Only Traits

Privacy Policy

Last updated: October 13, 2026

Only Traits is the business brand and onchain art platform operated in Brazil by 68.938.429 JOAO VITOR DE OLIVEIRA DOS SANTOS, an individual microenterprise (MEI), CNPJ 68.938.429/0001-68. Only Traits collects the minimum data needed to operate the site, holder tools, Discord bot, reports, and ranking flows.

Data We Process

We may process public wallet addresses, token IDs, selected traits, submitted artwork, report details, Discord user IDs, Discord usernames, saved bot wallet preferences, request metadata, and transaction/event data from public blockchains.

How We Use Data

Data is used to load eligible NFTs, save holder trait choices, operate community listings, produce PnL estimates, post Discord alerts, process reports, prevent abuse, and debug service reliability.

Third-Party Services

The site and bots may use Discord, OpenSea, Etherscan, Vercel, wallet providers, RPC providers, and storage providers. Their services may receive request metadata according to their own policies.

No Private Keys

Only Traits never asks for, stores, or needs your private key or seed phrase. Wallet signatures and transactions should be reviewed in your wallet before approval.

Artist Studio Pairing

The Only Traits Artist mobile app does not connect a wallet or submit transactions. A one-time QR created on the website can authorize a revocable device session. Free Canvas drafts and imported reference images stay in private storage on that device unless exported or deliberately sent. In paired mode, wallet addresses, token IDs, ownership checks, assigned projects, complete editable artwork drafts (including pixels, frames, layers, colors and timing), compact previews, device identifiers, device labels, and project actions may be processed privately so the artist can work across the app and website. Revoking a device blocks future sync without deleting artwork already received.

Optional Community Icons

Choosing one of the app's included icons changes a local system setting and does not upload your artwork. If you choose Submit for approval and confirm, the app sends one still image, its title and your chosen artist credit for private moderation. It does not send the editable project or its other animation frames. Approved images, titles and artist credits become public in the community icon gallery; selectable native app icons must also be included in an app update. Artist names supplied with a submission are claims by the submitter, not verified identities.

A generated app identifier and request network address are used to enforce submission limits; moderation storage keeps keyed hashes instead of the raw identifier or address. Submitted images and review decisions are retained for moderation and abuse handling. Contact us below to request removal. Removing an image from the online gallery cannot remove copies or previously installed icon assets from other people's devices.

Mobile App Permissions

The Android Artist App requests camera access only when you choose to scan a pairing QR. Optional notification permission is used for commission alerts, periodic background checks can look for assigned commissions, and boot-completed access can restore those alerts after the device restarts. The app stores local Canvas projects, exported PNG/GIF artwork, an encrypted pairing session, a generated device identifier, and the device manufacturer/model used as its private session label. The Google Play build does not install or update application packages; updates are delivered by Google Play.

Security and Data Transfer

Network requests use encrypted HTTPS connections. Pairing tokens are stored in Android encrypted storage when it is available. Local Free Canvas projects are not uploaded unless the user deliberately sends or synchronizes them.

Retention and Removal

Public blockchain data is permanent. Offchain draft, report, Discord bot, device-session, and listing records may be retained while features operate and may be removed or reset when abuse, bugs, or support needs require it. The mobile app does not create a separate account. A paired device can be disconnected in the app or revoked from Profile. Requests to remove eligible offchain data can be submitted through the report page.

Contact

Contact tukkinha@onlytraits.art, use the official Only Traits Discord, or use the Only Traits report page for privacy, data-removal, and support requests. See the official business record.