Skip to main content
VisionProtocolCredentialsBlog
← Back to home

Privacy Policy

Last updated: October 18, 2026

m&WDAO (“we”, “us”) operates the m&W · EcoFi website (cmw.place) and the EcoFi m&W app (app.cmw.place, the “App”). This policy explains what information we collect when you visit these sites and use the App, how we use and share it, the safeguards we apply, and the rights and choices you have.

The App follows a Web3 “wallet as identity” design: you sign in by connecting a crypto wallet and signing a message. We do not operate a username-and-password system, and we do not ask for your name, email address, or phone number. We collect only what is necessary to provide the service.

1. Scope

This policy applies to the products and services we provide through:

  • the m&W · EcoFi website (cmw.place and its subdomains);
  • the EcoFi m&W app (app.cmw.place), including the feed, supernodes, mining machines, and NFT minting features;
  • any clients we distribute through other app marketplaces or channels; their embedded pages and backend services are covered by this policy as well.

This policy does not cover third-party websites or services (such as your wallet provider or the blockchain networks themselves), which are governed by their own privacy policies.

2. Information We Collect

2.1 Wallet address and login signature

When you connect a wallet to sign in, we collect your wallet address(a public on-chain identifier) and the signature message used to verify the login (a one-time challenge containing no asset approvals). Signing takes place locally in your wallet; we cannot and will never access your private key or recovery phrase. We do not collect passwords, email addresses, phone numbers, or government ID.

2.2 Content you publish

When you use the publishing feature to post or comment, we store the content you submit (text, links, and any attached media), the publication time, and the associated wallet address. By design, this content is publicly visible to other users.

2.3 On-chain activity data

On-chain actions you initiate in the App (such as NFT minting, mining machine participation, supernode-related transactions, or token claims) invoke your connected wallet and submit transactions to the relevant blockchain network. The resulting records (wallet address, amounts, timestamps, contract interactions) are stored on thepublic blockchain, where anyone can look them up (see “4. Public nature of blockchain data”). This data is stored and controlled by the blockchain network, not by us.

2.4 Technical and access data

Like most online services, we automatically collect a limited set of technical data to keep the service secure and stable, including: your IP address (and the approximate region derived from it), access times, browser type and version, operating system, device model, language settings, and error and performance logs. The website also stores theme and language preferences locally (see “6. Cookies and local storage”).

3. How We Use Information

We use the information we collect only for the following purposes:

  • verifying your login and associating it with the content you publish and the activities you take part in;
  • providing and maintaining product features (feed, NFT minting, mining machines, supernodes, etc.);
  • displaying public content and on-chain credentials (such as your minting records or participation status);
  • detecting and preventing abuse, fraud, spam, and security attacks;
  • analyzing how the service is performing and improving performance, stability, and the product experience;
  • complying with applicable laws and with lawful requests from regulators and judicial authorities.

We do not sell your personal information, and we do not process it for purposes unrelated to those listed above.

4. Public Nature of Blockchain Data

By design, blockchain data is public, immutable, and generally impossible to delete. Once a transaction associated with your wallet address is confirmed (including mints, participations, and transfers), it is stored redundantly across the entire network, and we have no technical means to alter or remove it. The deletion mechanisms described in “8. Retention and deletion” therefore do not apply to data already recorded on-chain. Please make sure you understand this before initiating any on-chain action.

5. Sharing and Disclosure

We do not disclose your personal information to third parties except as follows:

  • Blockchain networks: as described above, transactions you initiate are broadcast to the relevant blockchain network and recorded publicly;
  • infrastructure and service providers: we rely on third-party infrastructure (website and app hosting, data storage, CDN, traffic analytics) to operate the service; they process data on our behalf only to the extent necessary and are bound by confidentiality and security obligations;
  • legal requirements: where required by law, regulation, or competent authorities, or where necessary to protect the rights, property, and safety of us and our users;
  • business reorganization: in a merger, acquisition, or asset transfer, data may be transferred with the business; we will ensure the recipient remains bound by this policy or a policy at least as protective.

6. Cookies and Local Storage

We use a small number of cookies and browser local storage (localStorage) to keep the service running, including:

  • login state: remembering your verified wallet session so you do not need to sign repeatedly;
  • preferences: the website’s theme (dark / light) and language preference, including a language preference shared with app.cmw.place;
  • security and performance: identifiers and statistics needed to counter abuse.

These items are strictly necessary for product functionality or used for anonymous statistics; they are not used for cross-site advertising tracking. You can clear or disable cookies and local storage in your browser settings, though doing so may log you out and reset your preferences.

7. Data Security

We protect off-chain data with industry-standard technical and organizational measures, including encryption in transit (HTTPS), access control and least privilege, and log auditing. That said, no transmission or electronic storage is absolutely secure, and we cannot guarantee that any measure is fully effective.

A special note: a legitimate decentralized application will never ask for your private key or recovery phrase. If any page, “support agent”, or community member asks for them under our name, or asks you to send funds to an unfamiliar address, it is almost certainly a scam. In the event of a data security incident, we will assess the impact promptly and notify affected users through reasonable channels such as in-app announcements.

8. Retention and Deletion

For off-chain data, we retain information as long as necessary for the purposes described in this policy: login and signature records are kept while your account exists; technical and access logs are kept for a limited period consistent with industry practice; content you publish is kept until you delete it or we remove it for policy violations.

You can remove your own posts through the product’s deletion features. To delete your account or other personal data, contact us as described in “12. Contact us”; after verifying your identity, we will process the request within a reasonable period. Once processed, the data will be deleted or anonymized, except for data already recorded on-chain, which cannot be deleted (see “4. Public nature of blockchain data”), and except where retention is required for backups or by law.

9. Your Rights and Choices

Depending on the laws of your jurisdiction (such as the GDPR or CCPA), you may have the following rights:

  • right to know and access: learn about and obtain the personal information we hold about you;
  • right to correct: correct inaccurate personal information;
  • right to delete: request deletion of your personal information to the extent permitted by law;
  • right to withdraw consent / opt out: withdraw consent previously given, or request that specific processing stop;
  • right to refuse sale / sharing: we do not sell personal information, so there is nothing to opt out of — we state this here for clarity.

To exercise these rights, reach out via “12. Contact us”. Because the wallet address is your core identifier, we may ask you to complete a wallet signature to verify your identity.

10. Minors

The App is not directed at minors, and we do not knowingly collect personal information from minors. If you are under 18, please do not use the App or submit personal information to us. If we learn that we have inadvertently collected information from a minor, we will delete it promptly. Guardians who discover a minor using the App are encouraged to contact us.

11. Changes to This Policy

We may revise this policy from time to time. Revisions will be published on this page with the “Last updated” date at the top revised accordingly. If a revision materially affects your rights, we will give advance notice through reasonable channels such as in-app announcements. The revised policy takes effect when published; by continuing to use our services after a change, you accept the revised policy.

12. Contact Us

If you have any questions, comments, or requests about this policy or our handling of personal information, you can reach us at:

We take every message seriously and aim to respond within a reasonable period (usually no more than 30 days). If you believe our processing of your personal information violates the laws of your jurisdiction, you also have the right to lodge a complaint with your local data protection authority.