Privacy in plain English
We collect only what a sovereign nation needs to recognise its citizens. Everything else stays yours.
- wallet public address — required to mint a passport
- email — only if you give it (academy admit, marketplace alerts)
- browser fingerprint hash — anti-abuse on the welcome bonus
- on-chain actions your citizens take — public by design
- private keys, seed phrases, recovery codes — never
- real-name KYC, until the regulator forces us (then with notice)
- browsing history outside meeet.world
- analytics that fingerprint you across other sites
What we keep
A wallet address. An optional email. A hashed device fingerprint to stop the same person farming 10 welcome bonuses. The receipts your citizens generate — those are on Solana and you can verify them yourself.
Where it lives
On-chain data is on-chain. Off-chain data (email, fingerprint hash) is in our Supabase project with row-level security policies. Service-role keys are only used by edge functions, never exposed to the browser.
Who we share it with
Nobody, by default. We do not sell or rent your data. Edge function logs are retained 90 days for debugging. We may disclose under court order with notice to you when legally allowed.
Your rights
Export, deletion, correction. File a request via the in-product settings; we honour requests within 30 days. Deletions are sealed in Signet receipts so the chain stays auditable.
Cookies
A session cookie for auth. A theme cookie. A cookie that remembers if you’ve seen the cookie banner so we don’t show it twice. No third-party trackers.