Last updated: July 15, 2026
Account information: email address, username, display name, profile details (bio, avatar, banner, website), preferences, and account creation/update dates.
Public content: posts, comments, media, profile pages, follows, likes, reposts, and other actions you choose to publish or interact with.
Wallet and blockchain information: public wallet address, collection contract, token IDs, transaction hashes, marketplace listings, offers, bids, purchases, and other public on-chain references. Blockchain data is public by design.
Traffic and product analytics:
First-party product analytics is on by default. You can turn it off in Settings → Privacy. When turned off, we stop writing your first-party traffic and product analytics events for that account. Essential security and reliability processing continues.
Security and audit data: login, password reset, verification challenges, wallet unlock, rate-limit, and abuse-prevention events. These may include hashed IP addresses, coarse location from hosting headers, user agent, device class, and hashed device identifiers.
Device data: browser type, operating system, device class, and a first-party random device ID stored in your browser's local storage and sometimes sent as a request header for security, rate limiting, and trusted-device checks. We hash device IDs before storing them server-side. We do not collect raw MAC addresses or build advertising fingerprints from canvas/WebGL signals.
Local storage / similar technologies: Imutabl primarily uses browser local storage and session storage (not first-party marketing cookies) for auth session tokens, theme preference, analytics anonymous/session IDs, wallet unlock session id, and the device ID above. Our hosting platform may also use its own analytics tooling (see Section 6).
We use information to operate Imutabl, authenticate users, protect accounts, process wallet and marketplace actions, improve reliability, measure product usage (including admin dashboards for active accounts, countries, devices, and approximate time spent), personalize basic product experiences, send account/security notifications, enforce our Terms, and respond to legal or safety issues.
We read your IP address on the server to apply rate limits, detect risky logins, and resolve coarse location. For traffic and product analytics we store hashed IP values (or no IP at all in traffic history) — not raw IP as an analytics identity.
Country / region / city come from our hosting platform request headers when available.
For high-risk security events, we may keep an encrypted copy of the raw IP for a short period (about 30 days by default) to investigate abuse or account takeover. Access is restricted to authorized server-side systems.
We may also store per-account country summaries (signup / primary / last-seen country) derived from those same headers.
We may ask for additional verification when a login, password reset, wallet action, new device, new IP, or unusual location appears risky. Verification may include email codes, trusted-device checks, TOTP authenticator apps, recovery codes, or future passkey support.
We do not log passwords, wallet PINs, private keys, recovery codes, or session secrets in plaintext. One-time email verification codes may be stored temporarily so we can verify them, and they expire quickly.
Imutabl is built around public blockchain and decentralized storage. Wallet addresses, token ownership, transaction history, and minted content may be visible to anyone. Imutabl cannot delete or modify public on-chain records, even if you deactivate or delete your account.
We do not sell personal information. We may share information with trusted service providers that help us operate Imutabl — for example hosting, authentication, databases, file storage, media delivery, email delivery, and analytics that support the Service. These providers process data only as needed to provide their services to us.
Public blockchain networks may receive wallet and marketplace data you initiate; that data can be visible to anyone. Turning off first-party analytics in Settings does not necessarily disable analytics operated by our hosting platform as part of serving the site.
We may also share information when you ask us to, to comply with law, to protect users or Imutabl, or as part of a business transfer.
We keep account and product data while your account is active or as needed to provide the Service.
On-chain and decentralized storage content may persist outside Imutabl's control.
In Settings you can manage theme, language, notifications, and first-party analytics. Device-identifier preferences in Settings relate to optional product preferences; a first-party device ID may still be used for security and abuse prevention as described above.
Depending on your jurisdiction, you may request access, correction, export, deletion, or objection to certain processing.
A data export may include account data, settings, posts, comments, interactions, wallet public data, marketplace records, notifications, traffic/analytics linked to your account, and security activity summaries. Exports do not include wallet private keys, PINs, passwords, or live session secrets.
Account deactivation hides off-chain profile details (bio, banner, social posts, likes). Minted NFT posts remain public because ownership lives on-chain. Visiting a deactivated profile shows that the account is deactivated; holders can still see pieces they own from that collection. You can reactivate by signing in and confirming on the reactivate screen.
Imutabl is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Your information may be processed in countries other than where you live (including where our hosting and database providers operate). We use safeguards appropriate to the type of data and service providers involved.
We may update this Privacy Policy from time to time. We will post the updated policy with a new "Last updated" date and provide additional notice where required.
If you have questions about this Privacy Policy, contact us at hello@imutabl.com.