Privacy Policy

This Privacy Policy explains how Ugauga GmbH collects and processes personal data when you visit Lucky-Charm-Eggheads.com, contact us, interact with the website, purchase an artwork, or use functions connected to the Lucky Charm Eggheads project.

1. Controller

The controller responsible for data processing on this website is:

Ugauga GmbH
Zurich, Switzerland
Email: info@ugauga.ch

Ugauga GmbH operates Lucky-Charm-Eggheads.com and develops the Lucky Charm Eggheads and Eggheads.World projects through the Ugauga artist collective.

Website:
https://lucky-charm-eggheads.com

2. Applicable Data Protection Law

We process personal data in accordance with applicable Swiss data protection law, particularly the Swiss Federal Act on Data Protection.

Where the European General Data Protection Regulation applies to specific processing activities, we also observe its applicable requirements.

3. Personal Data We Process

Personal data is information relating to an identified or identifiable natural person.

Depending on how you use the website, we may process the following categories of data:

technical data transmitted when accessing the website
contact details and message content
information submitted through forms
order, billing, delivery, and payment information
information connected to artworks, Fine-Art Editions, certificates, exhibitions, or collaborations
publicly accessible wallet and blockchain information
analytics data relating to website use

We process only the data required for the respective purpose.

4. Visiting the Website

The website can generally be visited without providing your name or direct contact details.

When the website is accessed, the hosting provider and web server may automatically record technical information in server log files. This may include:

IP address
date and time of access
requested page or file
browser type and version
operating system
referring website
transmitted data volume
access status or error messages

This information is required to deliver the website reliably, ensure its technical operation, identify errors, and protect the website against misuse and attacks.

Server log data is not combined with other information to identify individual visitors unless this is necessary to investigate unlawful use or a security incident.

5. Hosting in Germany

The website and its technical infrastructure are hosted on servers located in Germany.

The hosting provider may process technical data, including IP addresses and server log information, where this is necessary to host, maintain, secure, and operate the website.

Germany is part of the European Economic Area and is subject to European data protection law.

We select hosting and technical service providers with appropriate technical and organizational security measures and limit their access to the information required for their respective tasks.

6. Contacting Us

When you contact us by email or through a contact form, we process the information you provide, including:

name
email address
telephone number, where provided
organization or company
subject of the enquiry
message content
any documents or information submitted with the enquiry

We use this information to respond to your request, communicate with you, and process any resulting collaboration, transaction, or contractual relationship.

The information is retained for as long as necessary to process the enquiry and comply with contractual, accounting, documentation, or legal obligations.

Please do not transmit confidential or sensitive personal information unless it is necessary for your enquiry.

7. Matomo Analytics

We use Matomo to understand how the website is used and to improve its structure, content, performance, and user experience.

Matomo is operated within infrastructure controlled by us or by a service provider acting on our behalf. Analytics data is not shared with Matomo as an independent advertising provider.

The analytics configuration is designed to operate without analytics cookies. We do not use Matomo to create personal advertising profiles or to track visitors across unrelated websites.

The information collected may include:

pages visited
approximate time of access
referring page
browser and device category
operating system
general technical usage information
shortened or anonymized IP information

The resulting statistics help us evaluate the use of the website without identifying individual visitors.

8. Cookies and Local Storage

The website is designed to use as few cookies and comparable storage technologies as possible.

Technically necessary cookies or local storage may be used where required for functions such as:

website security
session management
language selection
form processing
shopping cart and checkout functions
customer accounts
administrative functions
remembering technical preferences
connecting MetaMask
initiating minting or blockchain transactions

These technologies are used to provide the requested website functionality and are not intended for cross-site advertising or behavioural profiling.

You can configure your browser to block or delete cookies and locally stored information. Some website functions may be limited if technically necessary storage is disabled.

9. Locally Hosted Fonts and Website Resources

Fonts used on the website are hosted locally.

When the website is displayed, font files are loaded from our own website infrastructure rather than directly from external font providers. This prevents the visitor’s browser from contacting an external font service solely to display the website typography.

