Privacy Policy

1. Introduction

Nothing. is operated as a personal project by its owner. Nothing. is not currently represented as a corporation or separate legal entity.

This Privacy Policy explains how Nothing. handles information when you visit the website, connect a Solana wallet, start or continue a doing-nothing status, burn $NOTHING tokens, set a leaderboard username, or view public app activity.

2. Scope of This Policy

This policy covers app-controlled information handled by Nothing. It does not control public Solana blockchain records, wallet provider systems, Solana RPC providers, blockchain explorers, hosting providers, optional infrastructure providers, or linked third-party websites.

3. Information We Collect

When you connect a wallet or use wallet features, we may process:

• Your Solana wallet address.
• Your selected wallet provider or wallet adapter.
• Wallet login challenge messages, nonces, and signatures.
• Session cookies and short-lived challenge cookies.
• Start, keep, burn, leaderboard, and profile activity associated with your wallet address.
• Solana transaction signatures, memo text, timestamps, slots, token mint details, token account details, and burn amounts.

We do not ask for names, email addresses, phone numbers, mailing addresses, payment card details, or private keys.

4. Wallet Information

Wallet addresses are pseudonymous, but they can sometimes be linked to a person through public blockchain activity, third-party wallet activity, or information you submit, such as a username. The app asks your wallet to sign login messages to verify that you control the wallet. The app does not receive your private keys.

5. Blockchain and Public On-Chain Data

Start, keep, and burn actions may create Solana transactions. Those transactions may include your wallet address, transaction signature, memo text, token account, token mint, burn instruction, amount, fee payer, timestamp, slot, and other public blockchain details.

Public Solana blockchain records are not controlled by Nothing. They may be permanent, public, searchable, copied by third parties, and impossible for Nothing. to delete or modify.

6. App Activity Data

The app stores app activity to make the product work, including whether a wallet has started doing nothing, keep counts, pending and finalized status, latest memo or burn signatures, burn totals, and verification status. This activity can be linked to the wallet address that performed it.

7. Leaderboards, Burns, Aliases, and Public Activity

Leaderboards may publicly display wallet addresses, optional usernames, nothing counts, burn counts, burn amounts, and latest activity times. Burn history may publicly display wallet addresses, optional usernames, burn amounts, burn timestamps, and links to public Solana Explorer transaction pages.

If you choose to set a leaderboard username, the app normalizes it to lowercase, associates it with your wallet address and Solana cluster, and displays it publicly. Usernames are designed to be set once. Do not submit personal information as a username.

8. Information Collected Automatically

The app uses operational request data such as request IDs, API paths, request methods, timing data, rate-limit state, and hashed or masked identifiers for security, debugging, and abuse prevention. Depending on hosting and proxy configuration, IP addresses may be used for rate limiting. Development-only client debug storage may include browser user agent and page path for troubleshooting.

9. Cookies, Local Storage, and Similar Technologies

Nothing. uses HTTP-only, same-site cookies for wallet login sessions and short-lived wallet action challenges. Login and action challenges expire after about five minutes. Wallet session cookies expire after about seven days or when you disconnect.

The app also uses local storage and session storage for theme preference, UI cache, pending wallet/mobile actions, pending transaction recovery, and debug state. Nothing. does not use advertising cookies, tracking pixels, fingerprinting, or analytics scripts in the reviewed code.

10. How We Use Information

We use information to:

• Verify wallet ownership and maintain wallet sessions.
• Prepare and verify start, keep, and burn actions.
• Prevent replay, abuse, fraud, and excessive API use.
• Calculate status, leaderboards, burn totals, and history.
• Operate, secure, debug, and improve the app.

11. How We Share Information

Nothing. does not sell or rent personal information. The reviewed code does not show sharing personal information for advertising or marketing. Information may be shared with service providers and public networks as needed to operate the app, verify transactions, provide wallet features, prevent abuse, or comply with legal obligations.

12. Third-Party Services

The app may use Supabase, Solana RPC providers, Solana blockchain networks, wallet providers, public blockchain explorers, hosting providers, optional Redis/KV providers, optional log-ingestion providers, and linked third-party sites. The current hosting provider and any optional production logging or analytics providers should be confirmed before publication.

13. Wallet Providers and Blockchain Networks

Wallet providers process wallet connection, signature, and transaction approval requests under their own terms and privacy policies. The app supports Phantom, Solflare, and Backpack wallet flows. Users approve wallet actions through their own wallet.

14. Public Blockchain Explorers

The app links to public Solana Explorer pages for transactions. Explorers and other blockchain tools may show wallet addresses, transaction signatures, instructions, fees, memo text, token account information, timestamps, and related public blockchain data.

15. Data Retention

We keep app-controlled records for as long as the Nothing. feature is operated, or as needed for security, abuse prevention, troubleshooting, dispute resolution, and legal obligations. Session and challenge cookies expire automatically or are cleared on logout/disconnect. Public Solana blockchain records are not controlled by Nothing. and may not be deletable.

16. User Choices and Controls

You can browse public pages without connecting a wallet. You can choose not to connect a wallet, not to submit start or keep transactions, not to burn tokens, and not to set a username. You can disconnect your wallet, clear browser storage, or use wallet provider controls. Disconnecting does not erase app database records or public Solana blockchain history.

17. Data Deletion and Limitations

The app does not currently provide a self-service delete-account feature. For privacy questions or requests, contact contact@itsnothing.app. Nothing. cannot delete or modify public Solana blockchain records. Username changes or removal may not be available through the app.

18. Security

The app uses signed HTTP-only cookies, CSRF checks, rate limiting, nonce replay protection, server-side Supabase access, row-level security on Supabase tables, and operational logging safeguards. No method of transmission or storage is perfectly secure. This policy does not claim that data is encrypted, anonymized, or never logged beyond what has been verified in the code.

19. No Custody of Funds

Nothing. does not custody user funds, private keys, or seed phrases. Users pay their own Solana blockchain/network fees. Burning $NOTHING tokens is intended to permanently reduce the user's token balance for the burned amount.

20. International Users

This policy is intended for an operator located in Canada, with province/territory and applicable privacy laws to be confirmed. If you use the app from outside Canada, your information may be processed in other countries by Nothing., hosting providers, Supabase, RPC providers, wallet providers, blockchain explorers, and other third parties.

21. Children's Privacy

Nothing. is not directed to children and does not knowingly collect personal information from children. If you believe a child has provided personal information through the app, contact contact@itsnothing.app.

22. Legal Rights by Region

Depending on where you live, you may have privacy rights related to access, correction, deletion, objection, withdrawal of consent, or complaints. Any Canadian privacy-law language, including PIPEDA, provincial private-sector privacy laws, or Quebec Law 25, should be reviewed by legal counsel before publication. This policy does not claim compliance with a specific privacy law unless the operational processes needed for that law are in place.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updated versions will be posted on this page with a revised effective date.

24. Contact Information

For privacy questions or requests, reach contact@itsnothing.app.