DOOMS PROTOCOL — PRIVACY POLICY

DOOMS PROTOCOL is owned, operated, and conducted by R3actr Innovations LLP.

R3actr is responsible for operating the event website, processing registrations, administering participation, managing submissions, coordinating judging, communicating with participants, administering prizes or recognition, and maintaining the event platform.

The NCA exists only within the fictional universe of DOOMS PROTOCOL. When this Privacy Policy uses the terms "R3actr", "we", "us", or "our", those terms refer to R3actr Innovations LLP and not to the fictional NCA.

This Privacy Policy applies to personal information collected through the DOOMS PROTOCOL website, registration process, event platform, submission process, support channels, and other services directly operated by R3actr in connection with the event.

It also applies to information you voluntarily provide to R3actr through official event communication channels.

This Policy does not govern the privacy practices of third-party platforms that you may use during the event, such as GitHub, Discord, payment providers, hosting providers, or social media platforms. Those services operate under their own terms and privacy policies.

The information we collect depends on how you interact with DOOMS PROTOCOL.

R3actr may use collected information for the following purposes:

Where applicable law requires a legal basis for processing personal information, R3actr may process information based on one or more of the following grounds:

• Consent: where you have voluntarily provided consent for a specific processing activity.

• Contract or event participation: where processing is necessary to provide the event or services you have requested.

• Legitimate interests: where processing is reasonably necessary for event administration, security, fraud prevention, platform improvement, or protection of rights, provided those interests are not overridden by applicable rights.

• Legal obligations: where processing is necessary to comply with applicable law or a lawful request.

The applicable legal basis may vary depending on the information and the purpose for which it is processed.

DOOMS PROTOCOL is a public developer event. Certain information associated with participation may be made publicly available as part of the event. This may include:

Participants generally retain ownership of intellectual property in projects they submit, subject to any separate terms applicable to a specific challenge, sponsor, third-party component, or prize.

Submitting a project gives R3actr the permissions reasonably necessary to access, review, test, evaluate, and display the submitted material for the purposes of conducting and documenting DOOMS PROTOCOL.

This may include displaying project names, descriptions, screenshots, demo videos, repository links, deployment links, selected technical details, and winner or finalist information.

Participants are responsible for ensuring that they have the necessary rights to submit all materials and that their submission does not violate another person's intellectual property, privacy, confidentiality, or other rights.

Participants must not submit passwords, API keys, access tokens, private certificates, private cryptographic keys, payment credentials, or other confidential authentication information as part of a public submission.

If sensitive information is accidentally submitted, contact the organizers as soon as possible.

Participants are responsible for securing credentials used by their own applications, repositories, cloud services, databases, and deployments.

R3actr will not request your password, payment PIN, private API key, or similar secret credential through ordinary event communications.

DOOMS PROTOCOL may use third-party services to operate the event.

These may include services for payment processing, website hosting, cloud infrastructure, authentication, email delivery, source-code hosting, project deployment, community communication, analytics, file storage, video hosting, and registration (such as GitHub, Discord, payment gateways, and cloud providers).

When you use a third-party service, that service may independently collect and process information under its own privacy policy and terms.

R3actr is not responsible for the privacy practices, security practices, availability, or policies of independent third-party services.

DOOMS PROTOCOL may require a registration fee.

If a registration fee applies, the applicable fee, currency, payment method, registration period, and relevant conditions will be displayed on the registration page before payment is completed.

Registration fees, where applicable, are paid to or processed for the benefit of the event organizer, R3actr Innovations LLP, subject to the applicable payment provider's processing terms.

Payment of a registration fee does not guarantee selection as a weekly winner, finalist, prize recipient, or any particular event outcome.

Refunds, cancellations, transfers, and related conditions will be governed by the applicable registration and event terms presented at the time of registration.

DOOMS PROTOCOL may offer prizes, awards, certificates, titles, or other forms of recognition.

The availability, nature, value, eligibility requirements, and distribution of prizes may vary and will be communicated through official event materials.

Prizes may be subject to additional eligibility, verification, tax, delivery, or sponsor-specific requirements.

Weekly recognition may include fictional titles such as Communication Restorer, Navigation Restorer, Commerce Restorer, or Knowledge Restorer.

These titles are part of the DOOMS PROTOCOL narrative and do not represent government appointments, professional certifications, or official credentials issued by the fictional NCA.

Registered participants may receive communications necessary to operate DOOMS PROTOCOL.

These may include registration confirmations, weekly mission announcements, recovery briefings, challenge updates, deadline reminders, submission confirmations, judging updates, winner announcements, and important operational notices.

Because these communications may be necessary for participation, opting out of them may not always be possible while you remain an active participant.

Where we send optional promotional communications, an appropriate unsubscribe or opt-out mechanism will be provided where required by applicable law.

We may use analytics, logging, monitoring, or performance tools to understand how the DOOMS PROTOCOL website and event infrastructure are used.

This may include information about page visits, device types, approximate geographic regions, traffic sources, performance issues, errors, and general interaction patterns.

Analytics information may be aggregated or de-identified where appropriate.

Where third-party analytics providers are used, their own terms and privacy policies may apply.

