Privacy Policy

1. Who is responsible

Chroma operates this site and is the controller of the data described here, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). The channel for any privacy matter is the Contact page.

2. What we collect

When you connect your wallet

• Public wallet address. It is public blockchain information, but we store it to link your account to your profile and to the referral program.
• Nickname, display name, avatar and cover, if you choose to fill them in.
• Referral events: clicks on referral links and related trades, with amount, network, coin and transaction ID — all already public on-chain — to compute the commission owed to the referrer.

When you launch a coin

• The name, symbol, description and image you submit, and the creator wallet address.

When you write to us or report a coin

• Name, email and, optionally, the public wallet address you provide.
• The text you write.
• A hash of your IP address — not the IP itself. Explained in the next section.

What we do NOT collect

• Private key and recovery phrase. Never. The site is non-custodial and has no way to access them.
• Government ID numbers, home address, bank or card details.
• We do not use behavioral advertising or third-party ad trackers.

3. Why we store a hash of the IP, not the IP

An IP address is personal data. We need it for a single question: "has this same source sent many messages in a few minutes?" — that is what keeps the form from becoming a spam machine.

A salted hash answers exactly that and cannot be reversed to the original address. That is what we store. The IP itself is not written to any of our tables.

4. Legal bases

• Performance of a contract (art. 7, V): account, profile, referral commission calculation.
• Legitimate interest (art. 7, IX): security, fraud and abuse prevention, and moderation of reported content.
• Consent (art. 7, I): what you choose to fill in, such as an avatar or a wallet in the contact form.
• Compliance with a legal obligation (art. 7, II), when applicable.

5. Who we share with

We do not sell data. We share only with the providers needed for the site to exist:

• Vercel — hosting and storage of uploaded files.
• Neon — database.
• Resend — sending emails generated by the forms, when configured.
• RPC providers and market data sources — queried to show prices, charts and audits. When a page loads, your browser may connect directly to these services, which then see your IP under their own policies.
• Wallets (Phantom, MetaMask and similar) — extensions controlled by you and by their own terms. We have no access to what is inside them.

Some of these services operate outside Brazil, which implies an international data transfer, made under the applicable legal grounds.

6. What stays in your browser

We do not use tracking or advertising cookies. We use one cookie that remembers the language you chose, and your browser's localStorage to remember interface preferences — such as the sidebar being open or closed and the ID of whoever referred you.

This stays on your device and can be erased at any time in your browser settings.

7. How long we keep it

• Account and profile: while the account exists.
• Old nicknames: kept even after a change, so referral links already shared keep working and nobody can take over someone else's name.
• Referral events: kept for as long as needed to settle commissions and meet any legal obligations.
• Messages and reports: kept while needed to handle the case and to prove we acted on it.

8. Your rights

Under the LGPD, you may at any time request:

• Confirmation that we process your data, and access to it.
• Correction of incomplete or outdated data.
• Anonymization, blocking or deletion of unnecessary or excessive data.
• Portability, information about sharing, and withdrawal of consent.

Ask through the Contact page. We reply within the legal deadline.

9. Security

We use encrypted connections, a database with restricted access, security headers, rate limits on forms and validation of everything that comes from the browser. Still, no system is unbreakable — and your wallet remains the most sensitive part, protected by you.

10. Minors

The site is not intended for people under 18, and we do not knowingly collect data from children or teenagers. If that happens, let us know through the contact page so we can remove it.

11. Changes

This policy may change as the site evolves. The date at the top shows the version in force. Relevant changes will be flagged on the site.

This translation is provided for convenience. In case of divergence, the Portuguese version prevails.