Privacy

> the short version

Credence is a website that reads public blockchains. Most pages collect nothing. The one feature that asks you for anything is RWA, where you sign in with X, stand at a place and claim a token. This page says what that involves.

> signing in

Sign-in is handled by Privy. When you sign in with X, we receive your X account's numeric id and username. We never receive your X password, and we cannot post as you or read your direct messages. The account id is what a claim is tied to: one claim per account per drop per cooldown. Privy's own policy covers what Privy stores.

> claiming a drop

When you press Claim, your phone sends us, once:

• A short GPS log: a handful of readings over about twenty seconds, with their accuracy and timestamps, and a motion reading.
• The wallet address you want paying.
• The link to the post you shared on X.
• Your device's clock and timezone, and a random id this site generated in your browser.

We also see the network address your request came from. The device id and the network address are stored only as salted hashes: enough to notice two claims from the same phone or connection, not enough to identify either. We keep the position of the last reading, the campaign, the account id, the wallet address, the post link and the transaction hash. Nothing about your location goes on chain; the chain records only that an attestor signed for a wallet to be paid.

> the photo

The photo you take is never uploaded to us. It stays in your browser until you share it on X yourself, and what we keep is the link to your post. If the camera shows a lens, that lens is rendered in your browser by Snap's Camera Kit; camera frames are processed on your device and Snap's privacy policy applies to that software. We do not receive the camera feed.

> places are public

Where a drop can be claimed is public to the metre, on the map and in the list, because people have to walk there. Sponsors are told this before they place one. A claimant's own position is not shown to anyone.

> sponsors

Funding a drop is a wallet transaction on Robinhood Chain, which is public. We keep the places you pin; the signature that proves the funding wallet placed them is checked and discarded. We do not keep anything else about you.

> services we use

Your browser talks to a few other services on these pages, each for one job. Privy, for sign-in. Blockscout, the chain explorer, when the sponsor form lists the tokens a wallet holds, which sends it that wallet address. OpenStreetMap's Nominatim and komoot's Photon, when you search for a place on the sponsor map, which send them what you typed; our server also asks Nominatim which city a pin is in. Snap, for the camera lens. Vercel, which hosts the site and tells our server a rough location for your connection, used only to check it is on the same continent as the pin.

> cookies and analytics

We set no advertising cookies and run no third-party analytics. Privy and your wallet software keep what they need in your browser to keep you signed in or connected.

> how long, and your rights

Claim records are kept: the caps look back a day, the travel check looks at your previous claim, and the count of what a drop has paid is read from them for as long as the drop exists. Write to support@pfwa.fun from the X account concerned to ask what we hold about it or to have it deleted; what is already on a public blockchain cannot be deleted by anyone.