Privacy

In short

• Vitrine never asks for a transaction, a seed phrase or a private key.
• Searching a wallet needs no account.
• No advertising, no tracking cookies, and your data is never sold.
• You can delete your account and everything on it from your profile settings.

What we store and why

When you search a wallet

The address goes to the network data providers listed below so they can tell us which NFTs it holds. Wallet contents are public on the blockchain. We keep copies of public NFT data (names, collections, images) to load pages faster, and what a wallet holds of the ranked collections to work out the score on its cards. None of this is tied to you.

When you sign in with X

Your X account id, username, display name and profile picture, to create your profile and show it. We never see your X password and can't post for you. A sign-in cookie keeps you signed in for up to 90 days, and we note the last day you were signed in, to count how many people come back.

The waiting list and invitations

While Vitrine is in private beta, signing in with X without an invitation does not create a profile. It puts you on a waiting list: your X account id, @username, display name and profile picture address, and which profile you came from, if any. We keep them only to send you an invitation, and delete them when the beta ends or when you ask (see Your rights below). An invitation made for a specific @ stores that @.

On your profile

What you add: a display name if you choose one, your bio, links and their images, the NFTs you put on view, the collections you hide and whether your score shows.

When you link a wallet

The wallet's address, once you sign a one-time message that proves it is yours. The message expires within minutes and moves nothing. Your profile shows the NFTs your linked wallets hold, never their addresses.

Your score

Your vitrine score, globally and per network, with a weekly record so changes over time can be shown.

To keep the service running

Our hosting keeps standard request logs (such as IP address and browser) for security and to fix problems. We measure page speed with Vercel Speed Insights, which uses no cookies and records the kind of page, not the address you visited.

What is public

Your profile page is public: your name, @username, picture, bio, links, the NFTs on view, the collection your linked wallets hold and, if you leave it on, your score. Cards are public once you post them.

Cookies

Only the ones the site needs: the sign-in cookie, short-lived cookies that complete signing in with X and connecting Xaman, and an access cookie while the site is in private testing. No advertising or analytics cookies.

Who helps run Vitrine

Service providers process data on our behalf, each only for its own part of the service: hosting, the database and image storage, signing in with X, connecting wallets, and reading public NFT and market data. Some of them are outside your country, including in the United States.

How long we keep it

Your profile data stays while your account exists. Unlink a wallet and it leaves your profile at once. Delete your account in your profile settings and your profile, wallets, links, NFTs on view, scores and their history are deleted, with the images you uploaded removed from storage shortly after. Copies of public NFT data are refreshed or dropped over time.

Your rights

You can ask to see, correct, export or delete your data, or object to how it is used, by sending a direct message to @vitrineartnft on X. Most of it you can change or delete yourself in your profile settings.

Vitrine is not meant for anyone under 16.

Changes

When this policy changes, the date at the top changes too. If a change matters, we will say so on the site.