Privacy notice (draft)

DRAFT — not yet reviewed, not in effect

This is a working draft for NimbusMint’s own review and legal review. It does not describe a binding commitment yet. Items marked TODO are open.

This notice covers this website (including docs.nimbusmint.bot), the access request form, and the NimbusMint Partner API. Controller: TODO (legal entity name, address, contact email).

This website

• No cookies, no analytics, no third-party scripts. Fonts and all assets are served from our own domain.
• Your theme choice and code-tab choice are stored in your browser’s local storage and never sent to us.
• Our web server keeps standard access logs (IP address, time, requested page, browser user agent) to keep the site secure and working. TODO: retention period.

Access requests

When you ask for API access (with the form or a Discord ticket), we collect what you send us: name, company, site URL, use case, expected volume, server IP addresses and contact details. We use it only to review the request, issue and manage keys, and contact you about your access. Requests made through Discord are also subject to Discord’s own privacy policy. TODO: retention period for declined requests.

Partner API

• For each key we keep its ID, a hash of the secret (never the secret itself), its allowlist, scopes and usage logs (time, route, source IP) for security, abuse prevention and support. TODO: retention period.
• API responses contain mint activity of the users who signed up through your app: their NimbusMint user ID, Discord ID and username, the wallet addresses they minted from, and per-mint details (contract, chain, transaction hash, quantity, time). A key only ever returns its own app’s users. A masked handle is included for display.

Your rights

TODO: access, correction, deletion and objection rights, the applicable law, and how to contact us about them.

Changes

We will publish any change to this notice on this page, with the date it takes effect.