What GEMZ keeps
- Public blockchain records. GEMZ copies the public records of Collector Crypt's cards from Solana, Collector Crypt and Magic Eden: which wallet holds each card, and the wallets in listings, buy orders, sales and pack pulls. They show on card pages, inventories and the market. Anyone can open any wallet's inventory on GEMZ, as on a block explorer.
- Your wallet address, when you connect a wallet or open an inventory. GEMZ uses it to show your cards and build your transactions. When anyone opens a wallet's inventory, GEMZ records the address, the time and how many Collector Crypt cards it held, so it can keep that inventory up to date.
- Trades you make on GEMZ. After you sign, GEMZ records the result: your wallet, the card, the price and, for a sale, the transaction. All of it is public on Solana anyway.
- Trade offers, while they're switched on: both wallets, the cards and SOL on each side, the signed transaction, its status and dates, and why it couldn't settle if it didn't. Offers aren't private: anyone can look up the offers a wallet has made or received.
- Signed messages that prove an action came from your wallet (making, countering, declining or cancelling an offer). They're checked and not kept.
- Logs. GEMZ's own error logs keep the type of error and its first line, with keys removed. The background worker's logs can include a wallet address, for example when an inventory refresh is skipped. Our host sees your IP address and browser details on every request, and its firewall counts requests per IP address to stop abuse.
What GEMZ doesn't do
- No accounts, names, emails or passwords. GEMZ never asks for your seed phrase or private key.
- No advertising, tracking pixels or analytics, and no cookies of its own.
- Your browser remembers which wallet you connected, so it can reconnect next time: the wallet connector saves the wallet's name in your browser's local storage (and, for a mobile wallet on Android, that wallet's sign-in). It stays in your browser. Clear your site data to forget it.
- GEMZ doesn't sell your data or share it for advertising.
Who else sees what
- The services that run GEMZ: Vercel hosts the site, its servers and its firewall; Neon hosts the database; Fly.io runs the background worker that keeps cards and inventories up to date; Helius is GEMZ's connection to Solana. The database and the worker run in the eastern United States.
- Your browser talks to GEMZ, Helius (to send the transactions you sign, or check they went through), Google Fonts (for the site's fonts) and your wallet. They see your IP address under their own policies.
- GEMZ's servers talk to Collector Crypt for card data and listings. When you buy one of their listings, GEMZ gives Collector Crypt your wallet so it can build the transaction, then passes on the transaction you signed for Collector Crypt to send. When an inventory is refreshed, GEMZ may ask Collector Crypt and Helius which cards that wallet holds.
- GEMZ's servers also read Magic Eden's API (listings and sales), Tensor's listings and buy orders on-chain through Helius, Jupiter (the SOL price) and the hosts of card photos (Collector Crypt's, Arweave and CGC's). GEMZ fetches the photos itself, so your browser doesn't contact those hosts. Magic Eden, Jupiter and the photo hosts get nothing about you.
- Links out, such as a Magic Eden listing or a block explorer, open other sites under their own policies.
- Anything you sign is public on the Solana blockchain for good, including the wallets and amounts involved.
How long it's kept
- Offer records and inventory records have no set end date yet, so offer history and inventories keep working. You can ask for yours to be deleted (below).
- Public blockchain records are re-read from the chain for as long as GEMZ runs.
- Vercel and Fly.io keep their logs for their own set periods.
Your choices and contact
- You can browse GEMZ without connecting a wallet.
- Ask what GEMZ keeps about your wallet, ask for a copy, or ask for it to be corrected or deleted, at hello@gemz.market. GEMZ may ask you to sign a message with the wallet to show it's yours.
- GEMZ can delete its own records: your offers, inventory records and, where its hosts allow, logs. Nobody can delete what's on the blockchain, and public records of cards, listings and sales come back each time GEMZ reads the chain.
- Depending on where you live, you may have more rights over your data, including the right to complain to your data protection authority.
- GEMZ will update this page when what it keeps changes. The date at the top shows the latest version. See also the Terms of Use.