Privacy

When you sign in with a provider, we receive that provider's immutable account id, your public handle, display name and avatar. For email we receive the address. That is the whole set, and it is what routing and claim verification require.

We never receive your password. Sign-in happens on the provider, and we only see what it returns.

There is no Assetsend database. Identity-to-wallet mapping is held by our wallet infrastructure provider, and transaction history lives on a public blockchain. We do not keep a copy.

Email verification uses a signed link rather than a stored token, so there is no token table — a leaked database cannot contain a live verification token, because no database contains one.

Blockchain transactions are public and permanent by design. Anyone can see that an address received an asset, and the amount. Assetsend never publishes the link between an address and an identity, but you should assume on-chain activity is visible to anyone who looks.

Email addresses are shown masked in the interface, never in full, and are not written into transaction data.

Wallet infrastructure and authentication are provided by Privy. Hosting is provided by Vercel. Identity verification runs against the provider you choose — X, GitHub, Twitch or Google. Each handles data under its own policy.

You can disconnect any linked identity from your profile. Because Assetsend is self-custodial, assets already in your wallet remain yours and are unaffected. On-chain records cannot be deleted by anyone, including us.

Reach us on X at @assetsend_.