Privacy Policy

1. What we collect

Account data: email address, a salted password hash (we never store plaintext passwords), and your interface language.

Anti-abuse data: your IP address and a device fingerprint hash derived from your browser user-agent and language headers. These are used exclusively for rate limiting and referral anti-fraud checks.

On-chain data: TRON blockchain data is public by design. Addresses, transactions and delegations we display were never collected from you personally.

2. What we do not collect

No identity documents, no phone numbers, no wallet private keys or seed phrases — we will never ask for them. Ownership verification processes only a public message signature or a public on-chain transfer.

3. Cookies and analytics

Strictly necessary cookies: sessionId — keeps you logged in (7 days). lang — remembers your language (1 year). erh_ref — records the invite code that brought you here (30 days). erh_auth — flags that you are signed in so our CDN serves you a live page instead of a cached one (7 days). These are required for the site to function and are set without consent.

Optional analytics: only if you explicitly accept, we load Google Analytics 4, which sets its own cookies to measure page views and traffic sources. We ask before loading it — if you decline, nothing is loaded and no analytics cookie is set. Your choice is stored locally in your browser; clear your site data to be asked again. We never send your email address, wallet address or any account identifier to Google.

Cookieless traffic measurement: our CDN provider (Cloudflare) counts page views and measures performance on every visit. It sets no cookies, uses no local storage and does not fingerprint your device; it receives your IP address, the page URL, the referring page and your browser type. Because it stores nothing on your device it runs without a consent prompt, and it is independent of the optional analytics above.

We do not use advertising cookies, and we do not sell or share your data for advertising purposes.

4. How data is used

To provide the service (login, favorites, orders), to match your on-chain payment to your order, to prevent abuse and referral fraud, and to keep an audit trail of administrative actions.

5. Sharing and retention

We do not sell your data. It is shared only with infrastructure providers (hosting, CDN) as technically necessary, with our analytics provider where you have consented (see section 3), or when legally compelled. Account data is kept until you request deletion; server logs and audit records are kept for a reasonable operational period.

6. Your rights and contact

You may request a copy or deletion of your account data via the contact listed on the About page. Deleting your account removes your email and password hash; on-chain data is public and cannot be deleted by us.

7. Governing language

This policy is drafted in English. Translations are provided for your convenience only; in the event of any conflict between the English version and a translation, the English version prevails.