Privacy policy

This policy explains what information Mintra collects when you use the Mintra website, its API and any support we offer (together, "Mintra"), what we do with it, and what you can do about it. In this policy, "we" and "us" mean Mintra LLC, a Wyoming limited liability company. Mintra LLC is responsible for the personal data described here (in legal terms, it's the "data controller").

This policy goes with our Terms of Use. Their Privacy section is a short version of this page.

We may update this policy. When we do, we change the date at the top of this page, and for important changes we also post a notice in the app.

You use Mintra by connecting a crypto wallet. Your wallet address is your account. There's no password, and Mintra never sees or stores your private keys or recovery phrase.

To sign in, Mintra asks your wallet to sign a short message. Signing costs no gas and doesn't move anything. Here's what happens:

1. Mintra writes the message, which includes your wallet address and a random code, and saves it. It's valid for 10 minutes.
2. Your wallet signs it, and Mintra's server checks the signature.
3. Mintra deletes the saved message, creates your profile record if you don't have one yet, and saves the time you signed in.
4. Your browser receives a sign-in token, which expires after 24 hours.

We keep this in Mintra's database:

• Your profile: your wallet address and whatever you add in Edit Profile: username, bio, website, X (Twitter) and Telegram handles, profile picture and cover image. We also keep your badges and the time you last signed in.
• Your settings: whether to show NSFW content and whether the site tour is on.
• Reports you send: what you reported, the reason, your message and your wallet address.
• Metadata refresh requests: which NFT you asked Mintra to refresh, when, and your wallet address, so we can limit how often refreshes run.
• Questions Minty's AI answers: when Ask Minty can't answer from the FAQ and asks its AI instead, we log your question (up to 300 characters), the time, whether you were signed in, a one-way hash of your IP address and technical details about the answer. Anything that looks like a recovery phrase or private key is never sent or stored.

If you manage a collection on Mintra, we also store the details you add to it, such as its description, links and images.

Mintra also builds information from PulseChain, which is public: the NFTs each wallet holds, its listings, bids, sales and transfers, and totals such as how much a wallet has bought and sold on Mintra.

Mintra doesn't ask for your email. If you write to us at [email protected], we keep your email address and your messages so we can reply.

Your whole profile record is public. Anyone can look up your username, bio, links, pictures and badges, and also your settings and the time you last signed in. Your profile is tied to your wallet address, so it's tied to everything that wallet does on-chain.

Your activity on PulseChain is public too: the NFTs and tokens you hold, and every listing, bid, offer, sale, mint and transfer you make. Mintra shows this public data on profiles, activity feeds and leaderboards, but it doesn't control it, and nobody can delete it from the blockchain.

Your reports, metadata refresh requests and questions to Minty aren't public.

Pictures you upload are stored on IPFS, a public network, through Pinata, a file-pinning service. That includes cover images and launchpad artwork, along with the launchpad's metadata files. Every file gets a permanent address that anyone can open, and anyone can copy it.

Removing a cover image takes it off your profile, but it doesn't delete the file from IPFS, and copies can stay in other services' caches. Only upload what you're happy to publish.

Files are published exactly as you upload them, including hidden details some files carry, such as the location saved in a phone photo. Remove those details before uploading if you don't want them public.

Profile pictures aren't uploaded. Every profile gets its own Minty, which Mintra draws from a short code saved with your profile. You can switch to a preset, or to one of your NFTs, in which case Mintra saves a link to its image. Wallets without a profile show a Minty drawn from their address.

Mintra sets no advertising or tracking cookies, and its page-view analytics use no cookies at all. It saves a few things in your browser so the site works and remembers you:

• Cookies: signerAddress, the wallet you connected, so pages can load your account; your sign-in token, saved under your wallet address for 24 hours; turnstile, a pass from the bot check that lasts 5 minutes; and minty_pass, an hour-long pass for Minty's AI after a bot check.
• Local storage: cached data such as contracts and supportedTokens (Mintra's contract addresses and the tokens it accepts), your theme, NFTs you've picked to compare, collections you deployed recently, notices you've dismissed and whether Minty's sounds are on.
• Your wallet connection: the wallet tools Mintra uses (RainbowKit, wagmi and WalletConnect) remember which wallet you connected.

