Privacy Policy

Last updated: 2026-10-14. Applies to the Collectibles AR website (collectiblesar.com) and the Collectibles AR iPhone app.

What this service is

Collectibles AR shows the collectibles in a Solana wallet in augmented reality. The website lets you sign in with a wallet and link your iPhone. The iPhone app places cards in your camera view. We do not hold your cards or your funds.

Camera

The iPhone app uses the camera, through Apple's ARKit and RealityKit, only to detect surfaces and draw cards in your space. Camera images stay on your device. The app does not upload, record or save them, and it does not save photos or video to your library.

What we receive

Wallet address. When you sign in on the website, your browser sends your public wallet address and a signature of a sign-in message. The message is free and authorizes no transaction. We use the address to show your cards and to tie a linked iPhone to your wallet.
Linking an iPhone. We receive the one-time link code (stored only as a hash), your wallet address, and the device name iOS reports (usually just "iPhone"). We register a device session for it. The session token is stored in the iPhone's Keychain; we keep a registration for it, not the token itself.
Reading cards. When the app or website lists your cards, our server receives your wallet address and the network (demo, devnet, or mainnet read-only) and looks the cards up.
Pulls on the website. A Pull on the website creates a record with your wallet address, a Pull ID (memo), the pack type, and public transaction details such as the card's mint address and the transaction signature.
Server logs. We write an event log of link and sign-in actions (event type, a shortened wallet address, a short reference of a code or session, and time). Codes and tokens are never written in full. Our hosting provider also logs ordinary request data such as IP address and user agent.
IP address. To limit guessing of link codes, failed attempts are counted per IP address. The counter key uses a shortened one-way hash of the address and expires within minutes. We do not store the plain address for this.

On your device

iPhone app: the device session token (Keychain, this device only) and a short list of recently shown Pull IDs (app preferences).
Website: a short-lived sign-in cookie that contains your wallet address and is signed so it cannot be altered, a cookie that binds a sign-in attempt to your browser, and local browser storage for your language setting and for Pulls in progress. These are needed for the service to work.

How long we keep it

Sign-in challenge: 5 minutes, and removed on first use.
Link code: valid for 2 minutes and usable once. A record that it was used or expired is kept for 10 minutes.
Website sign-in cookie: 1 hour.
iPhone device session: 30 days, or until you unlink. After that, link again.
Failed-attempt counters: 10 minutes.
Event logs and hosting logs: kept by our hosting provider under its retention settings. We do not control a fixed period.
Pull records: kept so a Pull can be resumed and checked. Ask us to remove records tied to your wallet address (see Contact). Records on the Solana blockchain are public and we cannot remove them.

What we do not receive

We never ask for or receive your private key or seed phrase. Signing happens in your wallet app (for example Phantom). The iPhone app does not send, sell or sign anything. We do not ask for your name, email address or delivery address in the app or on the website.

Who else receives data

Vercel hosts the website and API and sees ordinary request data, including IP addresses.
Upstash provides the shared database that holds the short-lived sign-in and link state listed above.
Helius provides the Solana data service our server calls. It receives wallet addresses and asset lookups from our server, not your device.
Collector Crypt runs the gacha service and serves card images. It is an independent third party, and Collectibles AR is operated independently of it. Our server sends it the wallet address and Pull details for a Pull. When the app or website loads a card image, the image host named in the card's data receives your IP address.
Phantom is the wallet you use to sign in. Its own privacy policy governs what it handles. We do not receive anything from it except the address and signature you approve.
Google Fonts serves the website's fonts, so Google receives your IP address when a page loads.
The Solana network is public. Wallet addresses and transactions on it are visible to anyone.

We do not sell your data.

Advertising, tracking and analytics

The website and the iPhone app contain no advertising, no cross-app or cross-site tracking, and no analytics or crash-reporting SDKs.

Unlinking

In the iPhone app, tap Unlink to remove the link from that device. On the website, when signed in, use Unlink to end the links of all your devices; signing out of the website does the same. Unlinking deletes the device registration on our server immediately, and the iPhone then stops showing your cards until you link again.

Changes

If this policy changes, we will update this page and the date above.

Contact

Questions or requests about your data: twin.fold0@gmail.com