Privacy & essential storage
Effective October 21, 2026 · Notice version 2026-10-21-v2
Browsing does not enroll you in an airdrop. The registration checkbox starts unchecked. No wallet connection, wallet signature, payment, recovery phrase or private key is required. Optional marketing and advertising trackers are not installed by this website.
Who operates this website
This notice concerns firstnest.org, operated for the independent First Nest project. For privacy requests, contact the site operator through the owner-designated WhatsApp contact, +1 (425) 547-8210. This is not a government service, registered-charity claim, or official Trump Accounts application.
What we process and why
| Activity | Information and purpose | Retention |
|---|---|---|
| Normal browsing | Technical requests can include IP address, requested path, browser details and time. Hosting and, when active, Cloudflare process these to deliver and secure the site. | Origin web logs rotate daily with 14 archived logs. Cloudflare applies its own service retention. |
| Airdrop registration | Your public Solana address, submission time, consent version, reference and notification status are stored privately for manual eligibility review. We do not request a name, email, ID, or Telegram account. | Pending queue entries are removed after 90 days. Private daily backup copies can persist for up to 14 further daily backup cycles. |
| Abuse prevention | An HMAC-derived IP identifier is used to limit submissions; raw IPs are not stored in the registration database. Requests are also limited at the web server. Registration API access logging is disabled; error/security infrastructure may still process technical request data. | Application rate-limit identifiers expire after about one hour; cleanup runs in the background. |
| Completed rewards | Previously paid public addresses and transaction records are checked to enforce one reward per address. Public blockchain transactions cannot be deleted by us. | Payment and exclusion records are retained to prevent repeat rewards and maintain the public distribution record. |
Telegram administrator notifications
The registration checkbox explicitly covers storing your address and sending an administrator notification through @FIRSTNESTBOT, once configured. A notification contains the public address, time and reference, not your IP, browser fingerprint, name or contact details. It is sent only to the operator-designated private administrator chat, not a public channel or group. Bot conversations are Telegram cloud messages, not Secret Chats. If notifications are unavailable, the private website queue remains available for review. See Telegram’s privacy policy.
If you do not want this processing, do not submit the form. You can still browse the website. Contact the operator if you wish to discuss a review method without Telegram notification. Withdrawal or deletion requests do not guarantee a reward or erase an already public blockchain transaction. Telegram copies and provider records may require separate handling under their policies.
Hosting, Cloudflare and international processing
The origin VPS is hosted in Singapore. If Cloudflare DNS/CDN proxying is active, Cloudflare processes website traffic through its network, which may include locations outside your country. HTTPS is used between the browser, Cloudflare and the origin under Full (strict) configuration when proxying is active. Airdrop request data travels through the proxy to the origin; Cloudflare is not a claim administrator. Read Cloudflare’s privacy policy and security-cookie information. Source-server backups are private; administrator access is restricted.
Cookies and browser storage
nest-airdrop-seenin session storage remembers that you closed the entry notice for the current tab/session.nest-privacy-notice-v2in local storage remembers that you acknowledged the essential-storage notice. It is not advertising consent.- Cloudflare may set necessary security cookies, such as challenge clearance, depending on active protections. These do not enroll you in an airdrop.
- No Google Analytics, advertising pixels or optional third-party embeds are loaded by our site code. External social, venue and contact links open the respective provider only when you choose them.
You can clear these site-storage entries in your browser. The footer’s “Privacy & storage” link always opens this notice. If optional tracking is introduced later, this notice and the required preference controls must be updated before it is enabled.
Your choices and requests
Depending on applicable law, you may have rights to access, correction, deletion, restriction or objection. Contact the operator to request review or withdraw registration authorization. Quote your reference if available. We may need reasonable proof that a request relates to your address, but will never ask for a recovery phrase, private key or payment. Unpaid registration does not prove ownership or eligibility. We do not sell the registration list or use it for unsolicited marketing.
Security and essential delivery are processed to operate and protect the site; voluntary registration is based on your explicit request and authorization. This describes the deployed features, not a claim that every jurisdiction’s requirements are automatically satisfied.