Privacy policy

Last updated 1 September 2026 · Assetfra.com

The short version

Participants sign in with a wallet, so we never ask for your name, email or password. What we store about you is your wallet address and what you did with it. Everything you do on chain is public by nature — we did not make it so, but you should know it.

What we collect

If you subscribe to a listing

• Your wallet address, and a record that you signed a sign-in message. We do not receive your private key and cannot act on your behalf.
• Your activity — subscriptions, refunds and distributions. These are read from the blockchain, not reported by your browser.
• A referral link, if you arrived through one, so the referrer can be credited.

If you are a listing business or an administrator

• Your email address and a hashed password. We never store the password itself.
• Listings you create and actions you take, with an audit record of each.

What we deliberately do not do

• No advertising trackers and no third-party advertising pixels. We do use Google Analytics to count visits and see which pages get read — see below.
• No avatar service. Listing and account images are generated in your browser from an identifier, so browsing does not tell anyone else what you looked at.
• We do not sell personal data. There is no arrangement under which we could.

Cookies and local storage

Your session token is kept in your browser's local storage so you stay signed in. Signing out removes it. We use no advertising cookies. Google Analytics sets its own cookies to tell repeat visits apart; a browser set to block third-party cookies, or any content blocker, stops it, and nothing on this site depends on it working.

Third parties that necessarily see something

• Public blockchain nodes — reading and sending transactions exposes your address and IP to whichever node you use.
• Cloudflare — serves this site and runs the bot check on the staff login; it sees request metadata.
• IPFS pinning — listing metadata and documents are public by design. Do not put anything private in them.
• Google Analytics — on the backer and business sites, it records which pages are viewed, along with your IP address, approximate location, and browser. We use it to see which parts of the product people actually read. It is not connected to your wallet address or your account, and it does not run on the operations console at all.

What is permanent

Blockchain records cannot be edited or deleted by us or by anyone. A subscription, a refund or a distribution is permanent and public. Please take that into account before transacting from an address you consider sensitive.

Your rights

You can ask what we hold about you, ask us to correct it, or ask us to delete your off-chain records. We will comply where the law requires and where the data is genuinely ours to delete — we cannot remove anything from a blockchain, and we keep audit records where we are required to. Email [email protected].

Retention

Off-chain records are kept while your account exists and for as long afterwards as our legal obligations require. Audit logs are append-only by design.

Changes

Material changes will be noted here with a new date. Contact us with any question.