Privacy Policy

Cardoons Studio ("Cardoons", "we", "us", or "our") operates the Cardoons platform at cardoons.io — a service that lets parents and guardians mint children's artwork as non-fungible tokens (NFTs) on the Cardano blockchain, optionally attach ADA gifts, and manage a child's personal reward wallet. This platform is currently in public beta. Features may change and the service is provided as-is.

We collect the minimum necessary to provide the service: Wallet address — When you connect a Cardano wallet (e.g. Eternl, Lace, Vespr, Begin), we read your public wallet address to build and submit transactions. We never access your private keys or seed phrase. Artwork & description — Images you upload and short descriptions you provide are uploaded to IPFS (InterPlanetary File System) via Pinata and permanently referenced on the Cardano blockchain. Once minted, this data cannot be deleted. Transaction data — Minting and withdrawal transaction hashes are stored in your browser's local storage so pending transactions can be tracked across page loads. This data stays on your device. Child wallet data — If you create a reward wallet for a child, a 24-word seed phrase is generated in your browser and shown to you once. We do not store or transmit this seed phrase. You are solely responsible for saving it securely. We do not collect names, email addresses, IP addresses, or any other personal identifiers unless you contact us directly.

We use the information above only to: • Build, sign, and submit Cardano transactions on your behalf • Display your minted NFTs and wallet balance on the dashboard • Track pending transactions during your session • Respond to support requests you initiate by email We do not sell, rent, or share your data with third parties for marketing purposes.

Cardoons integrates with the following third-party services: Blockfrost (blockfrost.io) — Used to query the Cardano blockchain (wallet balances, NFT metadata, transaction status). Your wallet address is sent to Blockfrost with each query. Blockfrost's own Privacy Policy applies. Pinata (pinata.cloud) — Used to store artwork images and NFT metadata on IPFS. Files uploaded to IPFS are public and permanent by design. Pinata's own Privacy Policy applies. Browser wallet extensions — Eternl, Lace, Vespr, Begin and similar wallets are third-party browser extensions that handle private key management. Cardoons only receives your public address and signed transactions from these extensions. Vercel Analytics — We use Vercel's privacy-friendly analytics to understand aggregate page traffic. No personal identifiers are collected. Vercel's Privacy Policy applies. Cardano Network — All transactions are submitted to the public Cardano blockchain, which is immutable and globally visible.

Content you mint on the Cardano blockchain — including artwork images, descriptions, and wallet addresses — is permanent and publicly visible. It cannot be edited, hidden, or deleted by Cardoons or by you after minting. Please do not mint artwork containing sensitive personal information, identifiable photographs of minors' faces, or content you do not have the right to publish permanently.

Cardoons is intended for use by parents and legal guardians on behalf of their children. We do not knowingly collect personal information from children under 13 directly. When you create a child reward wallet, a seed phrase is generated entirely within your browser. We never see or store it. You are responsible for keeping that seed phrase safe and for all activity associated with that wallet. If you believe a child has submitted personal information through our platform without parental consent, please contact us at support@cardoons.io.

Transaction tracking data is stored in your browser's local storage only — it never leaves your device via our servers. IPFS-stored content (artwork, metadata) is distributed across the IPFS network and hosted via Pinata. It is public and permanent. On-chain data lives on the Cardano blockchain and is likewise public and permanent. We do not operate a traditional database storing user records. As a result, we cannot "delete your account" or purge minted data — it is inherently decentralised.

Cardoons does not use tracking cookies or advertising cookies. We use browser local storage (not cookies) solely for session-level transaction tracking. Vercel Analytics uses anonymous, cookieless measurement.

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of personal data we hold about you. Because we store very little personal data (and none of the on-chain data can be deleted), most requests relate to any support correspondence you have sent us. To exercise your rights, contact us at support@cardoons.io.

We may update this Privacy Policy as the platform evolves. The "Last updated" date at the top of this page will reflect any changes. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

Questions about this Privacy Policy? Reach us at support@cardoons.io.