Privacy notice

This Privacy Notice describes the information the Pythenians Hub collects, how it is used, and how it is protected. Most of this information is already public on the Solana blockchain; the remainder is provided by you directly.

Last updated 27 September 2026

Information the Hub collects

  • Wallet addresses. The address you sign in with, any additional addresses you link to it, and which address you have designated to receive any potential future rewards. Wallet addresses are public on Solana; linking them indicates that they belong to the same holder.
  • Holdings. The Pythenians a wallet holds, their levels, and a short-lived cache of its PYTH and SOL balances, read from the blockchain to display your NFTs and profile.
  • Sign-ins. The date and time of each sign-in and the number of Pythenians held by the wallet at that time.
  • Your agreement to these terms. Which version of the Terms of Use and this Privacy Notice you agreed to, when, and the wallet signature on the sign-in message that carried the agreement, kept as the record of it.
  • Burns. Every upgrade ticket, including the Pythenian upgraded, the Pythenians burned, the fee and the oracle quote on which it was based, and the transaction signature. This record forms the basis of the public burn record and your receipt.
  • Optional profile details. A display name and an email address, if provided. An email address is only written to after you confirm it through a link we send to it, and we record when you confirmed it.
  • Discord link. If a Discord account is linked: its ID, username, and avatar, and the access tokens required to read and sync your roles. Linking is optional and may be reversed from your profile, which deletes the link.
  • Votes. How each wallet voted on community proposals, together with the on-chain signature where a vote was signed.
  • Snapshots. Point-in-time snapshots of which wallets hold which Pythenians, taken by administrators for record-keeping and operational purposes. This is blockchain data.

Information the Hub does not collect

  • Your private keys or seed phrase; the Hub never accesses them.
  • Information about wallets that have not been signed in with or linked.
  • A browsing profile, or anything for advertising. This site sets no advertising cookies, and Google Analytics (below) only runs if you allow it.

Cookies and technical data

Signing in sets a single session cookie, marked HttpOnly, so the Hub can recognise you between requests; it expires when the session ends. Your IP address is used in memory to rate-limit API requests and is not stored in a database, except in the audit log of the administrative console, which records the administrator’s IP address, not yours.

Analytics

On pythenians.xyz, a bar asks whether Google Analytics may count your visit. Nothing from Google loads until you click Allow. If you do, Google Analytics sets its own cookies (named _ga) to tell visits apart, and records which pages were viewed, the site that sent you, and your approximate country, device and browser. It is not given your wallet address, your Pythenians, your email or your Discord account, and it never runs in the administrative console or on the email confirmation page. Google signals and advertising features are switched off. Google processes this data under its own privacy policy.

Your choice is kept in this browser for a year. You can change it at any time: . Choosing “No thanks” after allowing stops Google Analytics straight away and removes its cookies from this browser.

Purpose of collection

This information is used to display your holdings, enable burns and upgrades, award badges, assign Discord roles, count votes, and maintain a record of each burn and the amount paid. If you confirm an email address, it is used to send you occasional updates from the team, and for nothing else: no selling, no sharing, no third-party mailing lists. Burn records are retained indefinitely, as they serve as the receipt for an irreversible transaction.

Who has access

The Solana network records every transaction, which is public by design. Discord receives the sign-in you complete with it, subject to its own terms. Administrators may access the records described above through the administrative console, which requires two-factor authentication and logs every action taken. If you add an email address, it is passed to our email delivery provider only to send the confirmation link and occasional updates from the team. If you allow Google Analytics, Google receives the visit data described above. The Hub does not sell or share your data with any other party.

Data storage

Data is stored on a server operated by the community, with collection images served from a content delivery network. Backups are taken nightly and encrypted at rest.

Your rights and choices

  • Unlink Discord from your profile at any time; the link and its associated tokens are deleted.
  • Remove a linked wallet from your profile.
  • Remove your display name or email address from your profile.
  • Request deletion of your member record through the community channels linked in the footer. Burn records and other on-chain data cannot be deleted, as they constitute the record of transactions on a public blockchain.

Changes

The date at the top of this page indicates when this notice was last updated. The Terms of Use govern all other aspects of your use of the Hub.