State-Specific Privacy Disclosures

Last Updated: September 1, 2026

This disclosure supplements the Candle Privacy Policy, which describes the personal information we collect, the sources we collect it from, the purposes we use it for, the circumstances in which we share it, and with whom.

These additional disclosures are required by certain US state privacy laws, and provide a Notice at Collection under the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”).

States covered. This disclosure is intended to address comprehensive US state consumer privacy laws that apply to Candle. Coverage, thresholds, exemptions, and effective dates vary by state and can change. Where a right described below exists only in some states, Candle may extend it to other US residents, but this notice does not state that every listed right applies in every jurisdiction or circumstance.

1. Categories of Personal Information Collected

In the twelve months preceding the date above, we have collected the following categories, depending on which Candle Services you use:

Identifiers — username, email address (held via our authentication provider), wallet addresses on Solana and Robinhood Chain, account identifiers, IP address, device identifiers, and social handles on linked accounts;
Commercial information — on-chain transaction history, trades, token launches, staking activity, NFT mints, tips sent and received, and content viewing activity;
Internet or other electronic network activity — viewing history, browsing and search activity within the Candle Services, chat message content, stream viewership, and information used to detect fraud, abuse, or market manipulation;
Approximate geolocation derived from IP address, at country or region level;
Audio and visual information — livestreams, recorded video, clips, thumbnails, and profile images;
Professional or employment-related information — data relating to your channel and audience if you stream, including follower and subscriber counts on linked platforms;
Account credentials for linked services — OAuth access and refresh tokens for Discord, X, Twitch, and YouTube;
Inferences and profiling output — Wallet IQ scores, tiers, score breakdowns, penalties, and NFT eligibility derived from your on-chain history;
Information that may reveal protected classifications, where you voluntarily disclose it as part of your activity on Candle.

2. Categories Disclosed for a Business Purpose

In the same period, we disclosed the following categories for business purposes:

Identifiers, to authentication, hosting, and blockchain infrastructure providers, and to law enforcement where legally required;
Commercial information, to transaction routing, bridging, and market data providers;
Internet or other electronic network activity, to hosting, analytics, and security providers;
Approximate geolocation, where a provider requires it to apply regional parameters;
Audio and visual information, to our live video and file storage providers, in order to deliver your content to viewers;
Professional information, where a provider assists with creator features;
Inferences and profiling output, to our database and hosting providers.

The identity of each provider and the category it receives is published at Subprocessors.

If you engage with surveys or feedback opportunities provided by Candle or its partners, information you disclose there may be revealed to the survey provider.

Candle does not sell personal information for monetary consideration.

Candle does not currently sell personal information, share it for cross-context behavioral advertising, or process it for targeted advertising. If that practice changes, Candle will update this notice before the change and provide the opt-out methods applicable law requires.

How to opt out

4. Children and Teens

Candle prohibits children under 13 from using the Candle Services.

The Candle Platform — trading, launching tokens, staking, minting NFTs, and tipping — is restricted to persons aged 18 or over.

We do not knowingly sell or share the personal information of consumers under 16.

5. Your Rights

Depending on your state, you may have the right to:

Confirm whether we process your personal information, and access it;
Obtain a copy in a portable format;
Correct inaccurate personal information;
Delete personal information we hold about you;
Opt out of sale, sharing for cross-context behavioral advertising, and targeted advertising;
Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, where your state provides that right (see section 10);
Limit the use and disclosure of sensitive personal information;
Appeal a denial of any of these rights;
Not be discriminated against for exercising them.

How to submit a request

Email privacy@candle.tv. Include the wallet address or username associated with your Candle account and describe what you are requesting.

To protect your account, we will generally ask you to verify your request — which may include asking you to sign a message from the wallet in question. If you do not have an account, or you are an authorized agent acting under state law, email the same address and tell us so.

Appeals. If we deny a request, reply to our response with the word “appeal” and your reasons. We will review the decision and respond in writing within the period your state requires.

We will not discriminate against you for exercising your rights. Depending on your choices, some Candle features may be limited or unavailable — for example, deleting your Wallet IQ score removes the basis for exclusive-launch access.

6. De-identified Data

Where we use de-identified data, we maintain it without attempting to re-identify it, and we contractually require the same of recipients — or else we treat it as personal information subject to applicable law.

7. Sensitive Personal Information

The categories we collect include information that may constitute “sensitive personal information” under the CCPA/CPRA, including account log-in credentials for linked third-party services and, where you voluntarily disclose it, information revealing protected characteristics.

We do not use or disclose sensitive personal information for purposes other than those expressly permitted by the CCPA/CPRA, and we do not use it to infer characteristics about you.

8. Retention

We retain personal information for as long as needed for the purposes described in the Privacy Policy, or as permitted or required by law. A category-by-category retention table is published in the Retention section of that Policy.

Note that on-chain data is permanent and outside our control — see Blockchain Data and the Limits of Deletion.

9. Notice of Financial Incentive

Candle offers the following programs. They are not offered in exchange for permission to sell or share personal information. They may nevertheless require a California notice of financial incentive if their operation constitutes a price or service difference related to the collection, deletion, or retention of personal information:

Programme	What you get
Believer NFT	Free mint; 0.5% platform trade fee (versus 1% Free); access to exclusive launches and gated stream segments
Community giveaway	Entries into distributions from the $CNDL community allocation
Staking rewards	A share of token allocations from launches that graduate

How to opt in. Participation is voluntary. You opt in by minting the NFT, staking, or entering a giveaway.

How to withdraw. You can stop participating at any time by unstaking, by declining to enter, or by asking us to delete the associated data. The Believer NFT is soulbound and cannot be transferred, but you can ask us to disregard it and delete your Wallet IQ score.

Material terms. Eligibility for the Believer NFT is determined using public on-chain history. Before relying on this section as a CCPA notice of financial incentive, Candle must document the good-faith valuation method required by the CCPA regulations and confirm that the described opt-in and withdrawal mechanisms match the product.

10. Profiling and Automated Decision-Making

Wallet IQ analyses your public on-chain transaction history and produces a score, a tier, and an eligibility determination. That determination governs:

whether you can mint a Believer NFT free of charge, which discounts platform trade fees to 0.5% versus 1% Free; and
whether you can access exclusive bonding curve launches and gated stream segments.

These are decisions about access to features and pricing on the Candle Services. Candle does not use Wallet IQ, or any other profiling, to make decisions about credit, employment, housing, insurance, education, healthcare, or any other matter of the kind that state privacy laws treat as producing legal or similarly significant effects.

Your rights. Where your state provides a right to opt out of profiling, or a right to know about the logic involved, you may exercise it by emailing privacy@candle.tv. You may also request human review of a Wallet IQ result, or ask us to delete a score we hold. Opting out means we will not compute or act on a score for you, which also means you will not be eligible for the benefits it unlocks.

See Wallet IQ and Automated Profiling for the full description.

11. Controller Entity

The controller entity subject to the Candle Privacy Policy and this disclosure is 7 Candlesticks, Inc., 201 S Las Vegas Blvd #95, Las Vegas, NV 89101, USA.

12. Contact

All requests under this disclosure — rights requests, appeals, opt-outs, and authorized agent submissions — go to privacy@candle.tv.

To help us route yours, start your subject line with RIGHTS REQUEST, APPEAL, OPT-OUT, or AGENT as applicable.

13. Language

This disclosure is published in English, and the English version is the authoritative one. Where a state law requires that a notice, or a means of exercising a right, be made available in a language other than English, we provide it in that language on request to privacy@candle.tv — and the request itself may be made in that language.