METAPLATEX · SOLANA DEVNET

Privacy policy

Updated 16 September 2026 · 2026-09-16-devnet-v4. Applies to the test service. Legal operator name and postal address are still incomplete; see business details. These documents do not establish approval for a real-money launch.

1. Who is responsible

MetaPlateX operates from Tunisia. Contact support@metaplatex.com for privacy matters. The responsible legal person and public postal address have not yet been supplied; the business details page identifies this gap. This notice describes implemented processing, not certification of compliance or a completed legal-basis or international-transfer assessment.

2. What we use and why

• Account and security: public wallet address, account identifier, sign-in challenge and signature/proof, session information and time of account creation, to authenticate and protect your account. The public app receives no wallet private key.
• Requested features: plate ownership, purchase and return records, bids, balances and holds, transaction references, messages, offers, gifts, exchanges, requests, reports and legal acceptance receipts, to provide the features you choose and investigate issues.
• Optional profile: nickname, biography, garage and visibility choices. A real name is not required. We no longer collect phone numbers; an older number can be removed in Privacy & cookies.
• Optional notifications: a verified email address if email delivery is enabled, or a browser push endpoint and device label if you enable push. Private message text is not included in external alerts. Email delivery currently awaits sender setup. Verification does not subscribe you automatically.
• Optional usage counts: predefined feature/event counts, day and a random browser identifier, only after you opt in. No wallet address, message text, email, full URL or recording is included in these counts. Necessary HTTP handling can still involve your IP address.
• Support and operations: request details you submit, security/rate-limit metadata, error references and administrator audit records. Avoid putting sensitive personal information or secrets in free-text fields.

Core processing supports your requested service and its security. Optional analytics and external notification choices are separate. Applicable lawful bases, local formalities and any international-transfer permissions or safeguards require confirmation for the final operator; accepting terms is not blanket permission for all processing.

3. Who can see information

Public profiles, public garages, public plate records, selected Wanted posts and room bidder aliases may be seen by visitors. Private messages are available to their participants and may require restricted operator access to investigate reports. Custom requests, privacy requests and reports are reviewed privately by authorised staff. Private balances are not shown in public collector pages. Do not assume a public blockchain transfer is private.

4. Services and third parties

• GoDaddy hosting: serves the app and its PostgreSQL database, handling application records and connection metadata. Encrypted backup copies may also be stored on the operator’s computer.
• Phantom or MetaMask: receives the connection or signing request when you select that wallet. MetaMask mobile uses its connection relay. MetaMask SDK analytics is explicitly disabled. These wallet services have their own privacy notices.
• Solana RPC and Devnet: a public wallet address is sent to RPC services for balance and transaction checks. Wallet addresses, amounts and transaction signatures on Devnet are public chain records.
• Device push services: Apple, Google or the browser’s push provider handles delivery if you explicitly enable browser notifications.
• Email and support: support@metaplatex.com is provided through the operator’s GoDaddy/Microsoft email service. A Resend delivery adapter is present in the code but is not activated; this update does not register an account or send notification data to it.

Fonts, interface art and wallet icons are served from our own origin. No advertising or session-replay SDK is installed. Wallets and service providers may process data outside Tunisia or your country. Provider contracts, actual access locations and lawful cross-border arrangements remain to be finalised and reviewed.

5. Retention

Optional feature counts are cleaned after 90 days; you can request earlier deletion for this browser by rejecting optional counts. Email verification records are cleaned after two days, notification delivery records after 30 days. Active account and trading records, messages, requests and support decisions currently remain until an operator-reviewed deletion or retention decision. There is no automatic full-account erasure scheduler. We must not promise that submitting a request immediately removes all copies.

Deletion reviews consider unresolved trades, other participants’ rights, security investigations and any applicable retention obligation. The response should identify any information retained and why. Backup copies age out according to the configured backup process; a comprehensive documented retention schedule and restore-time deletion procedure still require operator review. MetaPlateX cannot erase public blockchain records.

6. Your controls and requests

Use Privacy & cookies to reject or allow optional usage counts, request data access, correction, deletion, restriction or object to processing, and see the response. You can use email if you cannot access your wallet. A proportionate identity check may be needed; never send a private key. We aim to respond within one month and will explain any extension, refusal or retained records, subject to applicable law.

Edit your public profile in My showcase. Remove notification devices or your email in Notification settings. Optional email alerts contain an unsubscribe link that does not require wallet sign-in. Turning off usage counts does not prevent use of the app.

7. Children and complaints

The service is for adults aged 18 or older. We do not intentionally provide accounts to children or collect their birth dates. If you believe a child’s information was submitted, contact support for removal review. We do not use parental consent to enrol children.

You can contact Tunisia’s Instance Nationale de Protection des Données Personnelles (INPDP) or another competent authority where applicable. Applicable rights, regulatory filings and representation requirements depend on the operator and countries served.

8. Security and storage

Controls include authenticated access, encrypted transport, separate administrator MFA and restricted backups. No service can promise absolute security. The cookie policy explains storage and its purposes. Historical local-demo wallets may contain encrypted test keys in the separate archive; creating or importing such wallets is not offered in the public app.