This Privacy Policy explains how Capixelism ("we", "us", or "our") collects, uses, discloses, and protects information in connection with the website at capixelism.com and related features, smart contracts, and services (the "Service"). It should be read together with our Terms & Conditions.
Important blockchain notice: Capixelism is built on public blockchains. Any data written to a blockchain — including wallet addresses, pixel ownership, prices, and transaction history — is public, permanent, and outside our control. It cannot be edited, deleted, or made private by us or by you. Please consider this before transacting.
1. Who We Are
Capixelism is the operator of the Service and is the data controller for the limited personal information described below.
2. Information We Collect
We have designed the Service to be minimal-data and non-custodial. We do not ask for your name, email, password, or government ID to use the core Service, and we never collect or have access to your wallet's private keys or seed phrase.
a. Wallet and on-chain information. When you connect a wallet and transact, we process your public wallet address and the on-chain activity associated with it (pixels owned, purchase prices, next prices, buyer/seller addresses, and timestamps). This data originates on a public blockchain and is mirrored into our off-chain database.
b. Content you provide. Pixel colors and short text descriptions you set for pixels you own, and any username deterministically derived from or associated with your address. Do not include sensitive personal information in pixel descriptions — they are publicly visible.
c. Technical and request data. When you interact with our servers (for example, requesting a purchase voucher, a username lookup, or saving an edit), we process standard request metadata such as your IP address, request headers, origin, and timestamps. We use your IP address transiently to enforce per-IP rate limits via our rate-limiting provider; we do not use it to build advertising profiles.
d. Usage and performance analytics. We use privacy-conscious, cookieless analytics — Vercel Analytics and Vercel Speed Insights — to understand aggregate traffic and performance (such as page views, referrers, approximate country/region, device and browser type, and Core Web Vitals). These tools are designed to measure trends without identifying individuals.
e. Local storage. We store small preferences in your browser's local storage (for example, your light/dark theme preference under the capixelism-theme key). This stays on your device and is not transmitted to us as personal data.
3. Information We Do Not Collect
We do not knowingly collect your private keys, seed phrases, full payment-card numbers, or special categories of sensitive personal data (such as health, biometric, or precise geolocation data). We are non-custodial and never take control of your funds.
4. How We Use Information
We use the information above to:
- operate and display the board, profiles, market feed, and leaderboards;
- sign and validate purchase vouchers and process owner-gated color/description
and username actions;
- mirror and reconcile on-chain events into our off-chain database;
- secure the Service — including detecting, preventing, and responding to abuse,
fraud, scripting, and security incidents — through same-origin checks and per-IP rate limiting;
- measure and improve performance, reliability, and usability; and
- comply with legal obligations and enforce our Terms.
5. Legal Bases (EEA/UK Users)
Where the GDPR or UK GDPR applies, we rely on the following legal bases: (i) performance of a contract to provide the Service you request; (ii) our legitimate interests in securing, maintaining, analyzing, and improving the Service (balanced against your rights); and (iii) compliance with legal obligations. Where required, we rely on your consent, which you may withdraw at any time.
6. Cookies and Similar Technologies
The Service aims to be essentially cookieless. We use local storage for the theme preference described above, and our analytics providers are configured to operate without cookies that track you across sites. Wallet and infrastructure providers you connect to may set their own storage governed by their policies. You can control browser storage through your browser settings, though disabling it may affect functionality.
7. How We Share Information
We do not sell your personal information. We share information only as follows:
- Service providers / processors who help us run the Service, such as our
hosting and analytics provider (Vercel) and our rate-limiting provider (Upstash), under agreements that limit their use of the data.
- Blockchain networks and wallet/RPC providers, which inherently process the
public on-chain data and connection requests needed to transact (for example, Base, Ethereum, WalletConnect/Reown, and node/RPC providers).
- Legal and safety, where we believe in good faith that disclosure is
necessary to comply with law or legal process, enforce our Terms, or protect the rights, property, or safety of users or the public.
- Business transfers, in connection with a merger, acquisition, financing, or
sale of assets, subject to this Policy.
- Public by design, as on-chain data and the pixels, prices, usernames, and
descriptions shown on the board are publicly visible.
8. International Transfers
Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.
9. Data Retention
We retain off-chain data for as long as needed to operate the Service and for legitimate business or legal purposes. Request metadata used for rate limiting is short-lived. On-chain data is permanent and retained on the blockchain indefinitely, independent of us.
10. Security
We use reasonable technical and organizational measures to protect information, including same-origin enforcement, per-IP rate limiting, server-side input validation, sanitized error responses, and content-security headers. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your wallet, keys, and seed phrase.
11. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, to object to certain processing, and to lodge a complaint with a supervisory authority. California residents may have rights under the CCPA/CPRA, including the right to know, delete, and opt out of "sale"/"sharing" (we do not sell or share your personal information for cross-context behavioral advertising).
To exercise rights over off-chain data we hold, you may reach us through the channels made available on the Service. We cannot alter or delete data recorded on a public blockchain, as that data is not within our control. We may need to verify your control of the relevant wallet address before acting on a request.
12. Children's Privacy
The Service is not directed to, and may not be used by, children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, let us know through the Service and we will take appropriate steps to delete it from our off-chain systems.
13. Third-Party Links and Services
The Service links to and integrates with third-party services (wallets, blockchain explorers, RPC providers, and others) governed by their own privacy policies. We are not responsible for their practices; review their policies before using them.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes take effect when posted. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.
15. Contact
If you have questions or requests regarding this Privacy Policy, you may reach us through the channels made available on the Service.