Privacy Policy

This policy applies to the Hbarter website and its wallet-authenticated features, profiles, listings, offers, Smart Trade Matches, notifications, token association checks, Secure Swap coordination, support communications, and security operations.

Hbarter is an independent community-maintained project run by an individual maintainer. The Maintainer determines how Hbarter application data is processed and acts as the responsible controller or personal information controller where those concepts apply.

Privacy questions and requests may be sent to hbarter.app@gmail.com. Additional identity, representative, or address information will be provided where applicable law validly requires it.

Depending on how you use Hbarter, the service may process:

• Hedera account IDs, authentication challenges, signature-verification results, session identifiers, and sign-in timestamps.
• Optional profile information, such as username, avatar URL, bio, website, and social profile links.
• Listings, wanted-project criteria, offers, cancellations, token IDs, NFT serial numbers, project IDs, status, timestamps, and reasons submitted through the service.
• Offer and settlement amounts, including HBAR offer amounts (in base units), the platform-fee terms recorded for a swap (the per-participant fee amount, the fee collector account, and the fee policy version), and, for a completed HBAR trade, the payer and payee accounts.
• Swap-session, association-status, signature-status, submission, reconciliation, and transaction records, including confirmed transaction IDs.
• Notifications, read state, match-seen state, and notification preferences.
• Smart Trade Match lifecycle records, listing references, bounded matched-project IDs, detection and review timestamps, and match-to-offer or completed-swap attribution.
• Messages and information you send to the Hbarter contact email.
• IP addresses, request headers, browser or device information, request paths, timestamps, rate-limit events, error details, and security or operational logs processed by Hbarter or infrastructure providers.

Hbarter does not require, request, or store your private key or recovery phrase. Do not send wallet secrets to Hbarter or anyone claiming to represent Hbarter.

Hbarter reads public Hedera ownership and token information to display eligible NFTs and compute Wallet Matches. The service is not designed to create a permanent application copy of your complete wallet inventory or all NFT metadata solely for matching.

Hbarter stores limited match records needed for lifecycle state, notification deduplication, preferences, and conversion measurement. These records may include account and listing references and bounded project IDs, but not private keys, signing secrets, or a permanent full serial-by-serial wallet snapshot.

Hbarter reads data associated with Hedera Mainnet, including through Mirror Node services, and may link to blockchain explorers. Account IDs, token IDs, NFT serial numbers, transaction IDs, timestamps, fees, holdings, and transfer history may be publicly observable and independently copied or analyzed.

The Maintainer cannot delete or alter records maintained by the Hedera network, nor conceal, reverse, or correct records copied by independent explorers, indexers, wallets, or data providers.

Information that may be public or visible to other Hbarter users:

• Your Hedera account ID and optional public profile fields.
• Active and historical listing information and the NFTs or project criteria shown in listings.
• Offer activity shown on listing pages, including offer type, NFT or HBAR offer contents, offer status, timestamps, and related public account or profile information.
• Public project information and selected activity events.
• Confirmed transaction links and public network information.

Information generally restricted to the relevant user or service operations:

• Notifications and notification preferences.
• Swap-session internals, private operational records, and offer information that is not displayed as listing activity.
• Authentication, session, rate-limit, error, and security information.
• Internal match lifecycle and conversion records except match context shown to the relevant user.
• Support messages that are not intentionally made public.

• Authenticate wallet-controlled accounts and maintain sessions.
• Provide profiles, project discovery, listings, offers, matches, notifications, and swap coordination.
• Check ownership, project eligibility, association status, available balance where HBAR is involved, fee safety, and transaction state.
• Prevent duplicate actions, fraud, abuse, unauthorized access, and service disruption.
• Investigate errors, reconcile uncertain results, maintain audit integrity, and improve reliability.
• Respond to support, privacy, security, abuse, and legal requests.
• Comply with applicable law and protect users, the Maintainer, contributors, and third parties.

Depending on applicable law and the context, Hbarter processes information because it is necessary to provide a feature you requested, to take steps connected with your use of the service, to pursue legitimate security and operational interests, to comply with legal obligations, to protect rights and safety, or with consent where consent is required.

