Privacy Policy

This Privacy Policy explains how the IRL3 website at irl3.tech and its services (“IRL3”) handle information. It does not cover the open-source IRL3 apps you run on your own computer, which send nothing to IRL3, nor third-party services you reach through IRL3. Read it together with the Terms of Use.

• Camera pictures: scanning, recognition and key derivation run in your browser. Pictures are not uploaded, except for the few views of a holder claim described below.
• Wallet keys and secret names: rebuilt during a scan and never stored or sent.
• Key boxes, your Object Library and your preferences: kept in your browser's storage (IndexedDB and localStorage). Clearing your browser's site data removes them.
• Your sign-in: a signed session token kept in your browser for up to 7 days.

• Wallet addresses and signatures: when you connect a wallet, sign in, launch a token or claim, IRL3 receives your public wallet address and the message you signed, to verify that the wallet is yours.
• Object wallet listings: when you create an object wallet with the live camera, its public Solana, EVM and Bitcoin addresses and the object's line drawing are listed publicly on IRL3, signed by that wallet.
• Token launches: the name, ticker, picture, links, object kind and colour you enter. Pictures and metadata are pinned on IPFS, which is public and permanent.
• Holder claims: a few views of the object are sent to IRL3's server to check the claim. They are processed and discarded; only a short fingerprint of each picture is kept, so the same pictures cannot be used twice.
• Phone camera handoffs: what the phone sends to the computer is end-to-end encrypted with a key that stays in the link; IRL3 relays only ciphertext, which expires after 15 minutes and is then deleted.
• Usage counts: the kind and colour of objects scanned or created, counted without any identifier, for the public analytics.
• Technical data: IP addresses and request details are used briefly, in memory, to limit abuse and to count scans; IRL3 does not store them in its database. The hosting providers keep standard server logs.

Transactions, wallet addresses, balances, token trades, fee collections, payouts, buybacks and burns are recorded on public blockchains. IRL3 reads and displays this data. Anyone can see it, and neither IRL3 nor anyone else can change or delete it.

• to provide IRL3's features: wallets, launches, scans, claims, payouts and the buyback;
• to verify signatures, prevent abuse and keep IRL3 secure;
• to show public analytics and the record of payments;
• to keep IRL3 running and fix errors.

IRL3 uses no advertising cookies, tracking pixels or third-party analytics. Browser storage is used only for the features described above.

IRL3 relies on providers that process data on its behalf or that your browser contacts directly:

• hosting and databases (Vercel, Railway);
• Solana RPC providers, to read and send transactions;
• IPFS pinning (Pinata), for token pictures and metadata;
• Hugging Face and jsDelivr, from which your browser downloads the recognition models;
• market and price data (DexScreener, pump.fun, CoinGecko) and swap routing (Jupiter);
• block explorers (Solscan and others), when you follow a link to them.

Each provider handles data under its own privacy policy.

Public listings and records of launches, fees and payouts are kept for as long as IRL3 runs, because they mirror public blockchain data. Claim picture fingerprints are kept to prevent reuse. Encrypted handoff data is deleted once it expires. Data in your browser stays until you clear it.

• You can use most of IRL3 without connecting a wallet.
• You can clear your browser's site data at any time; export your key boxes first if you need them.
• You can use the open-source IRL3 apps on your own computer, which send nothing to IRL3.
• Information written to a blockchain or pinned on IPFS cannot be deleted by IRL3; where IRL3 holds a copy that is not on chain, you can ask for it to be removed from IRL3's interface.

IRL3 is designed so that the most sensitive information never reaches it. What it does process is protected with encryption in transit, access controls and limits on its interfaces. No system is completely secure, and IRL3 cannot guarantee the security of any information.

IRL3 is not intended for anyone under 18 years old.

IRL3 may update this Privacy Policy by publishing a new version on this page; the date at the top shows the latest version.

Questions about privacy can be sent to IRL3 on X or Telegram.