PLAIN WORDS. CLEAR EXPECTATIONS.

Privacy policy

Last updated: October 31, 2026

Website operator: Md Juwel. Contact: [email protected].

Who is responsible

Md Juwel, based in Finland, is the controller responsible for personal data processed to operate samacats.com and respond to enquiries. Use the contact email above for privacy questions or to exercise your rights. This policy covers this website; linked social networks, games, trading platforms and blockchain services have their own policies.

Website delivery and security

The website is a static site hosted on Cloudflare Pages and delivered through Cloudflare’s network. Requests involve technical information such as your IP address, requested URL, time, browser and device information, response status and security signals. Cloudflare processes this information to deliver pages, cache resources, detect abuse, prevent attacks and diagnose faults. The operator can view traffic and security information in the Cloudflare dashboard. The website application has no visitor accounts, contact forms, payment system or visitor database. A static design does not mean that no personal data is processed.

The legal basis for necessary delivery, fault diagnosis and proportionate security processing is legitimate interests under Article 6(1)(f) GDPR: making the requested website available and protecting visitors and the website from misuse. This processing is limited to those purposes; it is not used by us for advertising profiles. You can object to processing based on legitimate interests as explained below.

Security cookies and browser checks

Cloudflare Bot Fight Mode and client-side security are enabled. Cloudflare may run browser checks and receive technical reports about scripts, connections and cookies to detect bots or unsafe resources. Its cf_clearance security cookie stores verification results so a successful check need not be repeated on every request. The domain’s Challenge Passage setting is 30 minutes. That is the configured challenge-validity window, not a promise that every security cookie or server-side record expires after 30 minutes: checks can refresh verification and cookie expiry depends on the protection involved.

You can inspect or remove cookies through your browser settings. Blocking necessary security cookies may cause repeated checks or prevent access. These security functions are separate from advertising analytics. Details of cookies used by the protection service are available in Cloudflare’s cookie documentation (opens in a new tab).

Performance measurements

The domain uses Cloudflare Web Analytics in the mode that excludes visitor data in the European Union. In this mode Cloudflare does not inject the performance-measurement snippet for visitors it identifies as being in the EU. Elsewhere, the snippet may report page views, page-load timings and Core Web Vitals so we can understand website performance. This is separate from the request and security processing described above, which still applies to EU visitors.

Cloudflare states that Web Analytics does not use analytics cookies or localStorage and does not fingerprint individuals for analytics. We use the resulting performance reports to maintain and improve the website, not for personalised advertising. Where personal data is involved in receiving and securing these requests, we rely on the legitimate interests described above. See Cloudflare Web Analytics privacy information (opens in a new tab). The website does not use Google Analytics, advertising pixels or embedded social-media players.

Local interactions and external links

Fonts, photographs and video covers are served from this website. The mobile menu stores its open or closed state only in memory. Pressing Copy Address writes the displayed public token mint address to your clipboard; the website does not read your clipboard. Browsing the site and following its links do not require a wallet connection or a transaction signature.

Video covers and social, Roblox, trading and explorer buttons open external services. The browser is instructed not to send a referrer on these links, but the destination still receives your request and technical information. Interacting with that service, including any wallet connection or trade, is governed by its own terms and privacy policy. Public blockchain activity can be visible to others and cannot generally be erased by this website.

If you contact us

Emailing the published Gmail address provides us with your email address, message, any name or attachments you include and related correspondence. We use this information to answer your question and handle follow-up matters. Providing it is voluntary, but we may be unable to respond without a working reply address or sufficient details. Please send only information needed for your enquiry; never send seed phrases, private keys or passwords.

Ordinary enquiries are processed under our legitimate interest in responding to messages, Article 6(1)(f) GDPR. Requests to exercise statutory rights are processed to meet legal obligations, Article 6(1)(c), where applicable. Gmail is provided by Google and handles email delivery and storage under its applicable terms and Google Privacy Policy (opens in a new tab). Contacting us does not subscribe you to marketing.

Data retention

Ordinary correspondence is deleted from the operator’s mailbox within 12 months after the enquiry is closed. Records needed for a complaint, statutory request, legal obligation or dispute are retained only while needed to fulfil that obligation or resolve and, where necessary, establish, exercise or defend the relevant claim. Unnecessary attachments and duplicate copies should not be retained. Provider backup deletion may follow the provider’s own deletion cycle.

The application does not keep a separate archive of raw visitor requests. Cloudflare maintains technical records and dashboard reports under its service-specific retention arrangements. The relevant criteria are the time needed to deliver and troubleshoot the service, investigate security incidents, prevent recurring abuse and comply with applicable legal obligations; different datasets can have different lifetimes. The 12-month email rule does not apply to Cloudflare’s logs or performance reports. Cloudflare explains its retention criteria in its Privacy Policy (opens in a new tab). Contact us for information about a particular request or dataset rather than assuming that all logs have one fixed lifetime.

Recipients and international processing

Data needed for hosting, delivery, security and performance measurement is processed by Cloudflare and the subprocessors used to provide those services. Cloudflare acts as a processor for customer personal data covered by its Data Processing Addendum and describes its separate responsibilities for other data in its Privacy Policy. Email correspondence is handled through Google’s Gmail service. The operator may also disclose relevant information where required by law or necessary to handle a legal claim. We do not sell visitor information or provide it to advertisers.

These providers operate internationally, including outside the European Economic Area. For transfers that require safeguards, Cloudflare’s Data Processing Addendum (opens in a new tab) describes the applicable transfer framework, including Standard Contractual Clauses where required. Its subprocessor list (opens in a new tab) identifies service providers and locations. Google describes its international processing and transfer safeguards in the policy linked above. You can contact us for further information about safeguards relevant to your data. We do not promise that all processing stays in Finland or the EU.

Your rights

Subject to the conditions of the GDPR, you can request access, correction, erasure or restriction of your personal data and, where applicable, portability. You can object on grounds relating to your particular situation to processing based on legitimate interests. If we ever rely on consent for a specific activity, you can withdraw it without affecting earlier lawful processing. We do not use personal data to make solely automated decisions with legal or similarly significant effects on you.

Send requests to the operator email above. We may ask for proportionate information to identify the data concerned and verify that it is yours; do not send identity documents unless specifically needed and requested. We normally respond within one month. If a lawful extension is necessary because of complexity or the number of requests, we will explain it within that first month. Rights have legal limits, and we cannot remove public blockchain records or data controlled independently by an external platform.

You may complain to the Office of the Data Protection Ombudsman in Finland (opens in a new tab) or another competent supervisory authority, including in the EEA country where you live or work. You do not have to contact us first.

Children and changes to this policy

The website does not offer child accounts or solicit children’s personal information. If a child has sent unnecessary personal information, a parent or guardian can contact us about its removal. External games and crypto services set their own age and eligibility requirements; viewing cat stories does not establish eligibility to trade.

We update this notice when our processing changes and show the revision date above. Before introducing new forms, embedded media or tracking, we assess the data use and obtain consent where required. See our Terms & risk disclosure for website-use information.