LEGION / Legal
Privacy Policy
How Waypoint Inc. collects, uses, and protects information connected to LEGION and the World Pass portal. Last updated 30 May 2026.
01Who we are
LEGION is operated by Waypoint Inc. (Waypoint, we, or us). This Privacy Policy explains what information we collect through the LEGION website and quest portal at playlegion.gg and legionwaitlist.com (together, the Services), how we use it, who we share it with, and the choices you have.
02Information you give us
When you join the waitlist or use the portal, we collect the email address you submit, any X (Twitter) profile details you choose to connect (such as your handle, display name, and avatar), an optional blockchain wallet address you save for future mint readiness, and the contents of any message you send us.
03Information created through use
As you use the portal we record quest and task completions, rank and experience (XP), referral relationships and codes, leaderboard standing, daily streaks, and similar progress tied to your profile.
04Information collected automatically
Like most websites, we and our providers automatically collect device and usage data — such as IP address, browser and device type, pages viewed, referring URLs, and campaign or UTM parameters — using cookies and similar technologies, to operate, secure, measure, and improve the Services.
05Authentication
Sign-in and identity are handled by our authentication provider, Clerk. When you sign in (including through X), Clerk processes your credentials and basic profile data on our behalf. We never receive or store your social account password.
06Cookies and analytics
We use strictly necessary cookies to keep you signed in and the portal working, and analytics and advertising technologies — including the Meta (Facebook) Pixel and the X (Twitter) Pixel — to understand traffic and measure campaigns. You can control non-essential cookies through your browser settings and the opt-outs offered by those platforms.
07How we use information
We use information to operate the waitlist, quests, rank system, referrals, and leaderboards; to prepare and administer World Pass mint access; to send service and marketing emails you have opted into; to detect and prevent fraud, abuse, and bot activity; to comply with legal obligations; and to improve the Services.
08How we share information
We do not sell your personal information. We share it only with service providers who process it for us under contract — including Clerk (authentication), Cloudflare (hosting and database), Kit (email delivery), and Mux (video) — and with advertising partners such as Meta and X for measurement. We may also disclose information where required by law or to protect our rights, our users, or the integrity of a mint.
09Wallet and blockchain data
Any wallet address you save is stored against your profile so we can prepare future mint and claim mechanics. Public blockchains are, by nature, permanent and visible to anyone; once a wallet transacts on-chain, that activity is outside our control and cannot be deleted by us. No signature, transfer, or wallet connection occurs until a real mint flow is launched and clearly presented to you.
10Data retention
We keep your information for as long as your profile is active and as needed to run the waitlist and mint, and then for any period required to meet legal, accounting, or fraud-prevention obligations, after which we delete or anonymise it.
11Security
We use technical and organisational measures designed to protect your information, including encryption in transit and access controls. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
12Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can unsubscribe from marketing emails using the link in each email, and you can request removal of your waitlist profile before mint. To exercise these rights, contact us through the Contact page.
13International transfers
We operate globally and may process information in countries other than your own, including the United States. Where required, we use appropriate safeguards for those transfers.
14Children
The Services are not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
15Changes to this policy
We may update this Policy from time to time. We will revise the date above and, for material changes, provide additional notice through the Services. Continued use after an update means you accept the revised Policy.
16Contact
Questions about this Policy or your information can be sent through the LEGION Contact page at playlegion.gg/contact. Waypoint Inc. is the controller responsible for your personal information.