Privacy Policy
This policy explains what we collect when you use USDC Homes, why we collect it, who else sees it, and how to stop it. It forms part of our Terms of Service.
1. What we collect
You give us
- Listing links and property details you paste or type, including any home you submit.
- Contact details when you list a home or file a redemption claim: name, email, phone, preferred channel, and legal name where a claim requires one.
- Wallet addresses you connect, and the signatures you choose to give.
Collected automatically
- Usage events. Pages viewed, searches and filters, listings opened, wallets connected, orders and bids prepared, signed, placed, cancelled or failed, redemptions started, copies, menu and link clicks, and the errors you hit.
- Device and session data. IP address, approximate location derived from it, browser and operating system, device type, screen size, language, referring page, and timestamps.
- Session replays. See section 3.
- Server logs. Request paths, status codes and timings, for reliability and abuse prevention. Import endpoints are rate limited per IP.
2. What we never collect
We never ask for, receive or store private keys, seed phrases or wallet passwords. Nobody at USDC Homes will ever ask you for them. Anyone who does is attacking you. We do not take custody of assets and we cannot move them.
We do not collect government identity documents through this site, and we do not run payment cards. Where identity verification is needed to settle a redemption claim, it is handled separately by the registrar and covered by its own notice.
3. Session replay
We use Amplitude Session Replay, which records a reconstruction of your session: pages, mouse movement, clicks, scrolling and navigation. It is not a video of your screen and it does not access anything outside this site.
Replays help us see where the interface confuses people and how failures actually happen. Text you type into inputs is masked by default by the provider, and we do not deliberately capture the contents of form fields. Do not enter anything into this site that you would not want recorded. To turn replay off entirely, opt out in section 10.
4. Why we collect it
| Purpose | What it covers |
|---|---|
| Operating the Service | Showing listings, preparing signatures, storing orders and claims you create. |
| Product analytics | Understanding which parts are used, where people give up, and what breaks. |
| Reliability and security | Diagnosing errors, rate limiting, detecting abuse, fraud and attacks. |
| Communication | Replying about a home you submitted or a claim you filed. |
| Legal | Meeting obligations, responding to lawful requests, and defending claims. |
Where the GDPR applies, we rely on legitimate interests for analytics, security and product improvement; on contract performance for operating the Service; on consent where required for analytics cookies and session replay; and on legal obligation where the law compels us.
5. Who we share it with
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it with processors who help us run the Service:
| Provider | What it receives |
|---|---|
| Amplitude | Usage events, device and session data, session replays, connected wallet address. |
| Google Analytics | Usage events and device data. IP anonymisation is on and advertising signals are off. |
| Railway | Hosting and database. Sees traffic and stored records. |
| Anthropic | Listing page content sent for extraction when you import a link. |
| Composio | The listing URL, when a site refuses us and a browser reads it instead. |
| Slack | Our own operations channel. Receives a notice when a home is listed, a listing link is pasted, a bid is placed or an order is signed, including the address of the property, the amount, the wallet address, and, for an owner submission, the contact details that owner gave us. |
| RPC and blockchain providers | Contract addresses and wallet addresses in the course of reading chain state. |
We also disclose information where we believe in good faith that the law requires it, or that it is necessary to protect our rights, our users, or the public. If the business is acquired, information may transfer with it. These providers may process data outside your country, including in the United States.
6. Onchain data is public and permanent
Transactions, balances, orders, signatures and redemption claims recorded on a public blockchain are visible to everyone and cannot be edited or deleted by us or by anyone. A wallet address can often be linked to a real identity by third parties using techniques we neither control nor can prevent. Assume anything you do onchain is permanent and public. A request to erase personal data cannot reach data on a blockchain.
7. Cookies and similar technologies
We use cookies and local storage for functionality (remembering your admin key locally, your analytics opt-out) and for analytics (Amplitude and Google Analytics device and session identifiers). We do not use advertising cookies. You can block cookies in your browser, though parts of the Service may stop working. We honour Global Privacy Control and Do Not Track: when your browser sends either, analytics and session replay do not start at all.
8. Retention
Property records, orders, bids and redemption claims are kept for as long as the Service operates, because they are the record of the Service. Analytics and replay data are kept according to the provider’s retention settings, typically no more than 12 months for replays. Server logs are kept for a short operational period. We keep what we must to comply with the law or defend a claim.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information; to object to processing based on legitimate interests; to withdraw consent; and not to be discriminated against for exercising a right. Contact us to make a request. We will verify it before acting, and we may decline where the law allows.
We cannot delete anything recorded on a blockchain, and we cannot delete records we are required to keep. Where GDPR applies, you may complain to your supervisory authority.
10. Turning analytics off
Use the control below to stop Amplitude and Google Analytics, including session replay, for this browser. The choice is stored locally on your device, so it applies per browser and is cleared if you clear site data. You can also block the providers in your browser or with an extension, and Google offers an opt-out add-on for Analytics.
11. Security
We use reasonable technical and organisational measures to protect the information we hold, including TLS in transit and access controls on the database. No system is completely secure. We cannot guarantee that information will never be accessed, disclosed, altered or destroyed, and you send it to us at your own risk. Your own security, especially of your wallet, is your responsibility.
12. Children
The Service is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
13. Changes
We may update this policy by posting a revised version with a new date. Material changes will be reflected here; continuing to use the Service after a change means you accept it.