Clearing your browser's data for Mintra removes all of this and signs you out.

A few companies run parts of Mintra for us:

• Vercel hosts the website and its servers. Like most hosts, it logs the requests your browser makes, including your IP address, browser details (user agent), the address requested and the time, for security and to keep the service running.
• Vercel Web Analytics counts page views, so we can see which pages people use and which sites send visitors. For each page view it records the page address, the referring site, your approximate location (country, region and city), and your device type, operating system and browser. Before a page view is sent, Mintra removes wallet addresses from the page address. Collection and NFT pages keep their contract addresses. It sets no cookies and doesn't store your IP address with page views: visitors are told apart by a hash made from the request, which is discarded after 24 hours. It doesn't follow you across other websites, and we only see aggregated statistics.
• Supabase hosts Mintra's database in the United States. It holds the information described above and keeps its own logs of the requests Mintra's servers send it.
• Pinata stores the files you upload and publishes them on IPFS.
• Anthropic provides the AI model behind Ask Minty. Questions its AI answers are sent to Anthropic.
• Cloudflare Turnstile is the bot check on some forms (Edit Profile, settings and reports) and on Minty's AI. When it runs, Cloudflare receives technical details from your browser, such as your IP address, to tell people from bots.
• Sentry receives error reports when error reporting is switched on. A report describes what went wrong and includes technical details such as the page, your browser and your IP address, so we can fix the problem.

Some parts of Mintra load directly from other services. They can see your IP address and what your browser asks them for, and their own privacy policies apply:

• PulseChain's RPC nodes, which Mintra uses to read the blockchain, for example your wallet's balances. Your wallet uses its own.
• IPFS gateways and collections' own servers, which serve NFT pictures and files.
• WalletConnect, if you connect a phone wallet by QR code or link. The connection runs through its servers.
• Piteas, PulseX and LibertySwap, which the Get $MINT window embeds, and the sites it links to, such as the PulseChain bridge.
• Interactive NFTs: some NFTs are web pages that run their creator's code and can connect to other servers. Mintra only loads them after you click through a warning.

Your wallet app has its own privacy policy too.

We use the information above to:

• run Mintra: sign you in, show your profile and save your changes;
• count page views, to see which pages people use and how they find Mintra;
• review reports and protect Mintra and its users from spam, scams, abuse and attacks;
• find and fix problems, and improve Minty's answers;
• answer you when you contact us.

We don't sell your personal data or use it for advertising, and Mintra doesn't show ads.

We share personal data only:

• with the companies listed above, so they can run Mintra for us;
• when the law requires it, or when it's needed to protect Mintra or its users from fraud or abuse.

What's already public, like your profile and your on-chain activity, can be seen by anyone, including other apps and services that read PulseChain.

• Your profile and settings stay until you change or remove them, or ask us to delete them.
• Reports stay in our database. For each NFT, we keep only the latest metadata refresh request.
• Emails you send us stay in our support inbox.
• Questions Minty's AI answered are deleted after 30 days, and its rate-limit counters after 2 days.
• A sign-in message is deleted as soon as you sign in, and your sign-in token expires after 24 hours.
• Vercel and Supabase keep their logs, and Vercel its page-view statistics, for their own retention periods. Vercel discards the analytics visitor hash after 24 hours.
• Nobody can delete information from PulseChain, and files on IPFS can't be fully deleted, not even by us.

• Edit or clear your profile at any time in Edit Profile. Clearing a field and saving removes it from our database.
• Clear your device: disconnecting your wallet and clearing your browser's data for Mintra removes what Mintra saved there.
• Ask us: email [email protected] to find out what we hold about your wallet, to get a copy, or to have your profile deleted. We may ask you to prove the wallet is yours, for example by signing a message.

We can't change or delete anything on PulseChain, fully delete files from IPFS, or remove copies other people have made.

The public can't read your reports, and only Mintra's servers can save changes to your profile, after checking your sign-in. Sign-in tokens are signed by our server and expire after 24 hours.

No system is perfectly secure. If you find a security problem, please tell us privately at [email protected].

Mintra is only for people 18 and older, as our Terms say. If you think someone younger has given us personal data, email [email protected].

Questions about this policy, or a request about your data? Email [email protected].