What we collect

• From X sign-in: your X user id, @handle and display name. We don't post on your behalf or read your DMs.
• At checkout: the wallet address you ask us to deliver to, and your order (amount, memo code, status).
• From sellers' watchers: the X Money payments a seller receives or sends — transaction id, amount, counterparty @handle, note and time. Payments that turn out to be unrelated to xnft.money (a seller's personal payments) are reduced to transaction id and amount after 24 hours.
• Security logs: IP addresses for rate limiting and staff actions, kept for up to 24 hours (rate limits) or with the audit log.

What is public

The public ledger shows each matched order with your @handle, a shortened memo, a shortened X Money transaction id and a shortened delivery address. NFTs and their owners are public on-chain by nature.

What we never do

• Receive or hold your money — payments go directly to the seller's X Money account.
• Hold your wallet keys, or sell your data.

Your choices

Download or delete your account data yourself at Account & data. Deleting removes your profile, follows and favorites and unlinks your X account; on-chain records and the order history sellers need for refunds and disputes are kept, without your handle, as required by law. Contact: privacy@xnft.money.