Other design and script resources are also hosted locally wherever reasonably possible.

10. Google Maps

Google Maps is embedded on the contact page to display the location of Ugauga GmbH.

Google Maps is a service provided by Google. When the contact page and the embedded map are loaded, technical information such as your IP address, browser data, device information, and the page visited may be transmitted to Google.

Depending on your settings and whether you are signed into a Google account, Google may associate this information with your Google account.

Google may process information in countries outside Switzerland or the European Economic Area.

The location and contact details of Ugauga GmbH can also be accessed without interacting with the map.

11. Social Media and External Websites

The website may contain links to social media platforms, blockchain services, marketplaces, partner websites, and other external websites.

A connection to an external provider is generally established when you click the corresponding link or activate embedded external content.

Once you leave our website, the processing of personal data is governed by the privacy policy and terms of the respective external provider. We have no control over the data processing practices of independent third-party websites.

12. MetaMask

The website may allow you to connect a MetaMask wallet for minting and other blockchain-related functions.

MetaMask is an external digital wallet service. When you connect MetaMask, information such as the following may be processed:

public wallet address
selected blockchain network
connection status
transaction requests
transaction identifiers
smart-contract interactions
publicly accessible blockchain records
technical connection information

The connection and transaction must be confirmed by you within MetaMask.

Ugauga GmbH does not receive or store:

your private wallet key
your Secret Recovery Phrase or seed phrase
your MetaMask password

You should never send this information to Ugauga GmbH or enter it into a form on Lucky-Charm-Eggheads.com.

MetaMask processes information independently according to its own privacy policy, security settings, and technical procedures.

13. Minting and Blockchain Data

When a character is minted as a Lucky Charm Egghead, the transaction is recorded on the Ethereum Mainnet.

Public blockchain data may include:

public wallet addresses
transaction identifiers
transaction amounts
transaction times
token identifiers
smart-contract interactions
transfers between wallet addresses

Blockchain information is public and distributed through a decentralized international network.

Transactions recorded on the Ethereum Mainnet are generally permanent. Ugauga GmbH cannot alter or delete information that has already been recorded on the blockchain.

A public wallet address may constitute personal data where it can be connected to an identifiable person.

External wallet providers, blockchain gateways, marketplaces, node operators, and other network participants process information independently according to their own privacy policies and technical procedures.

14. Fine-Art Editions and Purchases

When you enquire about or purchase a Fine-Art Edition, artwork, certificate, or related service, we process the information required to handle the request or transaction.

This may include:

name and contact details
billing address
delivery address
artwork and order information
payment and transaction information
correspondence
certificate and provenance information
information required for shipping, accounting, or legal documentation

Information relating to provenance, certification, editions, and the documented history of an artwork may be retained for longer periods where this is necessary to preserve authenticity and provenance.

15. WooPayments

We use WooPayments to process payments made through our online shop.

WooPayments is a payment service integrated into WooCommerce and operates in cooperation with payment and financial infrastructure partners, including Stripe.

When you make a payment, information required to process and verify the transaction may be transmitted to WooPayments, Automattic, Stripe, participating financial institutions, card networks, and other payment service providers.

The information processed may include:

name
billing address
delivery address
email address
telephone number, where provided
order details
purchase amount and currency
payment method
payment card or account information
IP address
browser and device information
fraud-prevention and transaction-risk information
transaction identifiers

Payment card information is processed through the payment service infrastructure. Ugauga GmbH normally receives only the information required to confirm, administer, refund, and document the transaction.

WooPayments and its payment partners may process information in countries outside Switzerland or the European Economic Area according to their own privacy policies and applicable contractual safeguards.

16. Customer Accounts and Orders

When you create a customer account or place an order, we may process:

account login information
name and contact details
billing and delivery addresses
order history
shopping cart information
payment status
correspondence relating to the order

This information is used to provide the customer account, process orders, manage deliveries, handle support requests, and meet accounting and legal obligations.

Passwords are stored in protected form. You are responsible for keeping your login information confidential.

