Privacy Policy

This policy explains what personal data [Legal entity name] ("Encore", "we") handles when you use Encore, why, and the choices and rights you have. The short version:

• You log in with a crypto wallet. There are no email, password or social accounts.
• We don't use analytics, advertising or tracking cookies, and we don't sell data.
• We don't keep a user database.
• Blockchain activity, such as launches, trades and claims, is public and permanent. Nobody, including us, can delete it.

Who is responsible

[Legal entity name], [Registered address], is the controller of the personal data described here. Contact: privacy@[your-domain].

What we handle and why

Your wallet and login

When you log in, you connect a Solana wallet and sign a message with it (Sign-In With Solana). Our login provider, Privy, checks the signature. Privy then creates a user ID linked to your wallet address and keeps you logged in using storage in your browser (see the Cookie Policy). When you verify as an artist or upload a token image, your browser sends us a login token. We check it with Privy to confirm the wallet is yours. We use this to run the service and to stop people from impersonating other wallets.

Blockchain data

Your wallet address, token balances and transactions are public on the Solana blockchain. We read this public data to show token pages, holders and fee histories. Your wallet address can therefore appear in holder lists and activity on Encore.

Artist verification

If you verify as an artist, we process:

• the artist profile you're claiming (platform and profile ID) and your wallet address;
• the public bio of that profile, which we read to find your one-time verification code;
• the link to your X post and its author, which we get from X's public embed service, if you verify with an X post;
• your SoundCloud user ID, if you use "Sign in with SoundCloud". You sign in on SoundCloud, never on Encore, so we never see your password. We use the access SoundCloud grants once to read your user ID, and we don't store it; and
• if you use an optional proof service such as Reclaim Protocol, the proof it gives us.

The result of a successful verification is written to the blockchain: a fingerprint of the artist's profile ID, linked to your wallet address. It is public and permanent.

Tokens you launch

A token's name, ticker and metadata are written to the blockchain. If you upload a custom image, we store it with a public storage provider on IPFS. It is publicly accessible and may be copied and kept by others indefinitely. To limit abuse, we keep a short-lived count of uploads per wallet in memory.

Technical data

Our hosting provider, Vercel, processes request logs, including IP addresses and browser details, to deliver the site and keep it secure. Our own error logs may include wallet addresses or profile IDs. Your browser also connects directly to a Solana RPC provider to read the blockchain. That provider sees your IP address and the addresses you look up.

Messages you send us

If you email us, we use your message and email address to respond.

What we don't do

• We don't use analytics, advertising pixels or cross-site tracking.
• We don't sell your personal data or share it for targeted advertising.
• We don't ask for or store names, emails, passwords or seed phrases.

Legal bases (EEA and UK)

• Contract: to provide Encore when you use it, for example logging you in and verifying artists.
• Legitimate interests: keeping Encore secure, preventing fraud and impersonation, and fixing problems.
• Legal obligation: where the law requires us to keep or share data.

Who we share data with

• Privy: wallet login.
• Vercel: hosting.
• Solana RPC providers: reading and sending blockchain data.
• IPFS storage providers such as Pinata: storing uploaded token images.
• Spotify, SoundCloud and X: we look up public profiles and posts to verify artists. SoundCloud handles "Sign in with SoundCloud".
• Proof services such as Reclaim Protocol, if you choose to use one.
• Authorities, when the law requires it or to protect rights and safety.

Price data from Jupiter and CoinGecko is fetched by our server and involves none of your data. Some of these providers are in the United States and other countries outside yours. Where required, transfers are protected by safeguards such as the European Commission's standard contractual clauses.

How long we keep data

• Blockchain data and IPFS content are permanent and outside our control.
• Verification cookies expire within 15 minutes.
• Request logs are kept by our hosting provider for a limited period.
• Emails are kept as long as needed to handle your request.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or port your personal data, and object to how we use it. In the EEA and UK you can also complain to your data protection authority. California residents can ask what personal information we have and ask us to delete or correct it. We don't sell or share personal information, and we won't treat you differently for using your rights.

We can't change or delete data on the blockchain. We can stop showing a token and remove an uploaded image from our storage provider. Copies others have made may remain. To make a request, email privacy@[your-domain].

Security

We collect as little as possible, use encrypted connections, and keep secrets and signing keys out of the browser. No system is perfectly secure.

Children

Encore is not for anyone under 18, and we don't knowingly collect their data.

Changes

We'll update the "Last updated" date when this policy changes, and put a notice on Encore for significant changes.