Privacy Policy

TipHive is designed to be privacy-first and wallet-native. We collect minimal data required to operate the platform:

• Wallet Address: Your public blockchain address, used to identify your account and process transactions on the Mezo Network.

• Sign-In With Ethereum (SIWE) Signature: When you log in, you sign a one-time message proving wallet ownership. We never receive your private key — only the cryptographic signature is verified server-side and converted into a session cookie.

• Profile Information: Display name, bio, avatar, category, and username — all voluntarily provided when you register or edit your creator profile.

• Transaction Data: On-chain transaction records (tip amounts, subscription statuses, referral connections, timestamps, sender and receiver addresses) which are inherently public on the Mezo Mainnet blockchain.

We do NOT collect emails, passwords, private keys, seed phrases, or any third-party social identifiers. There is no Google login, no email magic links, no centralized authentication provider — only your wallet.

The information we collect is used solely to provide and improve the TipHive platform:

• Display your public creator profile and posts so fans can discover, tip, and subscribe to your content.

• Process and record tipping, subscription, and referral transactions through smart contracts on the Mezo Network.

• Generate dynamic Open Graph metadata for rich social media sharing previews (on platforms like Discord and Telegram).

• Provide Progressive Web App (PWA) features, enabling offline caching and instant loading on Android and other mobile devices.

• Display in-app notifications in your notification bell when you receive tips, new followers, comments, or likes. All notifications are stored in your own row and never broadcast to third parties.

We never sell, rent, or share your personal data with third parties for advertising or marketing purposes. TipHive does not send transactional or marketing emails of any kind — all alerts live inside the app itself.

Security is at the core of our architecture:

• Smart Contract Security: All tipping and subscription logic runs through audited, immutable smart contracts deployed on the Mezo Network. We cannot alter or access your funds.

• No Custodial Risk: TipHive never holds your funds. Tips and subscriptions flow directly from the sender to the creator via smart contracts. Withdrawals go straight to your wallet.

• Session-Only Authentication Cookies: Your sign-in cookie is HMAC-signed using a server-side secret and lives only for the duration of your browser session. When you fully close your browser, the cookie is deleted and you re-sign with your wallet next visit. Stolen cookies become useless the moment you close the tab.

• Database Protection: Off-chain profile and metadata stored in Supabase are protected by Row-Level Security (RLS) policies, TLS in transit, and encryption at rest.

You maintain full control over your data:

• Profile Editing: You can update or modify your profile information, social links, and notifications settings at any time from your settings panel.

• Account Deletion: You may request the deletion of your off-chain profile data. Please note that on-chain transaction records, subscriptions, and referral mappings cannot be deleted as they are permanently recorded on the blockchain.

• Data Portability: Since your transaction history lives on-chain, you always have access to your complete transaction record via any blockchain explorer.

• Opt-Out: You can disconnect your wallet or social account at any time to stop using the platform.

TipHive integrates with the following third-party services:

• Mezo Network: The Layer 2 blockchain network where all tip, subscription, and withdrawal transactions are processed. Subject to Mezo Network's own terms and privacy policy.

• RainbowKit + WalletConnect: Used purely as a wallet connector and SIWE message signer. They never see your private key — only the public address you authorize.

• Cloudinary: Used for off-chain media uploading (avatars, banners, post images). Files are signed server-side and stored under a tightly-scoped upload preset.

• Supabase: PostgreSQL database for off-chain metadata (profiles, posts, comments, in-app notifications). Protected by Row-Level Security.

We carefully vet all third-party integrations to ensure they align with our privacy-first values.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make significant changes:

• We will update the "Last Updated" date at the top of this page.

• For material changes, we will provide notice through the platform UI or via our official communication channels.

• Continued use of TipHive after changes constitutes acceptance of the updated policy.