Privacy Policy

1. Introduction

Metablox.co (“Metablox,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard the information you provide when using our website, our iOS and Android mobile applications, and related services (“Services”). By using Metablox, you agree to the practices described in this Privacy Policy.

2. Information We Collect

a. Information You Provide

• Account information — email address, username, and password (passwords are stored in hashed form, never as plain text). If you enable two-factor authentication, we store the shared secret needed to verify your codes and hashed backup codes.
• Profile information — profile picture, bio, and any social handles you add.
• Content you create — photos, videos, memory titles and stories, moment captions, collections, comments, and reports you submit about other content.
• Location you attach to content — a place name or map position you choose for a memory or moment. Photos you upload may contain embedded metadata (such as when and where a photo was taken); on the web we read this metadata in your browser to suggest a date and location for your memory. We remove embedded metadata from the copies of images we store; video files are stored as uploaded and may retain theirs.
• Purchase information — orders, order status, and transaction records for Blox and credits. Card payments are processed by Stripe; we receive your email and order details but never see or store full card numbers.
• Wallet information — the address of any external crypto wallet you connect, and the address and keys of the platform wallet we create and hold for you (a custodial wallet).
• Linked accounts — if you connect Discord or X/Twitter, we store your account ID (and screen name) from that platform.
• Communications — support requests and messages you send us.

b. Automatically Collected Information

• Device location — if you turn on features like “Near You” or the map in our mobile apps or website, your device coordinates are sent to our servers to find nearby memories and Blox. Location access is optional and requested with an explanation before the system permission prompt; we never collect location in the background and never use it for advertising.
• Log and device data — IP address, browser type, operating system, pages viewed, actions taken, and timestamps. We also log sign-in attempts (including IP address and browser details) for account security.
• Usage and interaction data — which memories you view and the marks (reactions) you give. We use this activity to rank trending content and personalize recommendations.
• Push notification tokens — if you enable notifications, we store the device or browser token needed to deliver them.
• Cookies and similar technologies — see Cookies and Tracking Technologies.

c. Information from Third Parties

• If you link Discord or X/Twitter, we receive basic profile information (such as your ID and username) from that platform with your authorization.

3. How We Use Your Information

• Provide, operate, and improve our Services
• Enable you to create, store, share, and rediscover memories
• Process purchases, mint Blox, and maintain wallet balances
• Show nearby content when you choose to share your location
• Personalize recommendations based on your marks and viewing activity
• Moderate content — uploaded images (and frames of uploaded videos) are automatically screened for prohibited content, including by third-party AI moderation services, before they are published
• Send transactional email (account security, purchases, password resets) and product updates relevant to your activity
• Measure usage of our website with analytics tools
• Maintain security, prevent fraud and abuse, and enforce our Terms
• Comply with legal obligations

4. Sharing Your Information

We do not sell your personal information, and we do not share it with third parties for their own advertising. We share information only in these situations:

• Service providers that process data on our behalf to run the Services: hosting and media storage (Amazon Web Services), payment processing (Stripe), transactional and product email (SendGrid), website analytics (Google Analytics), abuse and bot prevention (Google reCAPTCHA), maps and geocoding (Google Maps), error monitoring (Sentry), automated content moderation (OpenAI), workflow automation (Zapier), and push notification delivery (Apple and Google).
• Community announcements — when you purchase Blox or publish a memory, an announcement that can include your username or linked Discord ID may be posted to our community channels.
• Public content you choose to publish — see Public Content, Blockchain, and IPFS.
• Legal compliance when required by law, regulation, or legal process.
• Business transfers (e.g., merger, acquisition) where your data may be part of the transferred assets.

5. Public Content, Blockchain, and IPFS

Metablox is built around sharing memories and owning digital land, and some data is public by design:

• Published content — memories, moments, and profile details you set to public are visible to anyone, including their location if you added one.
• Blockchain records — minting Blox and related transactions are recorded on public blockchains. Wallet addresses, token IDs, and transaction details are public and permanent; we cannot alter or delete them.
• IPFS archiving (optional) — if you choose to preserve a memory to IPFS, a snapshot of that memory — its photos, text, date, country, and your username — is published to the public IPFS network. Each snapshot is content-addressed and effectively permanent: once published, copies can be pinned by anyone and cannot be reliably deleted, even if you later delete the memory or your account. Only use this feature for content you are comfortable making permanently public.

6. Data Storage and Security

Your data is stored on servers and cloud infrastructure located in the United States. Traffic between your device and our Services is encrypted in transit (HTTPS), and passwords are stored in hashed form. We take reasonable technical and organizational measures to safeguard your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention and Deletion

We keep your information for as long as your account is active and as long as needed for the purposes described in this policy. Security and operational logs (such as sign-in records and server logs) are retained for security, audit, and troubleshooting purposes.

Deleting content: you can delete individual memories, moments, and collections at any time from the Services.

Deleting your account: in the iOS and Android apps, go to Profile → Delete Account. You can also email kevin@metablox.co from your account email to request deletion. Deleting your account permanently removes your account record, profile, memories and moments, collections, credits, and linked identifiers from our live systems.

Some data is not removed by account deletion:

• Blockchain transactions and wallet addresses already recorded on public blockchains (permanent by design).
• Memory snapshots you chose to publish to IPFS (permanent by design).
• Copies in backups, security logs, and records we must keep for legal, fraud-prevention, or accounting reasons, which expire on their own schedules.
• Copies held by service providers, which are deleted under their own retention policies.

8. Your Rights

Depending on your location, you may have rights to:

• Access, update, or delete your personal information
• Request a copy of the information we hold about you
• Withdraw consent to processing where applicable

To exercise these rights, contact us at kevin@metablox.co.

9. Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to:

• Keep you logged in and remember your preferences
• Analyze usage to improve our Services (Google Analytics)
• Protect sign-up and payment flows from abuse (Google reCAPTCHA)

You can decline analytics cookies in our cookie banner, and you can manage or disable cookies in your browser settings. Our mobile apps do not contain advertising or analytics SDKs.

10. Third‑Party Links and Services

Our Services may link to third‑party websites or integrate with external platforms. Their privacy practices are governed by their own policies.

11. Children’s Privacy

Our Services are not directed to children under the age of 13 (or the minimum age required by law in your region). We do not knowingly collect personal data from children.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised “Last Updated” date. Your continued use of the Services after changes become effective signifies your acceptance of the updated policy.

13. Contact Us