Privacy Policy
What we collect when you use Lovely Legends, why we collect it, how it is protected and what you can ask us to do with it.
Last updated:
1. Introduction
LF Labs (“we”, “our”, “us”) operates Lovely Legends. This policy explains how we collect, use, store and protect your information when you use the website, the Telegram Mini App, the bot and associated services.
2. Information we collect
- Telegram account information
- Your Telegram user ID, username, first and last name, language preference and profile photo, received from Telegram when you sign in. We never receive your Telegram password or login code.
- Email and security information
- If you set up web sign-in: your email address, a password stored only as a salted hash, one-time codes used to verify or reset it, and the session tokens that keep you signed in.
- Transaction information
- Deposits, withdrawals, orders, trades, staking positions, mining activity, referral relationships and reward claims, together with the balances they produce.
- Security and technical logs
- Sign-in attempts, IP address, approximate location derived from it, device and browser information, API key usage and the IP addresses a key is bound to.
- Usage analytics
- Pages visited, session duration and interaction events, used to understand how the product is used and where it fails.
- Things you send us
- The content of enquiries, listing applications, market-maker applications, support messages and complaints, including anything you attach to them.
3. How we use your information
- To provide the Platform: authenticate you, run your orders, move your funds, calculate and pay rewards
- To keep accounts and the market safe: detect fraud, account takeover, market abuse and abusive API use
- To meet legal and compliance obligations, including anti-money-laundering monitoring and lawful requests
- To communicate with you about your account, your transactions and material changes to the service
- To improve the product through aggregate analytics and error reporting
We do not sell your personal information, and we do not share it with advertisers or marketing companies.
4. Blockchain data is public and permanent
Deposits and withdrawals are recorded on public blockchains. That record is permanent, is visible to anyone through a block explorer, and cannot be deleted or amended by us or by you. Addresses associated with your activity may be linkable to each other by third parties analysing the chain.
5. Cookies and local storage
The website uses browser storage to keep you signed in and to remember preferences, and cookies where they are needed for security and delivery. The Telegram Mini App does not use browser cookies. Full detail, including the categories used and how to control them, is in the cookie policy.
7. Security practices
- Encrypted transport (TLS) on every connection to the Platform
- Passwords stored only as salted hashes; one-time codes are short-lived and single-use
- Web sessions are short-lived and can be revoked
- API secrets are shown once at creation and keys are bound to nominated IP addresses
- Withdrawals pass a review step before they are broadcast
- Access to production systems is restricted and logged
No system is perfectly secure, and we do not claim to be. We cannot guarantee absolute security of data transmitted to or stored on the Platform.
8. Data retention
Account data is retained while your account is open. Transaction records are retained for a minimum of five years to meet financial record-keeping and compliance expectations. Analytics data is deleted after 90 days. On account closure, personal data is removed within 30 days except where retention is required by law or where the record is on a public blockchain.
9. Your rights
- Access the personal data we hold about you
- Ask us to correct data that is inaccurate
- Ask us to delete your data, subject to legal retention requirements and to blockchain immutability
- Withdraw consent for non-essential processing, including analytics
- Object to or ask us to restrict a particular use of your data
To exercise any of these, email support@lflabs.fund from the address on your account, or message @john_lflabs on Telegram from the Telegram account the request concerns. We may need to verify that the request comes from you before we act on it.
10. Children
The Platform is not intended for anyone under 18. We do not knowingly collect information from minors. If we find that an account belongs to one, we will close it and delete the associated data.
11. International users
The Platform is reachable internationally and your data is processed where our servers and providers are located. By using the Platform you consent to that transfer. We aim to meet applicable data protection requirements in the jurisdictions where we operate.
12. Changes to this policy
We may update this policy. The date at the top of the page is the date of the current version, and material changes will be announced through the Platform.
13. Contact
Privacy questions and requests: support@lflabs.fund, or @john_lflabs on Telegram.
Important
This policy describes our current practice. It is not a certification, an audit result or a statement of regulatory status. If a change in law or in how the Platform works makes something here inaccurate, we will correct the page rather than leave the claim standing.
Contact
To make a data request, email support@lflabs.fund from your account address. If you are not satisfied with our response, the complaints process is the next step.