Privacy Policy

Information we collect

• Google sign-in. When you choose Google sign-in, Google provides an account identifier, email address and verification status, and basic profile information such as your name and profile picture. Our authentication provider, Supabase, stores the identity and manages your session. TokenPost links that identity to an internal member account and uses a display name for community participation. Your Google profile picture may appear in your account interface.
• Reader activity you save or submit. We store your chosen display name, saved article identifiers, community messages, and information you send when contacting us. Community messages and their display names are visible to other readers. Your sign-in email is not displayed with community messages.
• Optional wallet connections. If you connect a wallet, we process its public address and a signed message to verify ownership, and store the connection to your account. Wallet connections use wallet service providers, including Privy where available. Ordinary Google sign-in does not require a wallet or create one. Never send us a seed phrase or private key.
• Technical information. Our hosting, authentication, security and content providers process information such as IP addresses, browser and device details, requested URLs, timestamps, and error or security logs when delivering and protecting the service.

How we use information

We use this information to authenticate readers, maintain accounts, synchronize reading lists, display reader contributions, verify optional wallet connections, respond to requests, operate the website, troubleshoot errors and prevent abuse.

Google sign-in requests basic identity, email and profile permissions. It does not request access to your Gmail inbox, contacts, calendar or Google Drive. We do not receive your Google password. We do not sell Google account information, use it for personalized advertising, or send it to AI models for training.

Service providers and external content

We use Supabase for member authentication and database services, Vercel for website hosting and application delivery, and infrastructure providers such as Cloudflare for network delivery and security. Providers process information needed to perform those services. Access by our personnel is limited to operational, support and security needs.

Pages may include YouTube videos, X posts, market widgets, polls, advertisements or other external content. When that content loads or you interact with it, its provider can receive your IP address, browser details and the page address, and may use cookies or similar technologies under its own policies. External websites and services are responsible for their own data practices.

If you use Ask TokenPost, the messages and conversation context needed to answer your question may be sent through Vercel AI Gateway to the configured model provider, such as Google. Do not include passwords, private keys or confidential personal information in a question. Your Google sign-in profile is not automatically attached to these requests.

We may also disclose information when required by law or when reasonably necessary to investigate abuse, protect people or enforce our terms.

Cookies and browser storage

We use browser storage and authentication technologies to keep you signed in and remember reader preferences. A reading list saved while signed out is stored in your browser; it is added to your account only when you choose to import it. Clearing browser data can remove locally saved information. Blocking storage or cookies may prevent sign-in and some embedded features from working.

Third-party embeds and advertising services may use their own storage. You can manage cookies and site permissions through your browser and use the controls offered by those providers.

Storage, retention and security

Information may be processed in the United States and in other countries where our service providers operate. We use access controls, encrypted connections and separate permissions for public, member and editorial systems. No internet service can guarantee absolute security.

We retain account information while it is needed to provide your account and associated services, respond to requests, maintain security or meet legal obligations. Retention depends on the type of information and its purpose. After a deletion request, information that must be retained for legal, security or backup purposes may remain for the relevant retention period. Public blockchain records cannot be changed or deleted by TokenPost.

Your choices and requests

You can change your display name, remove bookmarks, unlink a wallet and sign out through the reader interface. You can revoke Google's connection to TokenPost from your Google Account connections. Revoking that connection does not by itself delete your TokenPost account or past contributions.

To request access to, correction of, or deletion of your account and associated information, email info@tokenpost.kr from the address used to sign in. For a community contribution, include a link or enough detail to identify it. We may need to verify your identity before acting. Do not send your password or identity documents unless specifically requested through an appropriate process.

Depending on where you live, you may have additional rights to obtain a copy of your information, object to or restrict certain processing, withdraw consent, or raise a concern with a privacy authority. Contact us to exercise applicable rights.

Children

Our member services are not directed to children under 13. If you believe a child has supplied personal information to us, contact us so we can investigate and take appropriate action.

Changes and contact

We will update the date on this page when this policy changes. Where required, we will provide additional notice or seek consent before using information for a materially different purpose.

For privacy questions, contact TOKENPOST Inc. at info@tokenpost.kr or write to 21 Penn Plaza, New York, NY 10001, United States.