Privacy Policy
How we collect, use, and protect your information across the Stuff Protocol.
Stuff Protocol ("we," "us," or "our") operates the stuffprotocol.net website and the Stuff Protocol application on Base L2. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our protocol and related services.
1. Information We Collect
Information you provide directly
When you interact with Stuff Protocol, we may collect information you choose to share with us:
- Account identifiers such as your phone number or email address
- Wallet addresses you link by signing a proof message in the Sign-In with Ethereum (EIP-4361) format
- Descriptions, photographs, and metadata of items you save or register
- Beneficiary designations and allocation preferences you configure
- Messages you send through the AI chat interface
Information collected automatically
Our hosting provider's request logs record your IP address, your browser's user agent, the address of the page or API you requested, and a timestamp. These logs are kept for 30 days.
Stuff does not run analytics or advertising trackers of its own, and we do not build profiles of the pages you visit. Two third-party components load in your browser only when you use them: Google reCAPTCHA when you sign in with a phone number, and Coinbase's Base Pay when you pay for a membership. Each may collect data under its own terms.
On-chain data
Stuff Protocol creates verifiable attestations on the Base L2 network through the Ethereum Attestation Service (EAS). On-chain data is public by design and includes attestation schemas, timestamps, and associated wallet addresses. We do not control and cannot delete data written to the blockchain.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and improve the protocol — to value your items using AI, create on-chain attestations, manage allocations, and maintain trusted relationships
- Sign you in — to send the one-time code you request when you sign in with a phone number
- Ensure security — to detect unauthorized access, protect against fraud, and maintain the integrity of the protocol
- Comply with legal obligations — to meet applicable regulatory requirements
3. AI-Powered Valuation
When you ask Stuff to value an item, your description and any photos you attach are sent to OpenRouter, which passes them to a Google Gemini model to produce the estimate. If you use Stuff from an AI assistant such as ChatGPT or Claude, that assistant's provider also processes your conversation under its own terms.
We do not control how those providers handle data.
The copy of a photo you upload to Stuff for a valuation is deleted from our upload storage automatically about one day after upload. If you save the item, Stuff also keeps its photo in your private vault, at our storage provider Cloudflare, as the table in section 8 describes.
4. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:
- Contract performance — processing necessary to provide the services you've requested, including item registration, valuation, and attestation
- Legitimate interest — processing for security, fraud prevention, and service improvement, balanced against your privacy rights
- Consent — processing based on your acceptance of these documents, which we record with the version and time. You can withdraw consent by deleting your data.
- Legal obligation — processing required to comply with applicable laws and regulations
5. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access and portability — download a copy of your data in a structured, machine-readable format (JSON) from Settings, under Your data
- Rectification — correct your saved items in the app
- Erasure — delete your data from Settings, under Your data. When you confirm, we erase the stores listed in section 8 in the same request, except where that section says a record is kept or is deleted by hand, and then we delete your sign-in account as the last step; on-chain records cannot be erased
- Restriction, objection and withdrawal of consent — email us at privacy@stuffprotocol.net and we will respond within 30 days, or within any shorter period required by applicable law
California residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell your personal information.
6. Data Sharing and Disclosure
We do not sell your personal information. We may share your data in the following limited circumstances:
- Service providers — the providers named in this policy that host the service, sign you in, and process valuation requests, each under its own terms
- On-chain participants — attestation data that you choose to publish to the Base L2 network becomes publicly visible
- Legal requirements — when required by law, regulation, or valid legal process
- Safety — to protect the rights, safety, or property of our users, the protocol, or the public
- Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to affected users
7. International Data Transfers
Your information may be processed in countries outside your jurisdiction, including the United States, where we and our providers operate.
