Privacy
Last updated:
This notice explains the information handled when you browse use402.io, publish a listing, or pay for a boost. Wallet addresses and persistent browser identifiers can be linked to activity; they should not be treated as fully anonymous.
Listings, wallets, and payments
When you sign in, we process your public wallet address and signed authentication message to verify wallet control and create a session. The site does not ask for your seed phrase or private keys.
We store listing information such as the website URL, domain, title, description, category, logo, ranking amount, and associated owner wallet. Metadata may come from your product website or public catalog sources.
For verified payments, we store the wallet address, transaction signature, amount, listing reference, payment type, and recording time. These records support payment verification, duplicate-payment prevention, and ranking updates.
Public information
Listing details, rankings, click totals, and daily snapshots are publicly accessible through the website and public API. Search engines and other third parties can copy public information. Daily snapshots can remain after a live listing changes or is removed.
Solana transactions, including wallet addresses, amounts, and transaction signatures, are public blockchain records. We cannot erase or make those records private, and others may link them to your activity.
First-party analytics and security
We count distinct browser identifiers, estimate active browsers over a two-minute window, and record outbound product-link clicks. Our visitor record stores a SHA-256 hash of the browser identifier and its creation time, rather than the raw identifier.
The visitor record does not contain an IP address or user-agent string. Separately, request IP addresses are processed into keyed hashes for short-lived network rate limits. These are pseudonymous security identifiers, not a guarantee of anonymity.
Hosting and network services also process request information to deliver and protect the site. The limited fields in our visitor record do not mean that no infrastructure provider processes IP addresses or device information.
Cookies and browser storage
The use402_session cookie maintains a wallet sign-in for up to seven days. The use402_visitor cookie stores a first-party browser identifier for up to 400 days so repeat visits can be recognized.
Local storage remembers your theme and pending-payment details, such as a transaction signature, amount, and recovery information. This helps recover a payment after a reload. Browser storage may remain until the application removes it or you clear it.
Cookie expiry is not a server-side deletion schedule. Removing cookies may sign you out or cause a later visit to be counted as a new browser; clearing pending-payment storage may remove information needed for recovery.
Third-party analytics
When enabled on the site, Google Analytics measures visits and usage, and Microsoft Clarity helps us understand interactions through behavioral metrics, heatmaps, and session replay.
These providers may receive page URLs, device and browser information, interaction data, and network information, and may use cookies or similar technologies. Their processing and retention differ from our first-party visitor records.
Read how Google uses information from partner sites and the Microsoft Privacy Statement for provider details and choices.
Use, sharing, and retention
We use information to operate listings and rankings, authenticate wallet sessions, verify payments, understand site use, and prevent abuse. Providers supporting hosting, storage, analytics, and blockchain access process information needed for those functions. Information may also be disclosed where legally required.
We retain listing and payment records, daily archives, analytics identifiers, and aggregate counts beyond individual browser sessions. There is no automatic deletion of these server records when a cookie expires. Retention depends on the record and operational or legal requirements; provider retention is governed separately by the relevant service.
Service providers may process information outside your country. No storage or transmission method is completely secure. Avoid including confidential or sensitive information in public submissions.
Your choices and rights
You can manage cookies and site storage through your browser and use its tracking protections. Blocking storage can affect sign-in and payment recovery. These controls do not erase server-side records or public blockchain history.
Depending on applicable law, you may have rights to access, correct, delete, or restrict personal information, object to processing, or complain to your local data protection authority. These rights may be subject to legal exceptions and do not make immutable blockchain records erasable.
This notice describes data use; it does not itself obtain consent for optional tracking. The last-updated date identifies the current version of this notice.