Hbarter does not use consent as a blanket justification where another lawful basis or a specific notice is required. You may withdraw consent for optional processing where applicable, but withdrawal does not make earlier lawful processing invalid and may prevent use of the related feature.

• An essential session cookie or equivalent mechanism may keep you signed in after wallet authentication.
• Wallet connection libraries may store connection state in your browser.
• Interface or notification preferences may be stored locally where implemented.

Hbarter may use a privacy-focused analytics service, such as Google Analytics, when analytics is enabled for a deployment, to understand aggregate page views, feature usage, errors, and service reliability. When analytics is enabled, the data may include device or browser information, approximate location derived from your IP address, pages visited, timestamps, and interaction events. Hbarter uses analytics only in aggregate to keep the service reliable.

Hbarter does not use analytics for third-party behavioral advertising, does not use third-party advertising cookies or behavioral advertising profiles, and does not sell this information. If advertising or other non-essential tracking is ever introduced, this policy and any required consent controls must be updated before that processing begins.

Hbarter may use providers for hosting, database services, email delivery, monitoring, logging, wallet connectivity, Hedera data access, and security. Providers process information only as needed to supply those services, subject to their own terms and privacy obligations and any agreements used by the Maintainer.

Hbarter does not sell personal information and does not share it for third-party behavioral advertising. Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate abuse or security incidents, protect rights or safety, or support a transfer of project operation with appropriate safeguards and notice.

Internet, hosting, database, wallet, email, monitoring, and blockchain-data providers may process information in countries different from yours. Where applicable law requires safeguards for cross-border processing, the Maintainer will use reasonable contractual, technical, or organizational measures available for the service.

Hbarter retains application data only for as long as reasonably needed for the purpose for which it was collected, active service use, security, abuse prevention, audit integrity, dispute handling, legal compliance, backup rotation, or establishment and defense of legal claims.

• Authentication challenges and temporary security data are kept only for their operational or security window unless needed to investigate abuse.
• Active profiles, listings, offers, matches, notifications, and swap records are kept while needed to provide the service and maintain account history or integrity.
• Completed, cancelled, failed, or disputed transaction-related records may be kept longer for audit, reconciliation, security, and legal purposes.
• Operational logs and backups are retained according to provider and security cycles and are deleted or overwritten when no longer reasonably needed.
• Support and legal communications may be retained while a request, incident, or dispute remains relevant.

Public blockchain records and copies maintained by independent providers are not controlled by the Maintainer and are not subject to deletion from Hbarter's database.

Hbarter uses technical and organizational controls appropriate to the current service, such as signed authentication, server-side authorization, input validation, rate limiting, transaction checks, restricted access, and security logging where implemented.

No online service, individual maintainer, wallet, device, database, or provider can be guaranteed to be completely secure. You remain responsible for protecting your wallet, device, accounts, and secrets.

Depending on applicable law, you may have rights to be informed, request access, obtain a copy, correct inaccurate data, object to or restrict certain processing, withdraw consent for optional processing, request deletion or blocking, request portability, or complain to a privacy authority.

Send a request to hbarter.app@gmail.com. Hbarter may ask for reasonable verification that you control the relevant account or are otherwise authorized to make the request. Requests may be limited where retention is required by law, needed for security or legal claims, affects another person's rights, or concerns public blockchain data outside Hbarter's control.

Smart Trade Matches use deterministic project and listing rules to show possible compatibility. Hbarter does not use these matches to make legal, employment, credit, insurance, investment, or similarly significant decisions about you. A match does not force a transaction or determine value or fairness.

Hbarter is intended only for adults who are at least 18 years old and legally capable of agreeing to the Terms. The service is not directed to children, and the Maintainer does not knowingly seek personal information from children.

If the Maintainer becomes aware of a security or privacy incident, Hbarter may investigate, preserve evidence, restrict access, notify providers, affected people, or authorities, and take other reasonable steps required by applicable law and the circumstances.

Hbarter may update this policy when the service, providers, data practices, law, or project operation changes. The published Last updated date identifies the current version. Material changes may be highlighted or require renewed acknowledgment before continued use of affected features.

For privacy requests, security concerns, abuse reports, or questions about this policy, contact hbarter.app@gmail.com. Do not include private keys, recovery phrases, wallet passwords, session tokens, or unnecessary sensitive information.