Privacy Policy
Last updated: October 27, 2026
This policy explains what wallettr.ee (operated by Cinnelic Labs LLC, Texas, United States) collects, why, how long we keep it and what choices you have. We don't sell personal information, we don't show ads, and we don't use analytics or tracking cookies.
1. What we collect
- Account: your email address and a password (stored only as a one-way hash by our authentication provider).
- Your page: username, display name, bio, wallet addresses, links, social profiles, images you upload, theme settings and whether each item or the whole page is public or private.
- Activity records: when you sign up, sign in (including failed attempts), sign out, change your password or email, edit or delete your page or its items, change or release a username, or delete your account, we record what changed (old and new values), when, your IP address and your browser's user agent. Email addresses in these records are stored only as a keyed hash.
- Reports: the reported username, the reason, the details you write, your email address if you give it, and your IP address and user agent (to fight abuse).
- Bot protection: forms are protected by Cloudflare Turnstile, which processes device and browser signals to tell people from bots.
Visitors who only view pages are not tracked by us: we don't count views, copies or clicks.
2. What is public
Everything on a public page, and the page itself, can be seen by anyone with the link and may be indexed by search engines, unless you turn on "Hide from search engines" in Settings. Items you mark private and private pages are shown only to you. Search engines update on their own schedule: after you make a page private, hide it from search or delete it, an old copy or snippet can stay in their results for days or weeks until they visit the page again. We ask them not to index such pages but cannot remove their copies ourselves; you can ask a search engine directly (for Google, through its "Remove outdated content" tool). Images you upload are stored at hard-to-guess addresses but are not access-controlled: anyone who has an image's direct address can open it, even if the page is private.
3. Why we use it
- to provide the Service: your account, your page, emails you ask for (confirmation, password reset);
- to keep the Service safe: preventing abuse, investigating reports of impersonation or fraud, and securing accounts;
- to meet legal obligations and respond to valid legal requests.
For visitors in the EU or UK, our legal bases are performing our contract with you (the first point), our legitimate interest in a safe service (the second) and legal obligations (the third).
4. Service providers
We share data only with providers that run parts of the Service for us:
- Supabase: database, authentication and file storage (United States);
- Vercel: website hosting;
- Resend: sending account emails;
- Cloudflare: bot protection (Turnstile) and network services.
We may also disclose information when required by law, to protect people from harm, or as part of a merger or sale of the Service.
5. How long we keep it
- Account and page data: until you delete your account; deletion removes them right away.
- Usernames: a changed or deleted username stays reserved for 30 days. For deleted accounts we keep a keyed hash of the email address for those 30 days, so you can reclaim the name if you sign up again with the same email. The hash can't be turned back into the email.
- Activity records and reports: 2 years, then deleted automatically.
- Backups made by our database provider may keep data for a short period after deletion.
6. Your choices and rights
You can view and change your page and settings at any time, make items or your whole page private, and delete your account in Settings. You can also ask us to confirm what personal data we hold, give you a copy, correct it or delete it, by writing to support@wallettr.ee. We answer within 45 days.
Texas residents: under the Texas Data Privacy and Security Act you may request access to, correction of, deletion of, and a portable copy of your personal data, and opt out of its sale, targeted advertising and certain profiling. We don't sell personal data or use it for targeted advertising or profiling. If we decline a request you may appeal by replying to our answer; if you disagree with the outcome you can contact the Texas Attorney General.
Visitors from other countries (for example the EU or UK) have similar rights, which we honor through the same contact. The Service is operated from the United States, so your data is processed there.
7. Children
The Service is not for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has an account, contact us and we will delete it.
8. Security
Data is encrypted in transit, access is limited by database rules, and passwords are never stored in readable form. No system is perfectly secure; if a breach affects your personal data we will notify you as required by law.
9. Cookies
We use only what the site needs to work or what you set yourself. No advertising, analytics or tracking cookies are used, and nothing is shared for advertising, so there is nothing to accept or opt out of; a short notice only tells you this. If that ever changes, we will ask for your consent first.
- Sign-in cookies (
sb-…-auth-token): keep you signed in. Set only when you log in, removed when you log out. - Language cookie (
NEXT_LOCALE): remembers the language you picked. Set only when you choose a language; kept for one year. - Theme: your light or dark choice is kept in your browser's local storage and never sent to us.
- Bot check: Cloudflare Turnstile runs on the sign-up, password reset and report forms to stop automated abuse, and may use its own cookies or similar storage for that purpose only.
You can delete cookies in your browser settings at any time; you will then be signed out and the site will use your browser's language.
10. Changes and contact
We will post updates here and notify you of material changes by email or on the Service. Questions or requests: support@wallettr.ee. See also our Terms of Service.