x402
0
Back to Canvas

Privacy Policy

Last updated: December 13, 2024

1. Introduction & Data Controller

Welcome to X402DollarHomepage. This service is operated by SAS Catalytech, a French company (Société par Actions Simplifiée), which acts as the data controller for your personal information. When we refer to "we," "our," or "us" in this policy, we mean SAS Catalytech.

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our pixel canvas service.

2. Information We Collect

Wallet Information

When you connect your cryptocurrency wallet, we collect your public wallet address. This is necessary to process pixel purchases and verify ownership. We do not have access to your private keys or the ability to control your wallet.

Transaction Data

We record pixel purchase transactions including: pixel coordinates, colors selected, timestamps, wallet addresses, and transaction amounts. This data is necessary to maintain the canvas and verify pixel ownership.

Usage Data

We automatically collect certain information when you visit our site, including your IP address, browser type, device information, pages visited, and time spent on the site. This helps us improve our service.

Cookies

We use essential cookies to enable core functionality like wallet connections and session management. We may also use analytics cookies to understand how visitors interact with our site. You can control cookie preferences through your browser settings.

3. How We Use Your Information

  • To process and record pixel purchases on the canvas
  • To display pixel ownership and attribution
  • To prevent fraud and abuse of our service
  • To improve and optimize our platform
  • To communicate important service updates
  • To comply with legal obligations

4. Payment Processing & Security

How Payments Work

We use the x402 payment protocol (HTTP 402 micropayments) for all pixel purchases. This protocol enables secure, gasless USDC transfers on the Base network. When you paint a pixel, you sign an EIP-3009 authorization that allows only the exact payment amount to be transferred - nothing more.

Payment Recipient

All pixel payments are sent to our verified wallet address:

0x0c1bca2283b125f78c1ade27dd260184e9ec2faf

You can verify this address on BaseScan.

What We Never Request

  • Your seed phrase or Secret Recovery Phrase - NEVER
  • Your private keys
  • Unlimited token approvals
  • Access to tokens other than USDC
  • Permissions to transfer NFTs or other assets

USDC Contract (Base Network)

Payments use the official Circle USDC contract on Base:

0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913

Verify on BaseScan.

5. Third-Party Services

We use the following third-party services:

  • Privy - For wallet authentication and management
  • Base Network (Coinbase) - For processing USDC payments
  • Coinbase x402 Facilitator - For payment verification and settlement
  • Supabase - For database and real-time updates

Each of these services has their own privacy policy governing their use of your data.

6. Data Retention

Pixel ownership data and transaction history are retained indefinitely as they form the permanent record of the canvas. Usage data and analytics are retained for up to 2 years. You may request deletion of non-essential personal data by contacting us.

7. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent at any time

8. Data Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.

9. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

10. International Transfers

SAS Catalytech is based in France. Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection regulations, including GDPR.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.

12. Contact Us

Data Controller: SAS Catalytech

If you have any questions about this Privacy Policy or our data practices, please contact us at: luca7dimatteo@gmail.com