Privacy Policy

This is a draft privacy notice for the Chimera website and platform. It is not a finalized privacy policy. The operator’s legal identity, location and public privacy contact have not yet been designated. Those details and the request process must be completed before this notice is finalized.

Chimera provides software and infrastructure for creators to deploy and manage NFT/token campaigns, and interfaces for users to view collections and submit transactions. This notice describes the current integration; independent networks, marketplaces and identity providers have their own privacy practices.

Email or X sign-in is provided through Privy. Privy processes authentication information and provisions an embedded wallet. Depending on the method used and permissions granted, account information can include an email address, social account identifier and profile, a Privy user identifier, linked wallet addresses and authentication/session information.

Chimera verifies Privy authentication tokens to control membership. Membership records include the Privy identifier, invite code, inviter relationship, admission date, founder status and active status. Invite counts and total membership counts support the referral feature. Inviting someone does not give the inviter access to their email credentials, wallet keys or funds.

The interface uses wallet addresses to retrieve balances, holdings, transaction history, permissions and reward information. When you submit a transaction, its addresses, amounts, contract calls and other transaction data are processed by network infrastructure and may become permanently public onchain.

Collection creation can involve names, descriptions, artwork, metadata links, social links, wallet addresses and fee configurations. Drafts and transaction-recovery state may be stored in your browser. Saved collection profiles and uploaded artwork may also use hosted storage where that feature is enabled. Publishing a collection makes its published content and onchain settings available to others. Do not include confidential or unnecessary personal information in artwork or metadata.

Information is used to authenticate users, administer invitations, maintain wallet sessions, save collection information, display markets and holdings, prepare requested transactions, operate reveal and indexing services, investigate failures and prevent abuse.

Website and infrastructure providers may process IP addresses, browser/device information, request timestamps and diagnostic logs when delivering the service. These records can be used for reliability, security and troubleshooting. Public blockchain activity may be linkable to an account even when an address does not display a real name.

Chimera uses Privy for authentication and embedded-wallet infrastructure, Vercel for the website, Railway for backend services, and Supabase for membership and collection storage. RPC providers and indexing services, including Goldsky, process blockchain queries. Market and media providers such as OpenSea and external image hosts may receive requests when their content is used.

Information may be disclosed to providers as needed to operate these features, to the services you authorize through a transaction or social login, and where required by applicable law. Loading externally hosted media can disclose connection information to its host. A public transaction is visible beyond Chimera’s service providers.

Privy’s own privacy notice and user terms describe its handling of authentication and wallet information. Signing in with X also involves X’s policies and the permissions shown in its authorization flow.

Privy Privacy Policy ↗Privy User Terms ↗

Chimera uses a secure, HttpOnly membership cookie to authenticate server requests. Its configured lifetime is one hour; token validity and membership checks can end access sooner. Privy maintains its own authentication state. Browser storage also remembers the wallet connection, draft collections and launch-recovery information. Session storage can preserve an invite code during onboarding.

Clearing cookies or browser storage may sign you out and delete locally saved drafts or recovery information. It does not delete your hosted membership record, close a Privy account, revoke token approvals or remove onchain activity. Export any draft you want to keep before clearing storage.

Local drafts remain until removed or browser storage is cleared. Hosted records and infrastructure logs have separate retention and backup lifecycles. Chimera’s final policy must define a retention schedule based on operational needs and applicable obligations; no fixed hosted-data deletion period is promised in this draft.

Depending on applicable law, you may have rights to request access, correction, deletion, portability or restrictions on processing, to object to certain processing, and to complain to a privacy regulator. The operator must establish a working request contact and verification process before finalizing this notice. Never provide a private key or recovery phrase to make a privacy request.

Deleting offchain account information cannot erase public blockchain records or independently cached or republished metadata. It also does not recover, move or redeem assets. Secure your wallet access and assets before closing accounts. Requests concerning Privy’s own processing can be directed through its published privacy policy.

Authentication, access controls and transport encryption help protect information, but no system is guaranteed secure. Protect your email and social accounts, verification codes and wallet recovery material. The platform is intended for adults; the final policy and onboarding must address applicable age and eligibility requirements.

Service providers may process information in countries outside your own. The final notice must identify the operator’s applicable legal bases, transfer safeguards and any jurisdiction-specific disclosures. Material changes should be communicated through the platform with a revised effective date. This draft has no effective date and does not replace the need to complete those details.