Privacy Policy
- Document
- Privacy Policy
- In force from
- 2026-10-18
- Issued by
- Multi NFT LLC, trading as MultiNFT · 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801
- Applies to
- everyone who visits this site or buys from it
- Read with
- Terms · Legal & company · Security · Contact
Multi NFT LLC operates this site and decides what is collected here and why. This policy explains it. It is short because we collect little.
What we collect, and for how long
| Data | Why | Kept for |
|---|---|---|
| The wallet address you enter | To deliver your token | 7 years (accounting) |
| Order record: reference, item, price, status, transaction hash | To fulfil the order and meet accounting and tax obligations | 7 years |
| Your email address, if you write to us | To answer you | 3 years |
| Server logs: IP address, timestamp, page requested | Security and fraud prevention | 90 days |
The wallet address is the one piece of this you supply yourself, and it is public by nature: it is written to a public blockchain by the mint, where anyone can read it. Choose the address you are content to have on that record.
What we do not collect
We never receive or store your card number, expiry date or security code — those go directly to our payment partner's own window. We set no advertising or analytics cookies, we run no third-party trackers, and we sell personal data to nobody, for any price, in any circumstance.
Who else sees it
Three parties, and this is the complete list:
- Our payment partner, acting as merchant of record for the card transaction, to take payment and to perform the identity and sanctions checks the law requires of it. It holds your card details; we do not.
- Our hosting provider, which runs the servers this site is served from.
- Law enforcement or a regulator, where we are legally required to respond.
Each of them handles the data for us and for the purpose above, and for nothing else. We pass personal data to advertisers, brokers and data markets on no occasion.
Where your data is processed
We operate from the United States, and the data described here is processed and stored there and by the providers named above. If you write to us from another country, your data is handled in the United States.
How we protect it
The site is served over HTTPS only. Card details take a path that never touches this application, so the most sensitive value in a purchase is one we are structurally unable to hold. Payment notifications are authenticated by HMAC-SHA256 over the raw request body with a constant-time comparison, and the endpoint refuses to operate when no secret is configured rather than accepting an unsigned request. Access to the order record is limited to the people who operate the shop.
If something goes wrong
If personal data held by us is exposed, we will tell the people affected and the authorities the law requires us to tell, within the time the law allows, and we will say what happened rather than that “an incident occurred”. Write to legal@multinft.app if you believe something has been exposed; we treat that as a defect and answer within 1 business day.
A note about the blockchain
Your wallet address and the mint transaction are recorded on a public blockchain. That record is permanent, worldwide, and outside our control — we are unable to edit or delete it, and so is everyone else. Please consider which address you use.
The token's own metadata is written per item type rather than per individual token, so the only thing it can carry is a description of the item. This is deliberate: a permanent public record should describe the item and only the item.
Your rights
You may ask us for a copy of your data, ask us to correct it, or ask us to delete it. You may also ask us what we have collected about you and who we gave it to. Write to legal@multinft.app; we answer within 30 days, and we will treat you exactly the same afterwards.
Two limits, stated plainly: we keep what accounting and anti-money-laundering law requires us to keep, for as long as it requires; and on-chain data is beyond deletion by anyone, ourselves included.
Depending on where you live, these rights may also be yours under a state privacy law. We apply them the same way to everyone, so there is one process rather than a form per state.
Children
This site is intended for adults and is directed at people aged 18 and over. We collect personal data from children on no occasion knowingly. If you believe a minor has given us data, write to legal@multinft.app and we will delete it.
Cookies
We use only what is required for the site to function. No advertising or analytics cookies are set, and there is nothing here to opt out of because there is nothing collecting you.
Changes to this policy
If this policy changes, the current version is always the one on this page, dated in the masthead at the top. We note any material change here rather than by contacting you individually.
Who to write to
Multi NFT LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801 · legal@multinft.app