--- title: "Privacy Policy" description: "What PD collects, why, where it's kept, how long, who helps run it, what is public forever, and your rights under Quebec's Law 25, Canada's PIPEDA and Europe's GDPR." category: "reference" keywords: ["privacy", "privacy policy", "data", "law 25", "gdpr", "pipeda", "cookies", "delete", "access", "personal information"] last_updated: "2026-10-20" --- # Privacy Policy **Version française : [Politique de confidentialité](/docs/legal/fr/confidentialite).** Last updated **October 20, 2026**. ## Who is responsible Price Discussion ("PD"), run from Montreal, Quebec, Canada, is responsible for the personal information described here. **The person in charge of the protection of personal information is PD's founder.** Reach them at **support@pricediscussion.com** with "Privacy" in the subject. ## The short version - **A wallet is the whole account.** No email, name, phone number, ID or card is needed to use PD. - **No ad tracking, no analytics trackers, no third-party pixels.** PD doesn't sell or share your information. - **The chain is public forever**, and so are two records PD writes to Arweave (below). Everything else PD keeps, you can ask to see, fix or delete. ## What PD collects, and why | What | Why | Basis (GDPR) | |---|---|---| | Your **wallet address** | It's your account: sign-in, your profile, what you own | Running your account | | **Settings and workspace** (colorways, notes, to-dos, stars, albums, lists, presets) | So they follow you to every device | Running your account | | **Social layer** (@name, profile, follows, tags, pings) | The features you choose to use | Running your account | | **Linked Discord** (name, ID, picture, accent color, PD server join date) — only if you link it | Your profile's Discord tab and Discord roles | Your consent; unlinking removes it | | **Push subscription** — only if you turn push on | Reaching your own device | Your consent; turning it off removes it | | **Email** — only if you subscribe to the Dispatch Digest | Sending the digest | Your consent; one tap unsubscribes | | **Error reports** (what broke, where, the browser, the signed-in wallet) | Fixing PD | Legitimate interest | | **Missed searches** (words the search didn't understand, with no wallet attached and personal details swapped out) | Making search understand more | Legitimate interest | [What's Private](/docs/whats-private) and [What's Public](/docs/whats-public) list exactly who sees what. PD's hosting (Cloudflare) handles your IP address to deliver pages and stop attacks. PD doesn't store IP addresses in its own database. ## Public and permanent by nature - **The Ethereum blockchain.** Mints, sales, transfers, offers you sign and the art itself are public and permanent, readable by anyone, with or without PD. - **Two records PD writes to Arweave**, public and permanent too: every account's **wallet and the day it joined PD**, and each Fair Draw's **entry list** (every entrant's wallet and standing), so anyone can check a draw. These can't be edited or deleted by PD or anyone else, so the right to erasure can't reach them. PD tells you about the join record on the sign-in card, before it's written. PD's reason for keeping it: a tamper-proof record of tenure that collectors and Fair Draws rely on. ## Where it's kept, and who helps run PD Your information is stored and processed **outside Quebec**, mainly in the United States. PD uses these services, each under its own security and privacy commitments: | Service | What it does for PD | Where | |---|---|---| | Supabase | PD's database | United States (Ohio) | | Cloudflare | Hosting, page delivery, file storage | Worldwide network | | Alchemy | Reading the Ethereum blockchain | United States | | Discord | Linking your Discord, if you choose to | United States | | Resend | Sending the Dispatch Digest, if you subscribe | United States | | Arweave (through Turbo) | The two permanent public records above | Worldwide, permanent | | Your browser's push service (Apple, Google or Mozilla) | Delivering push, if you turn it on | Their own | | YouTube | Playing a Project's soundtrack, only once you start one | United States | Before choosing these services, PD weighed whether your information is protected well enough outside Quebec, as Quebec's Law 25 requires. ## How long PD keeps it - **Account data** (settings, social layer): until you ask PD to delete it. - **Error reports and missed searches:** 30 days, then cleared automatically. - **Push subscriptions and a linked Discord:** until you turn push off or unlink. - **Digest email:** until you unsubscribe. - **On-chain and Arweave records:** permanent, as above. ## Cookies and storage on your device PD uses **one sign-in cookie** to keep you signed in, and your browser's local storage to remember settings and speed things up. Both are needed for PD to work. There are no tracking or advertising cookies, so there's no cookie banner. YouTube sets its own cookies only when you play a soundtrack. ## Your rights Wherever you live, you can ask PD to: - **see** the personal information PD holds about you, and get a copy you can take elsewhere; - **fix** anything wrong in it; - **delete** it (except what's on-chain or on Arweave, which no one can delete); - **stop** using it for something you consented to; - explain how it was used. Email **support@pricediscussion.com** with "Privacy" in the subject, from or about the wallet in question. PD may ask you to sign a message with that wallet to prove it's yours, and answers **within 30 days**. If you're not satisfied, you can complain to Quebec's **Commission d'accès à l'information**, the **Office of the Privacy Commissioner of Canada**, or, in the European Union or United Kingdom, your own data protection authority. ## Age PD is for people **18 and older**. PD doesn't knowingly collect information from anyone younger. If you believe a minor has signed in, tell PD and their account data will be deleted. ## Security and incidents PD keeps personal information to the minimum it needs, limits who can read it (the database is read-only to the public, and every write goes through PD's server), and logs every privacy incident. If an incident risks serious harm to you, PD will tell you and Quebec's Commission d'accès à l'information promptly. ## Changes When this policy changes, the date at the top changes and the [changelog](/docs/whats-new) says so. A change that matters is announced in the app before it takes effect.