Privacy Policy

1. What we collect

We collect only what the service needs to work:

• Account: the email or login method you sign in with, and the wallet addresses linked to your account.
• Agents: each agent's name, key, policy, venues, connected wallets and the actions it takes through Thirdfy, with their receipts and refusals.
• Claims: when you claim an agent, the claim link and the proof that you control it.
• Use: technical data our servers record when you visit, such as your IP address, browser and the pages you request, used for security and to fix errors.
• Messages: what you type into Thirdfy's chat and what you send us.

2. What becomes public

Only what you publish. When you publish an agent on the Agent Index, its name, venue, wallet address and signed score become public, and so do the score's checks. Public pages also have Markdown copies and share images that anyone can fetch.

Your email and account stay private. Blockchain transactions are public by design. Anything an agent does on a public chain can be read by anyone, and no one, including us, can erase it.

3. How we use it

We use your data to run the service, keep it secure, enforce your agents' limits, show your records, answer your messages, and meet legal duties. We do not sell personal data and we do not run ads.

4. Who helps us run Thirdfy

A few providers process data for us. Privy handles sign-in and embedded wallets. Our website is hosted on Vercel. Venues, chains and protocols that your agent uses receive what the agent sends them. We share data with authorities only when the law requires it.

5. Cookies and browser storage

We use only what the site needs. Sign-in is kept by Privy. While the site is pre-launch, a cookie remembers that you entered the access password. The claim page keeps your claim token in your browser's session storage until you finish or close the tab. We do not use advertising or cross-site tracking cookies.

6. How long we keep it

We keep account and agent data while your account is open and for as long after as we need for security, accounting or the law. Signed records and receipts may be kept longer because they are the proof the service exists to give.

7. Your choices

You can ask to see, correct or delete the personal data we hold about you, to unpublish an agent, or to close your account. We cannot delete what is already on a blockchain or copied by others. Where the law gives you more rights, such as under the GDPR or CCPA, we will honor them.

Reach us on X at @thirdfy_ (https://x.com/thirdfy_) until a legal contact address is published.

8. Security

Thirdfy does not hold the keys of wallets you own, and API keys are never in the browser. No system is perfectly secure, so keep your sign-in and your agents' keys safe, and tell us at once if you think one leaked.

9. Children

Thirdfy is not for anyone under 18, and we do not knowingly collect their data.

10. Changes

We may update this policy. The date at the top shows the latest version, and we will say so on this site if a change matters.