
• Device and browser compatibility;
• Errors and performance;
• Security risks; and
• General usage trends.

Where possible, we may use aggregated or anonymized information that does not directly identify an individual.

We may use such information to operate, secure, improve, and develop the Service.

17. Do Not Track and Browser Controls

Some browsers provide “Do Not Track” or similar privacy signals.

Because there is not always a uniform technical standard for responding to these signals, the Service may not respond to every signal.

You may control certain tracking technologies through:

• Browser cookie settings;
• Device privacy settings;
• Consent tools displayed by the Service; and
• Settings provided by relevant third-party services.

18. Changes to This Privacy Policy

Bacoor may revise this Privacy Policy to reflect:

• Changes to the Service;
• New technologies;
• Changes in our information-handling practices;
• Security requirements;
• Legal or regulatory developments; or
• Changes to service providers.

The revised Privacy Policy will state its updated effective date.

Where changes are material, we will provide reasonable notice through the Service, the website, or another appropriate method.

Where consent is required for a new use or disclosure of personal information, we will obtain consent before carrying out that activity.

19. Governing Language

This Privacy Policy may be translated into multiple languages.

If any translated version conflicts with the English version, the English version will control, except where applicable law requires otherwise.