A wallet and a name you chose.
That is essentially the whole account. This page describes what is actually stored, written against the code that stores it — not a template.
The short version
- We never ask for your email, phone number, or legal name.
- We never see your private keys or seed phrase. Ever. Nobody who does is us.
- There are no analytics, no trackers, and no advertising identifiers on this site.
- In the app, your location never leaves your phone.
- You can delete your membership yourself, in one place, permanently.
1 · What is stored
Your membership record is created when you claim a pass by signing a message with your wallet. Signing proves you hold the wallet; it never moves funds and never exposes a key.
| What | Why |
|---|---|
| Wallet address | It is your membership. Already public on-chain. |
| Display name | Optional, chosen by you, shown publicly on the grid. |
| Member number | Issued in order of joining. |
| Laps, check-ins, streaks | The ladder only means anything if attendance is recorded. |
| Joining price + referral source | The $WEN price when you joined, and whose link brought you in. |
| Daily $WEN balance snapshot | Drawn from public chain data, so your pass can show your own history. |
| Signed badge attestations | Only badges you explicitly chose to sign. |
| A session cookie (tps_s) | Keeps you signed in for 30 days. Random token, no personal data inside. |
One thing worth being precise about
To stop abuse, the API counts requests per minute, and that counter's key contains the requesting IP address. It is written to the database, used only for counting, and deleted automatically once its one-minute window expires. It is never attached to your membership record and never used to identify you.
2 · What is never collected
- No email, phone, address, date of birth or legal name. None of it is asked for, so none of it can leak.
- No private keys, seed phrases or recovery words. There is no field for one anywhere. Anyone requesting yours is stealing from you.
- No analytics or tracking pixels. No Google Analytics, no Meta pixel, no session recording.
- No advertising identifiers, and no data sold or shared with advertisers.
3 · The mobile app
The app asks for three permissions. Each is used on your device and nowhere else.
Location
If you allow it, the app notices when you arrive at a circuit on the race calendar, so your check-in is waiting for you instead of buried in a menu. Your coordinates are never transmitted to us or anyone else. The comparison happens on your phone; all that is stored — also on your phone — is the name of the venue you reached. Arriving never awards laps by itself: you still check in deliberately.
Camera
Used only to read a check-in QR code. Frames are decoded on-device and never uploaded or recorded.
Face ID / Touch ID
Optional lock on your pass. It is handled entirely by iOS — the app receives a yes or no, and never your biometrics.
On-device storage
Your session token is kept in the device Keychain so an operating-system update cannot silently sign you out. It is stored on that device only and excluded from backups restored onto another phone.
4 · Who else is involved
- Cloudflare — hosts the site and database, and sees ordinary web request data.
- Robinhood Chain and public RPC nodes — read on-chain balances and transfers. Public blockchain data.
- DexScreener — live $WEN price shown in the header.
- WalletConnect / Reown — only if you choose that method to connect a wallet.
- YouTube — embedded videos, loaded in no-cookie mode.
We do not sell your data. There is no advertising business here to sell it to.
5 · What is public on purpose
A society built on showing up has to show who showed up. Your member number, display name, laps and check-in history appear on the public grid and lap chart. Your wallet address is public on the blockchain by the nature of a blockchain — that is true whether or not this site exists.
6 · Deleting your membership
Open your pass, scroll to the bottom, and choose delete my account. You will be asked to type your wallet address to confirm. It happens immediately and cannot be undone.
Deleted: your member record, display name, check-ins, badges, balance history, backing records and session. Not deleted: a team's total funding, because those are on-chain transfers that belong to the teams and remain public on the blockchain regardless. Your $WEN is untouched — it lives in your wallet, never here.
If you rejoin later, you will be issued a new member number. The old one does not come back.
7 · Children
The Paddock Society is not directed at children under 13, and requires a self-custodial wallet to join. We do not knowingly hold data from a child.
8 · Changes and contact
If this policy changes materially, the date below changes with it, and the change will be described rather than quietly swapped in.
Questions, or anything here that does not match what you observe: hello@thepaddocksociety.org · @Wen_officialx
last updated 2026-08-16