8. Data Retention and Deletion
This table lists where we keep information about you off chain, for how long, and what happens when you delete your data from Settings.
| Where | What it holds | How long we keep it | When you delete your data |
|---|---|---|---|
| Sign-in account | Your phone number or email address and sign-in credentials, held by our sign-in provider. | Until you delete your account. | Deleted by the delete button as its last step, after everything else is erased. If our sign-in provider asks you to sign in again first, the page tells you and gives you a button to finish, or you can email privacy@stuffprotocol.net and we delete it by hand. |
| AI chat messages | The messages in your chat threads. | 90 days after your last message. | Deleted when you confirm. Conversations from before this feature was switched on cannot be found by the delete button; they expire on their own, within 90 days of the switch. |
| Saved items and valuations | Item names, descriptions, categories, valuations and photo fingerprints you saved. | Until you delete them or your data. | Deleted when you confirm. |
| Account setup, sharing and permissions | Your onboarding progress, agent permissions, view grants, beneficiary designations, needs you declared, personhood checks, profile document and account-creation record. | Until you delete your data. | Deleted when you confirm. |
| Linked wallet and membership records | The wallet address you proved you control, and your membership tier. | 400 days after you last proved or set them. | Deleted when you confirm. |
| Consent record | Which version of the Terms and Privacy Policy you accepted and when. | Until you delete your data. | Deleted when you confirm. |
| Erasure receipt | Proof that your deletion ran: an irreversible hash of your account id, the stores erased and the times. It does not contain readable personal data. | 3 years. | Kept, because it is the record that your request was carried out. |
| Registration, transfer and custody records | The operational records of registrations, transfers and custody changes you took part in. | Kept because other people's records depend on them, up to 7 years. | Approvals you were part of are deleted, and in the operation journals your account id is replaced by a random value that cannot be traced back to you. Anything still in progress must finish first. |
| Membership payment records | Settlement transaction references that stop one payment from being used twice. | Kept without an end date so a payment can never be redeemed twice. | Your account id is removed from the record. The public transaction reference stays. |
| Membership checkout requests | Your membership checkout request (tier, wallet, payment reference) while a payment completes. | 90 days. | Deleted when you confirm. |
| Photos sent for valuation | The original photo file you upload for a valuation. | Deleted automatically about one day after upload. | Already deleted by the time limit. |
| Photos of your things | The photo of each item you save, and a small preview, kept encrypted at our storage provider, Cloudflare. While an item is set to People I choose or Anyone, one copy of its photo, without location or camera details, is also kept so those people can see it. | While your account is active. A shared or public copy exists only while the item is set to People I choose or Anyone. | Not erased by the delete button yet. Email privacy@stuffprotocol.net and we will delete your photos by hand. A shared or public copy is removed as soon as you set the item back to Only me. |
| Access grants, sign-in proofs, rate limits and one-time records | Short-lived security records such as session keys, wallet-proof challenges, spending counters and rate limits. | Expire on their own, within 30 days. | Session keys are deleted when you confirm. The rest expire on their own. |
| Server request logs | IP address, browser user agent, requested address and timestamp. | 30 days. | Expire on their own. |
| Encrypted archive of your saved items | Encrypted copies of item records and photos kept for recovery, if you use the encrypted archive. | While your account is active. | Not erased by the delete button yet. Email privacy@stuffprotocol.net and we will delete your encrypted archive by hand. |
On-chain attestation data is permanent and cannot be deleted due to the immutable nature of blockchain technology. This is inherent to the design of decentralized protocols and EAS.
9. Security
No system is perfectly secure.
If we discover a breach affecting your personal data, we will notify you and the relevant supervisory authority as required by applicable law.
10. Cookies and Tracking
The Stuff web app does not set cookies. It keeps your sign-in session and preferences in your browser's local storage on your device; clearing your site data signs you out. Google reCAPTCHA, which loads when you sign in with a phone number, may set its own cookie on Google's domain. We do not use advertising cookies or analytics scripts.
11. Children's Privacy
Stuff Protocol is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a minor, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy. When we publish a new version, the app tells you once with a link to it and you can keep using Stuff. We record the version you agreed to, when you signed up or signed in or pressed OK on the notice, and the time.
Contact
For questions or concerns about this Privacy Policy, or to exercise your data protection rights:
Stuff Protocol
Email: privacy@stuffprotocol.net
If you are in the EEA, you also have the right to lodge a complaint with your local data protection supervisory authority.
The list of AI providers that receive item photos and descriptions could not be loaded right now. It is published at https://mcp.stuffprotocol.net/api/ai-providers.