R3actr does not sell participant personal information as part of the normal operation of DOOMS PROTOCOL.

We may share information with appropriate parties where reasonably necessary to operate the event. This may include event staff and judges, service providers, sponsors or partners where necessary for prize fulfillment or an announced activity, legal or regulatory authorities where required, and professional advisers where reasonably necessary.

Where third parties process information on our behalf, we seek to use appropriate contractual or operational safeguards consistent with applicable requirements.

R3actr may retain personal information for as long as reasonably necessary for the purposes described in this Policy.

Registration information may be retained for event administration, participant support, prize distribution, dispute resolution, fraud prevention, accounting, legal compliance, and legitimate record keeping.

Project submissions may be retained for judging records, event archives, winner showcases, documentation, and reporting.

Public information may remain publicly accessible after the event, especially where it has been published through public repositories, websites, social media, or other third-party platforms.

Where information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with our operational practices and applicable law.

R3actr takes reasonable technical and organizational measures intended to protect personal information from unauthorized access, alteration, disclosure, loss, misuse, or destruction.

Depending on the service, these measures may include access controls, authentication, encrypted communications, restricted administrative access, monitoring, backups, and secure infrastructure practices.

However, no internet-based system can guarantee absolute security. Participants are responsible for protecting credentials associated with their own accounts, repositories, applications, deployments, and third-party services.

If you believe your event account or personal information has been compromised, please contact the organizers promptly.

Depending on the services used to operate DOOMS PROTOCOL, information may be processed or stored in locations outside the participant's state, country, or region.

Third-party service providers may operate infrastructure in multiple countries.

Where applicable law imposes requirements on international transfers of personal information, R3actr will take reasonable steps to comply with those requirements.

DOOMS PROTOCOL is designed as an online developer event.

If participation by minors is permitted, any applicable age requirements, parental or guardian consent requirements, or other safeguards will be communicated through the registration process and event terms.

We do not knowingly seek unnecessary personal information from children.

If you believe that a minor has provided personal information to us in circumstances where it should not have been collected, please contact us so that we can review the matter.

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These may include the right to request access, correction, deletion, restriction of processing, objection to certain processing, withdrawal of consent where applicable, or portability of certain information.

These rights are not absolute and may be subject to applicable legal, security, contractual, or operational limitations (for example, retaining records to comply with statutory accounting or anti-fraud requirements).

To submit a privacy-related request, contact R3actr using the official contact details published on the DOOMS PROTOCOL website.

A request may need to include enough information for us to identify the relevant participant or account and understand the nature of the request.

We may take reasonable steps to verify the identity of the requester before providing or changing personal information.

We will handle valid requests within the time period required by applicable law.

Participants may be asked or encouraged to use public repositories, public deployment platforms, community channels, or other public services.

Information published through these services may be accessible to anyone and may be indexed, copied, archived, or redistributed by third parties.

Once information has been publicly published on an independent platform, R3actr may not be able to control how that platform or other users process or redistribute it.

Participants should carefully review what they make public.

R3actr may record or capture portions of public event activities, demonstrations, presentations, award announcements, livestreams, or community events.

Such recordings may be used for event documentation, educational material, promotional purposes, social media, future event presentations, or archival purposes.

Where reasonably practical, participants will be informed when an activity is being recorded.

If you have a specific concern about the use of your identifiable image or recording, contact the organizers.

If R3actr becomes aware of a security incident involving participant information, we will assess the incident and take reasonable steps to contain, investigate, and remediate it.

Where applicable law requires notification to affected individuals or authorities, we will provide notifications in accordance with those requirements.

Participants should promptly notify us if they discover a security issue involving the DOOMS PROTOCOL platform.

R3actr may update this Privacy Policy from time to time to reflect changes in the event, website, technology, third-party services, legal requirements, or our data-processing practices.

The latest version will be published on the DOOMS PROTOCOL website with an updated "Last Updated" date.

For material changes that require notification under applicable law, we will provide an appropriate notice.

For questions, requests, or concerns regarding this Privacy Policy or the handling of personal information, please contact:

R3actr Innovations LLP

Event: DOOMS PROTOCOL

Privacy / Support Email: support@doomsprotocol.com

Website: https://doomsprotocol.com

Throughout DOOMS PROTOCOL, participants may encounter references to the Network Continuity Authority (NCA), NCA Operations, NCA Recovery Missions, NCA Evaluation, and NCA Emergency Broadcasts.

These are fictional elements of the DOOMS PROTOCOL experience.

The NCA does not independently collect participant information, process payments, operate the website, conduct the event, issue legal certifications, or act as a government or regulatory body.

The real-world organizer and entity responsible for the DOOMS PROTOCOL website and event is R3actr Innovations LLP.

The fictional NCA exists solely to provide the narrative framework through which the December 2026 developer challenge is presented.

By registering for or participating in DOOMS PROTOCOL, you acknowledge that you have had an opportunity to review this Privacy Policy and understand how R3actr may process information in connection with the event.

Where applicable law requires separate consent for a particular processing activity, that consent will be obtained through an appropriate mechanism.

Participation in DOOMS PROTOCOL may also be subject to separate Terms & Conditions, Event Rules, and Registration Terms.