Privacy
Last updated: 2 October 2026.
Plain-English summary: we keep as little as possible. We never ask for transactions or approvals, and we cannot move your assets.
What we collect
- Your wallet address when you sign in. It is already public on the blockchain. We use it to know which NFTs you own.
- What you choose to publish: your username, the NFTs you place, any custom names and stories, your profile text, your profile picture NFT and your X username. All of this is shown publicly on your gallery page.
- A sign-in cookie that keeps you signed in for up to 7 days. It is essential and is not used for tracking.
- Technical logs such as your IP address, kept briefly so we can run the site, stop abuse and apply rate limits.
- Reports: if you report a gallery we store the report and a scrambled (hashed) form of your IP address so one person cannot spam reports.
What we don't do
- We don't use advertising or analytics trackers.
- We never see your seed phrase or private keys, and you are never asked for them.
- We don't sell your data.
Other services involved
- Alchemy reads public blockchain data for your wallet address to find your NFTs.
- WalletConnect (only if you choose it) connects phone wallets.
- Google Fonts supplies the typeface, so your browser contacts Google to load it.
- NFT artwork is fetched from the host named in the NFT's metadata, through our server.
Your choices
- Delete your gallery any time from the "Your NFTs" panel. This removes your saved NFTs, profile and username.
- Change your username or text whenever you like.
- To ask for anything else to be removed, message us on X.
Where data is kept
On our hosting provider's servers. We take reasonable steps to protect it, but no service can promise perfect security.
This is a starter policy written for an early-stage project. Have a lawyer review it before you run a public launch, especially once payments or other chains are added.
Questions or requests about this page: message @unlistedgallery on X.