Minimal data by design.

Membership data

For Whop sign-in, TokenRealm may process the Whop user identifier and profile fields returned with the authorized sign-in, such as name and email, plus TokenRealm session dates and the access tier returned by Whop. For direct on-chain access, TokenRealm may process your public wallet address, login challenge/signature information, session dates, membership tier and expiry, invoice records and transaction hashes.

Contact-form data

When you contact TokenRealm, the name, email address, subject and message you provide are stored in the service database and routed to our support team. A one-way hash derived from the connection IP address is stored temporarily as an anti-spam/rate-limiting signal; the raw IP address is not stored by this application.

What we never ask for

TokenRealm never needs your seed phrase or private key. Never send them through the contact form, email or any support channel.

Purpose

Data is used to authenticate members, verify Whop or direct-payment access, provide purchased content, answer support requests and protect the service from abuse.

Infrastructure and processors

The application is designed for Cloudflare Workers and D1. Whop processes Whop checkout and Whop account authentication as a third-party platform. Direct crypto payments are publicly observable on the Base blockchain.

Cookies

Strictly necessary session cookies are used after Whop or wallet authentication. The base site does not require advertising trackers.

Retention and rights

Records may be retained when required for service operation, fraud prevention, accounting or legal obligations. Depending on applicable law, users may have rights of access, correction, deletion or objection.

Contact

Use the TokenRealm contact form for privacy and support requests.

[ADD THE LEGAL IDENTITY OF THE DATA CONTROLLER BEFORE PUBLIC LAUNCH]