Last updated 10 October 2026
Privacy
Accounts are optional. If you sign in we keep a small profile: handle, display name, wallet address and the public usernames of accounts you link. We never store your email, phone number, OAuth tokens or private keys. No analytics, no trackers.
Messages are still written to a public blockchain. Treat every message and reply as if you were posting it publicly under your wallet address. It can never be deleted, not even by us.
Public on Arc, forever
| Data | Where it lives |
|---|---|
| Your wallet address | Every stamp you send or receive |
| Message text, including any contact details you type | Sent event and transaction input |
| Reply text | Settled event and transaction input |
| Who messaged whom, amount, time, and whether it was replied to, kept or reclaimed | Contract storage and events |
| Your inbox price and headline | Contract storage |
End-to-end encrypted messages are in development. Even then, sender, receiver, amount, timestamps and status stay public, and messages already sent stay readable.
What we store if you sign in
| Data | Why | Public? |
|---|---|---|
| Your Privy user ID | Links your profile to your sign-in | No |
| Receiving wallet address | Where stamps are paid | Yes (on-chain anyway) |
| Handle + the signature binding it to your wallet | Your /@handle link, verifiable by anyone | Yes |
| Display name, avatar choice | Your public profile | Yes |
| X / Discord / GitHub usernames | Verified badges | Only if shown (Settings → Privacy) |
| Whether Google, email or a passkey is linked (yes/no) | Settings page | No |
| Price and headline picked in onboarding | Pre-filling onboarding | No |
Kept until you delete your account. Export or delete it any time from Settings → Your data.
Who else processes data
| Who | What they can see |
|---|---|
| Privy | Your email, social account, passkey and embedded-wallet key shares (sign-in and self-custodial wallets). Your wallet key never reaches Stamp. |
| X, Discord or Google | That you used it to sign in to Stamp |
| Vercel (hosting) | Standard request logs: IP address, user agent, requested URL |
| Neon (database) | The profile data above |
| Upstash (rate limits, if enabled) | Your IP or user ID, briefly, as a counter |
| The Arc RPC your browser talks to | Your IP, the addresses and inboxes you look up, transactions you submit |
| Your external wallet, WalletConnect | Whatever their own policies say |
X profile pictures are fetched by our server and served from our domain, so your browser never contacts X for them.
Cookies and browser storage
| Name | Purpose |
|---|---|
stamp_session | HttpOnly cookie (7 days): keeps you signed in to Stamp's API. Contains only your Privy user ID and a CSRF token. |
stamp_csrf | Cookie (7 days): protects your account from cross-site requests |
privy:* | Privy's own sign-in session |
stamp:signed-in | Remembers to load sign-in on your next visit |
stamp:theme stamp:network stamp:tour-done | Light/dark mode, mainnet/testnet, dismissed tour |
wagmi.* | Which wallet you last connected |
All strictly necessary or a choice you made; none track you. Signing out clears the cookies.
Your choices
- Don't put anything private in a message. Only add reply-to details you're happy to publish.
- Hide your verified badges in Settings → Privacy.
- Close your inbox any time from Inbox → Settings. Existing history stays on-chain.
- Use a dedicated wallet for Stamp if you don't want it linked to your other on-chain activity.
Deletion, changes and contact
Settings → Your data → Delete account removes everything we store and deletes your Privy user. On-chain data can't be deleted by anyone, so move any USDC out of your Stamp wallet (or export its key) first. This page is updated before any feature that changes what we collect goes live.
Questions: open an issue. Security reports: report privately. Back home