Privacy Policy
At GenZHeroes, your privacy and cryptographic account integrity are fundamental. This policy describes what information we collect, how it is secured, and your rights.
1. Information We Collect
We collect only the minimum necessary information to authenticate your identity, reward your creative achievements, and facilitate partner settlement integrations:
Username, email address, display name, optional hero bio, avatar URL, and topic interests.
Ecosystem destination data (optional MFS identifiers, cryptographic public wallet addresses, or settlement routing details provided for verified milestone redemptions).
IP address, User-Agent browser fingerprint, and session timestamps recorded for multi-accounting and account takeover prevention.
Public video URLs (YouTube, TikTok, Facebook, X) submitted for creator contest view verification.
2. How We Use Your Information
- To authenticate you into your dashboard and preserve active sessions securely.
- To ledger verified platform utility rewards (GZC) and achievement milestones into your account balance.
- To dispatch critical transactional notifications (settlement audit alerts, security notifications, contest verification results).
- To detect and prevent malicious automated botting, click farms, and fraudulent multi-accounting.
- To provide prompt two-way customer support when you submit inquiries via our Helpdesk.
3. Data Security & Cryptographic Protection
GenZHeroes employs enterprise-grade cryptographic standards to safeguard your account:
Passwords are never stored in plaintext. Passwords are keyed with a high-entropy server-side pepper and hashed with 12 bcrypt salt rounds.
Session tokens are issued via encrypted, HttpOnly, SameSite=Lax cookies that are immune to client-side XSS exfiltration.
All traffic between your browser and our servers is strictly encrypted using modern Transport Layer Security (TLS 1.3).
4. Cookies & Session Technologies
We strictly limit cookie usage to functional session management and authentication state. We do not sell your data to third-party data brokers, nor do we run invasive cross-site tracking scripts.
You can configure your browser to block cookies, although doing so will prevent you from signing in and accessing your wallet or creator dashboard.
5. Ecosystem Settlement Partners & Network Integrations
In accordance with our phased ecosystem roadmap, settlement destination data is transmitted via encrypted sandbox protocols to integrated partner gateways (MFS providers, commercial clearing banks, or public blockchain networks) solely to fulfill verified platform redemptions and ledger reconciliations.
6. Your Privacy Rights & Data Portability
You maintain full sovereignty over your data:
- You can edit your profile, avatar, and social links at any time in /settings.
- You can review your recent login and password change history in Security Settings.
- You can request a complete export of your ledger transactions or permanent account deletion by contacting our Support Desk.