Privacy

What SafeMemes collects, what it publishes permanently, and what it cannot delete.

Draft for legal review, last updated 17 September 2026. Accurate about what the software does; not yet signed off by a lawyer. Items marked [to be completed] need the operating entity's details.

Controller: [registered entity and address to be completed]. Contact: [contact address to be completed].

The short version

  • We have no accounts and no passwords. Your wallet is your identity.
  • We never ask for your name, email or documents to use the product.
  • Anything you choose to publish (handle, bio, images, token and drop details) is public and permanent. We cannot delete it.
  • We keep short-lived technical records to stop abuse, and we measure product events without identifying you.

What we collect

Your wallet address. When you connect, your browser shares your address with the site. It is public information on the blockchain. We use it to show your launches, drops, earnings and rewards.

What you publish. Your handle, display name, bio, avatar, banner, links, token details and NFT metadata. Your wallet signs each of these, and we publish them to Arweave. See "What we cannot delete" below.

Technical records. Our servers log the usual request information, including IP address, for a short period, and we count requests per wallet and per IP so the publishing endpoints cannot be flooded. Rate-limit counters expire within the hour. Server log retention: [confirm with the hosting provider, Vercel's default at the time of writing].

Product analytics. We record that an action happened (a launch was created, an edition was minted, a reward was claimed) with coarse properties like the network and the payment token. We deliberately do not send wallet addresses, handles or amounts to the analytics provider.

The feedback form. If you use it, we receive what you type, including any contact details you choose to give, through EmailJS.

Your browser's own storage. We store your theme choice and which wallet you last connected, in your browser. That never reaches us. We do not use advertising or cross-site tracking cookies.

What we do not collect

No email address is required. No password. No identity documents or KYC. No precise location. We do not buy data about you, and we do not sell or rent anything about you.

Why we are allowed to do this (GDPR)

  • To do what you asked: publishing the profile, token or drop details you signed. The publication is the service you requested.
  • Legitimate interests: keeping the site available, preventing abuse and fraud, and understanding which features are used. We keep this to the minimum that works, which is why analytics carry no wallet address.
  • Legal obligations: where we must respond to a valid legal request.

A wallet address can be personal data when it is linked to a person. We treat it as such even though it is public.

What we cannot delete

Profiles, token details and NFT metadata are stored on Arweave, a network designed so data cannot be removed, by us or by anyone. Blockchain transactions are the same: what you did on Sonic stays on Sonic.

Before you publish anything, the editor warns you that it is public and permanent. Do not publish anything you might want withdrawn. If you ask us to erase your data, we can and will remove it from this website, stop serving it from our own systems, and stop displaying it, but the underlying copies on Arweave and on the blockchain remain. This limitation is inherent to the technology, and it is one of the things our legal review flags for advice.

Who else sees your data

  • Vercel hosts the site and provides the analytics described above.
  • Arweave and the Turbo upload service store what you publish, permanently and publicly.
  • Vercel KV or Upstash hold short-lived rate-limit counters and handle reservations.
  • EmailJS delivers feedback-form messages.
  • RPC providers (Sonic's public endpoints or whichever your wallet uses) see your IP address and the queries your browser makes to read the chain. That connection is between your browser and them.

Your rights

Depending on where you live, you can ask for a copy of what we hold, correction, erasure (subject to the permanence explained above), restriction, or to object to processing. Write to [contact address to be completed]. You can complain to your local data protection authority.

Children

SafeMemes is for adults. It is not for anyone under 18, and we do not knowingly collect anything from children.

Changes

If this policy changes, the date at the top changes with it.