Privacy Policy

Data We Collect

• — Cardano wallet address — identifies your account and attributes certificates, domain verifications, and organization membership to you.
• — Certificate content you type into the mint form (recipient name, date, issuing organization) — stored off-chain as a fast-lookup mirror of what is minted on-chain, and separately minted on-chain itself.
• — Domain verification records — the domain name, your wallet address, and the CIP-30 signature you produce to prove control of that wallet.
• — Organization records — organization name, region, domain, member and invited-member wallet addresses, and the display names members choose for themselves.
• — On-chain transaction hashes and payment amounts for mints, domain verifications, and organization creation — used to confirm payment and prevent a transaction from being credited twice.

Data We Do Not Collect

• — No email address, password, or account system of any kind.
• — No government ID, real-name verification, or KYC — certificate content is user-typed and unverified.
• — No IP address logging and no analytics or advertising cookies.
• — No credit card or bank details — all payment happens on-chain in ADA.

Blockchain Data

Once a certificate is minted, its content becomes a permanent, public NFT on Cardano mainnet. We cannot delete, edit, or hide data that has been confirmed on-chain — no one can. Our database is only a faster index over what is already public on the ledger: deleting a database row does not remove the certificate from Cardano, and the same data can always be independently reconstructed from the chain itself.

Third Parties

• — Blockfrost — reads and submits Cardano transactions on our behalf.
• — Supabase — hosts the off-chain database described above.
• — Charli3, with CoinGecko as a fallback — prices ADA against USD.
• — EchoID, a sibling EchoForge product — on a confirmed mint, we send it your wallet address, the ADA/USD amount paid, and the transaction hash so it can credit your EchoForge-wide activity.

We do not sell your data, and we do not use it for advertising.

Cookies

EchoCert does not use cookies. See the Cookie Policy for the one piece of local browser storage it does use.

Your Rights

You can request access to, or deletion of, your off-chain records by contacting us. Deleting an off-chain record removes it from our database but cannot remove or alter anything already confirmed on the Cardano blockchain.