Privacy Policy

Last updated: June 20, 2026

TL;DR: We collect minimal data. Your wallet is your identity. We never sell your data. Email is optional and only used for transaction receipts.

1. What We Collect

Wallet address — required to claim and own a profile. This is public on the blockchain.
Profile content — display name, bio, avatar, links, and products you choose to publish.
Email address — optional. Used only to send transaction receipts (welcome email, Pro upgrade, product purchase confirmations). Stored encrypted.
Page view counts — anonymized aggregate counter per profile. No individual visitor tracking.
Link click counts — per-link click counter to show you analytics. No visitor identity stored.
IP addresses — temporarily used for rate limiting only. Not stored in our database.
Transaction signatures — stored to prevent payment replay attacks. Contains no personal information beyond what's already on-chain.

2. What We Do NOT Collect

Private keys or seed phrases (never — your wallet stays in your browser)
Browser fingerprints or tracking cookies
Device information beyond what Cloudflare logs for DDoS protection
Cross-site tracking data

3. How We Use Your Data

Display your public profile to visitors
Send transactional emails (if you provided an email address)
Enforce rate limits and prevent payment fraud
Show you your own profile analytics (views, link clicks)

4. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use:

Cloudflare — hosting, CDN, DDoS protection (processes request metadata)
Helius — Solana RPC provider (processes transaction lookups, no personal data)
Resend — transactional email delivery (receives your email address to deliver receipts)

5. Your Rights

Delete your profile — use the "Delete Profile" button in your editor. This removes all stored data including your email.
Update your email — edit it anytime in your profile editor (or leave it blank to remove it).
Access your data — your public profile is always visible at solpage.xyz/[username]. Contact us for a data export.

6. Data Retention

Profile data is retained until you delete your profile. Transaction signatures are retained indefinitely to prevent replay attacks (they contain no personal data). Anonymized view/click counts may be retained for analytics even after profile deletion.

7. Security

All data is stored on Cloudflare's D1 (SQLite) infrastructure with encryption at rest. API keys are stored as Cloudflare secrets, never in source code. Signature verification uses Ed25519 cryptography — your wallet is the only authentication mechanism.

8. Children

solpage.xyz is not directed at children under 18. We do not knowingly collect data from minors.

9. Changes

We may update this policy. Material changes will be announced on the platform. Continued use constitutes acceptance.

10. Contact

Privacy questions or data requests: support@solpage.xyz