17. Purposes of Data Processing

We process personal data for purposes including:

providing and securing the website
responding to enquiries
communicating about the Lucky Charm Eggheads and Eggheads.World
enabling MetaMask connections
enabling minting and blockchain-related functions
processing purchases and payments
administering orders and deliveries
managing customer accounts
documenting artworks, editions, certificates, and provenance
organizing exhibitions, collaborations, and events
analysing and improving the website
preventing fraud, misuse, and security incidents
fulfilling contractual, accounting, tax, and legal obligations
establishing, exercising, or defending legal claims

We process personal data where this is necessary for our legitimate interests, to perform or prepare a contract, to comply with a legal obligation, or on the basis of consent where consent is required.

18. Disclosure of Personal Data

Personal data may be disclosed to recipients where this is required for the purposes described in this Privacy Policy.

Possible recipients include:

hosting and IT service providers
website maintenance and security providers
Automattic and WooPayments
Stripe and other payment service providers
banks, card networks, and financial institutions
delivery and logistics providers
printing and production partners
accounting, legal, and advisory service providers
exhibition and collaboration partners
MetaMask
wallet, blockchain, node, and smart-contract service providers
Google in connection with Google Maps
public authorities and courts where legally required

Service providers acting on our behalf receive only the information required for their respective tasks.

Blockchain transactions are transmitted to a decentralized public network and are visible to network participants and the public.

19. Processing Outside Switzerland

The website is hosted in Germany, and personal data is primarily processed in Switzerland and the European Economic Area.

Certain external services, particularly Google Maps, MetaMask, WooPayments, Stripe, blockchain infrastructure, marketplaces, and international technology providers, may process information in other countries.

Where personal data is transferred to a country without a legally recognized adequate level of data protection, appropriate safeguards are used where required and reasonably available. These may include contractual data protection clauses or other legally recognized measures.

Information published on the Ethereum Mainnet is distributed through a decentralized international network. Its geographical processing and storage locations cannot be limited by Ugauga GmbH.

20. Data Retention

We retain personal data only for as long as necessary for the relevant processing purpose or as required by contractual, accounting, tax, documentation, or legal obligations.

The applicable retention period depends on the type of information and its purpose.

Server and security data is generally retained for a limited period unless it is required to investigate an incident.

Correspondence and transaction records may be retained for the duration of the business relationship and the applicable statutory retention periods.

Order, billing, and payment records may be retained as required by Swiss accounting and tax law.

Information required to document the authenticity, provenance, certification, edition, or history of an artwork may be retained on a long-term basis.

Public blockchain information remains available according to the technical characteristics of the Ethereum Mainnet.

21. Data Security

We use appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, misuse, alteration, or disclosure.

These measures may include:

encrypted transmission using SSL/TLS
access restrictions
authentication and authorization controls
system and software updates
backups
security monitoring
protection against automated attacks
internal access limitations

No electronic transmission or storage system can provide absolute security.

22. Your Rights

Subject to applicable data protection law and any legal restrictions, you may have the right to:

request information about personal data processed about you
receive a copy of your personal data
request the correction of inaccurate data
request the deletion of personal data
object to or request the restriction of certain processing
withdraw consent with effect for the future
request the release or transfer of certain data
lodge a complaint with a competent data protection authority

These rights may be restricted where processing or retention is required by law, contract, overriding interests, the protection of third parties, or the establishment and defence of legal claims.

Information recorded on the Ethereum Mainnet cannot generally be corrected or deleted by Ugauga GmbH.

Requests relating to data protection can be sent to:

info@ugauga.ch

We may request appropriate proof of identity before responding to a request.

23. External Privacy Policies

External providers process information according to their own privacy policies. This applies particularly to:

Google Maps
MetaMask
WooPayments
Automattic
Stripe
Ethereum and blockchain infrastructure providers
NFT marketplaces
social media platforms
linked third-party websites

We recommend reviewing the privacy information of these providers before using their services.

24. Changes to This Privacy Policy

We may update this Privacy Policy when our website, services, technologies, legal obligations, or data processing activities change.

The version published on this website at the time of your visit applies.

Version 4.0 – July 2026, Zurich