Privacy Policy

Last updated: October 13, 2026

This Privacy Policy explains what information TokenAnvil ("we," "us") collects when you use tokenanvil.store and app.tokenanvil.store (the "Service"), and how we use it. We built TokenAnvil to require as little personal information as possible.

1. Information We Don't Collect

We do not require an account, email address, or personal identity information to use TokenAnvil. We never ask for, receive, or store your private keys or seed phrase under any circumstance.

2. Information We Do Collect

• Public wallet address: When you connect a wallet, we can see your public wallet address, which is inherently public information on the blockchain.
• Transaction data: The tokens, metadata, and transactions you create through TokenAnvil are recorded permanently and publicly on the relevant blockchain. This is separate from and outside our control.
• Uploaded content: Logo images and metadata you upload during token creation are stored on GitHub (a third-party service) so they can be referenced by your token's on-chain metadata. See Section 4.
• Usage data: Standard web analytics such as pages visited, browser type, and approximate location derived from IP address, used to understand traffic and improve the Service.
• Contact form submissions: If you email us or use our contact form, we retain that correspondence to respond to you.

3. How We Use Information

We use the limited data described above to operate the Service, respond to support requests, detect abuse, and improve TokenAnvil. We do not sell your data to third parties.

4. Third-Party Services

TokenAnvil relies on third-party infrastructure to function, including:

• Solana — the currently supported minting network. Transaction data is public and permanent.
• GitHub — used to host token logo images and metadata JSON files publicly, so wallets and block explorers can display your token correctly. Anything uploaded here is public by design.
• Wallet providers (e.g. Phantom, MetaMask) — governed by their own privacy policies.

5. Cookies

We use session storage to measure the path from our informational pages to the creator and to remember source and campaign information. Google Analytics 4 also measures page visits and limited creator-step events; its script may set analytics cookies under Google's policies. We do not send wallet keys, token form contents, or payment credentials to Google Analytics, and we do not use advertising remarketing cookies. Browser controls or blockers may prevent some analytics from being recorded.

The creator saves a public launch receipt on your device to recover an interrupted confirmation, with up to 20 archived receipts after you explicitly start another token. Receipts contain public transaction and mint information, not wallet secrets. Clearing browser storage can remove local receipts but cannot undo a blockchain transaction. Reported source and campaign information is retained for the browser session. The owner workspace separately retains receipts checked against Solana and limited source reports for support and operational reporting; reported traffic attribution is not proof of a person's identity.

6. Data Retention

Blockchain data is permanent and cannot be deleted by us or anyone else. Off-chain data we control (such as contact form messages) is retained only as long as necessary to address your request.

6a. Token Pages (optional paid feature)

If you buy or visit a Token Page we process the following, and nothing more than we need to run the feature and keep it safe:

• Owners: your public wallet address, the page content you enter (text, links, an optional banner image, team and roadmap entries), your settings, and an optional notification email that we use only to warn you before a page rests or is removed. When you sign in we set one strictly necessary, HttpOnly session cookie that lasts 12 hours. Wallet signatures prove ownership and cost nothing; we never receive your private keys or seed phrase.
• Visitors: if you post in a community feed we store your display name (optional) and your text; if you send a message we store your optional name, optional reply contact and your text. To limit spam and count visitors we derive a pseudonymous identifier from your IP address (a keyed hash; we do not store the raw IP address on page records). We treat this identifier as personal data. The daily visitor marker changes every day and is deleted after 120 days; the identifier attached to a community post, message or report is used only to rate-limit abuse and to let a page owner block a poster, and is deleted after 90 days (reports) or 180 days (posts) and with the post itself. Our legal basis is our legitimate interest in keeping the service safe; you can contact us to object. Visitor counts shown to owners are anonymous totals per day.
• Reports: if you report a page we store the reason, your description, an optional contact you choose to give, and a one-way hash of your IP address.
• Retention: messages are deleted after 90 days, sign-in sessions after 12 hours, visitor markers after 120 days, abuse identifiers as described above, and a removed page and its content are deleted as described in the Terms. Owners can download or delete their page data at any time. To ask us to delete something else, use the Contact page.
• Services involved: pages are delivered through Cloudflare. Images such as a token logo may be loaded from third-party hosts the owner chose (for example GitHub). A video on a page loads from YouTube (privacy-enhanced mode) only when a visitor clicks play. We read public blockchain data through a Solana RPC provider. We do not sell personal data and do not use advertising trackers on Token Pages.

7. Your Choices

You can disconnect your wallet at any time. Because token creation transactions are on-chain and irreversible, we cannot delete or modify data once it has been submitted to a blockchain.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date above.

9. Contact

Questions about this policy can be sent via our Contact page.