← Back to home

Privacy Policy

Last updated: 2026-04-25

1. Who we are

The operator of this Site (the "Operator") is the entity identified on the Legal Notice page. The Operator is the controller of the personal data described below.
Contact for any privacy question: [TODO: privacy@yourdomain.com]

2. Our approach

We collect as little personal data as possible. We do not sell, rent, or share data for advertising. We do not use analytics or tracking cookies. The Site works without any account, email address, or real-world identity — only your Solana wallet.

3. Data we process

DataPurposeLegal basisRetention
Solana wallet public addressIdentify the Renter and tie them to a pixel RentalPerformance of a contractDuration of the Rental + 3 years
On-chain transaction signatureVerify payment, prevent replay, accountingContract + legal obligationUp to 10 years where accounting law applies
Uploaded image, ticker, coin name, linkDisplay the Content on the boardContractDuration of the Rental + 6 months
IP address, user-agent, request logsSecurity, fraud prevention, debuggingLegitimate interestUp to 12 months
Admin session cookieAuthenticate the Operator on the admin panelStrictly necessary8 hours (session)

We do not collect: your real name, email, phone, postal address, ID documents, banking data, or any sensitive category of personal data.

4. Cookies and tracking

The Site uses only strictly necessary cookies(the admin-panel session cookie). The Site does not use advertising, analytics, or tracking cookies and therefore does not require a consent banner. If analytics are introduced later, a proper consent flow will be added beforehand.

5. On-chain transparency

Payment transactions are recorded on the Solana blockchain, which is public and permanent. Your wallet public address and the amount you send are visible to anyone. The Operator has no control over the blockchain and cannot modify or delete on-chain records. This is a specific characteristic of blockchain technology that you accept when using the service.

6. Recipients and subprocessors

Personal data are processed by the Operator and by the following subprocessors:
  • Netlify, Inc. (United States) — site hosting.
  • Supabase Inc. (Singapore / EU region) — database and image storage.
  • Helius Labs, Inc. (United States) — Solana RPC provider used to verify payments.
  • Cloudflare, Inc. (United States) — optional DDoS protection and DNS, if enabled.
  • Sentry (Functional Software, Inc.) (United States) — optional error monitoring. Processes limited technical data (stack traces, browser, IP) to diagnose bugs.
No personal data are sold, rented, or shared for advertising.

7. International data transfers

Some subprocessors listed above are located outside your country, including in the United States. Where applicable, such transfers are framed by Standard Contractual Clauses approved by the European Commission or by certification under the EU–US Data Privacy Framework, supplemented by appropriate technical and organizational safeguards.

8. Retention

See the table in Section 3. At the end of the retention period, data are deleted or anonymized. On-chain data remain public on the Solana blockchain and cannot be deleted.

9. Security

We apply reasonable technical and organizational measures to protect personal data, including HTTPS/TLS for all traffic, access control for admin functions, hashed or derived authentication tokens, restricted server access, regular updates, and logging. If a personal data breach likely to create a risk for users occurs, we will notify the relevant data-protection authority within the legally required delay.

10. Your rights

Depending on your country of residence, you may have the following rights regarding your personal data:
  • Access — obtain a copy of the data we hold about you.
  • Rectification — correct inaccurate data.
  • Erasure — request deletion, subject to legal retention obligations and the immutability of on-chain data.
  • Restriction — limit how we process your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — in particular to processing based on legitimate interest.
  • Withdrawal of consent, where processing is based on consent.

To exercise these rights, contact us at [TODO: privacy@yourdomain.com]. We will reply within a reasonable delay (and in any case within one month where applicable). We may request proof of identity where there is reasonable doubt (for example, a signed message from the wallet concerned).

11. Right to complain

If you believe your rights have not been respected, you may lodge a complaint with the data protection authority of your country of residence.

12. Automated decision-making

We do not perform automated decision-making or profiling that produces legal effects concerning you.

13. Minors

The Site is not directed to minors. We do not knowingly process data relating to minors. If you believe we have, please contact us and the data will be removed.

14. Changes to this policy

We may update this Privacy Policy. Material changes will be indicated on the Site. The version that applies to you is the one in force at the time your data is processed.

15. Contact

For any question or to exercise your rights:
[TODO: privacy@yourdomain.com]