What we collect
The GLYPHS website is designed to collect as little personal data as possible. We do not require accounts, signups, or KYC.
The following information may be processed when you use the Site:
- Wallet address. When you connect your wallet, your public Ethereum address is exposed to the Site. This is necessary to display your token balances and submit transactions. Wallet addresses are pseudonymous but, when combined with other data, may be used to identify individuals.
- IP address & user agent. Standard server logs collected by our hosting provider (Render). Used for security, rate-limiting, and abuse prevention. Logs are typically retained for 30 days.
- RPC requests. When you connect a wallet, the wallet's RPC provider (e.g. Alchemy, Infura) sees your IP and the queries made on your behalf. We do not control these third parties.
- WalletConnect. If you use WalletConnect, the WalletConnect Cloud relay service may log connection metadata. See walletconnect.com/privacy.
What we don't collect
- Email addresses (we don't ask for them)
- Names, addresses, phone numbers
- Government IDs or KYC data
- Credit card or banking info
- Wallet private keys (we cannot — they never leave your wallet)
On-chain data
Anything you do on Ethereum mainnet is permanently public. Your wallet address, every mint, every transfer, and your $GLYPH balance are visible to anyone forever via Etherscan or similar block explorers. This is a property of public blockchains, not something we control.
Cookies
The Site uses minimal first-party cookies and localStorage to remember your wallet connection state. We do not use third-party tracking cookies, advertising pixels, Google Analytics, Facebook Pixel, or similar.
Sharing
We do not sell, rent, or share your data with third parties, except:
- To comply with valid legal process (subpoena, court order)
- To investigate fraud or security incidents
- With service providers (hosting, RPC nodes, WalletConnect) strictly necessary to operate the Site
Your rights
Depending on your jurisdiction (GDPR / CCPA), you may have rights to access, correct, delete, or port your personal data. Because we collect almost nothing, the only data we typically have is server log entries containing your IP. Contact us at the address below to request deletion.
We cannot delete on-chain data — that is a property of Ethereum, not the GLYPHS project.
Security
The Site is served over HTTPS. We do not run a backend database containing personal data. All sensitive interactions (signing transactions, holding keys) happen in your browser wallet, never on our servers.
Children
The Site is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect data from children.
Changes
We may update this policy. The "Last updated" date at the top will reflect changes. Material changes will be highlighted on the homepage for 30 days.
Contact
For privacy questions or data requests, reach out on X at @glyphseth.
⚠ This is template language and is not a substitute for review by a qualified privacy attorney in your jurisdiction.