Privacy Policy

NFTvierge ("we", "us", "the Service") operates an NFT marketplace on the Solana blockchain at www.nftvierge.com. This policy explains what data we collect, why, and what choices you have.

1. The data we collect

1.1 Wallet address

When you connect your Solana wallet and sign in (Sign-In With Solana), we record your public wallet address. This address is your account identifier — we do not collect or store private keys, seed phrases, email passwords, or any other authentication credential.

1.2 Profile data you provide

If you choose to fill out your profile, we store the username, bio, social handles, and website URL you enter. You can change or remove this information at any time from your profile settings.

1.3 Mint and transaction history

We record metadata about mints you initiate: the mint job ID, payment transaction signature, generation prompt seed, rolled traits, and resulting NFT asset ID. The payment and mint transactions themselves are recorded on the Solana blockchain, which is public and immutable — we do not control that data.

1.4 Optional email

If you provide an email address (only required for some notification features), we store it solely to send transactional alerts you've opted into (mint completed, offer received, etc.). We do not send marketing email without explicit opt-in.

1.5 Server logs

Our hosting provider (Vercel) and database provider (Supabase) keep standard request logs (IP address, user agent, timestamps) for operational purposes — debugging, abuse prevention, rate limiting. These are retained for a limited period and are not used to build profiles about you.

2. The data we do not collect

• Private keys or seed phrases — your wallet is your wallet.
• Passwords — there are none. Sign-in is a one-time message signature.
• Real-name identity, government ID, or KYC data (not currently required).
• Cross-site tracking cookies, analytics fingerprints, ad pixels, or third-party trackers.

3. Cookies and local storage

We use the minimum cookies and browser storage needed to make the site work:

• Session cookie (NextAuth) — keeps you signed in after you complete the SIWS message signature. Cleared when you sign out or it expires (7 days).
• Wallet adapter storage (localStorage) — remembers which wallet you connected last, so the connect button can auto-reconnect on return visits.
• Cookie preference (localStorage) — stores your choice from the cookie banner so we don't show it again.

We do not use cookies for advertising, cross-site tracking, or analytics profiling. You can clear them at any time via your browser settings.

4. Third parties we share data with

We share the minimum necessary data with these processors to operate the Service:

• Vercel — application hosting, request logs.
• Supabase — database, off-chain user profile and mint job records.
• Helius — Solana RPC and DAS API for reading on-chain state. Wallet address is sent as part of read queries.
• Magic Eden, Tensor (when enabled) — listings/offers aggregation. Asset IDs and listing data flow both ways.
• Fal.ai (when AI generation is enabled) — receives the prompt and seed at mint time. Does not receive your wallet address.
• Irys / Arweave (when storage is enabled) — receives the generated image and metadata for permanent storage. The data is publicly retrievable by anyone with the URI.
• Resend (when email notifications are enabled) — receives your email address only to deliver alerts you opted into.

5. On-chain data is forever

Anything you do on the Solana blockchain — minting, transferring, listing, buying, selling — is recorded permanently and publicly. We can delete your off-chain profile data, but we cannot delete on-chain history. Treat your wallet address as a permanent public identifier.

6. Your choices and rights

• Edit or delete profile data at /settings/profile.
• Sign out at any time — clears the session cookie immediately.
• Delete account — email privacy@nftvierge.com with a signed message from your wallet to remove your off-chain profile and email. On-chain records will remain.
• Data portability — your on-chain assets and history are already portable by virtue of being on Solana. For off-chain profile data, contact us and we will export it for you.

7. Data retention

Profile data is kept for as long as your wallet has signed in within the last 24 months, after which it is anonymized (wallet address remains as a foreign key but bio/socials are cleared). Mint job records are kept for 7 years for auditing. Server logs are kept up to 90 days.

8. Children

NFTvierge is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

9. Changes to this policy

We may update this policy. Material changes will be announced in-app and on this page, with the "Last updated" date revised. Continued use of the Service after changes constitutes acceptance.

10. Contact

Questions or requests? Email privacy@nftvierge.com.