Privacy

Updated 18 October 2026.

Who runs Wombat Rewards

MLX Foundation, Zeughausgasse 7A, 6300 Zug, Switzerland, runs Wombat Rewards (wombat.im and wombat.my) in partnership with Wombat, and is the controller of the data below. Questions and requests: support@mlx.app.

Who it’s for

The list is for people 16 and over. Some drops have their own age limit: the MLX.app drop is for people 18 and over.

What we keep

• Your email address, and your Wombat username if you give it.
• The country our host derives from your IP address (not the address itself), the site and language you signed up on, and when you signed up, confirmed or left.
• Proof of your consent: the version of the sign-up text you agreed to and the time you confirmed.
• Which of our emails you were sent, and whether you opened or clicked them (through a tracking pixel and tracked links).
• Visitor analytics for the site itself, as described in the MLX privacy policy.

Why

To send you the reward emails you asked for. The legal basis is your consent, which you give by ticking the box and confirming your email. You can withdraw it at any time.

Who else sees it

Resend (our email provider) and Vercel (our host) process it for us. Partners whose drops we email about, and Wombat, never get your address. We don’t sell it.

How long

Until you unsubscribe. After that we keep only a one-way hash of your address and the reason, so we never email you again. Unconfirmed sign-ups are removed after 30 days.

Your choices

Unsubscribe from any email in one tap, or on the unsubscribe page. To see, correct or delete what we hold about you, write to support@mlx.app. You can also complain to your data protection authority.

The full policy: mlx.app/privacy.