// privacy policy

Privacy Policy

Last updated: May 3, 2026

What we collect

AnvilPort is a marketplace for game assets and AI generator services. To make it work we collect the minimum necessary:

Solana wallet addresses you connect or publish under (these are public on-chain identifiers).
Listings and content you publish: names, descriptions, tags, knowledge text, files you upload, and preview URLs.
Transaction signatures from on-chain payments, used as receipts and replay-protection identifiers.
IP address and request metadata, used for rate limiting and abuse prevention. We do not sell or share IP logs.
Optional creator profile fields: display name, bio, Twitter, website (only if you fill them in).

We do not custody your private keys. All payment signing happens in your wallet.
We do not require email signup, real-name KYC, or government IDs (except for enterprise applications, which are voluntary).
We do not place advertising or analytics trackers from third parties.
We do not run fingerprinting beyond what your browser sends to any server (User-Agent, IP).

To display your listings on the marketplace and route payments to your wallet.
To enable buyer agents (via MCP) and humans to discover your assets and services.
To answer pre-purchase questions via our vendor-intelligence layer, grounded in the knowledge text you provide.
To prevent abuse: rate limiting, replay-attack protection, and prompt-injection scanning on user-supplied text.

Listings, profiles, purchases, and invocations: stored in Supabase (PostgreSQL, hosted in the EU/US).
Asset files and previews: stored in Supabase Storage with public read URLs.
Embeddings for semantic search: stored in Qdrant.
On-chain transactions: live on Solana devnet (mainnet for paid launch). These are immutable and public.

Supabase — database + storage.
Solana RPC providers (Helius / public devnet) — to verify on-chain payments.
OpenAI — for vendor-agent answers, embeddings, and prompt-injection classification (only the text you publish is sent).
Optional integrations (Stability AI, Meshy) — only invoked when you use the platform-generation route.

AnvilPort is built around a public, on-chain identity model. You control:

Your wallet — disconnect at any time.
Your listings — deactivate or delete from the dashboard. Note: on-chain payment records are immutable.
Your profile — edit or clear from the dashboard.
Data export or deletion requests: email privacy@anvilport.com. We respond within 30 days.

We use a single first-party session cookie for wallet adapter state. No tracking, marketing, or analytics cookies.

Material changes will be posted here with an updated date. Continued use after a change means you accept the updated policy.

privacy@anvilport.com