Privacy Policy

There are no accounts, no login, and no wallet connection on VARIBLE. There is nothing to sign up for in order to browse the site, and VARIBLE holds no user funds.

The watchlist is stored only in your browser's localStorage. It is never transmitted to or stored by VARIBLE. Clearing your browser's storage clears your watchlist.

Two analytics services are used at launch:

• Vercel Web Analytics — cookieless and aggregate (page views, referrers, countries, and performance).
• Google Analytics 4 — added at the company's direction. GA4 sets cookies and device identifiers and transmits usage data to Google, which acts as a processor.

There are no other tracking SDKs — no Meta pixel and no Sentry. Aside from GA4's, no cookies are set by VARIBLE's own code.

Legal reviewCounsel must advise on the cookie-consent banner requirement for EU, UK, and other visitors, acceptance of Google's data-processing terms, IP-handling settings, consent-mode defaults, and how both services are named here. Until advised otherwise, GA4 is to be configured with consent-mode defaults appropriate to the target jurisdictions.

Standard hosting logs (Vercel) record IP addresses in transient infrastructure logs. VARIBLE does not use these to build user profiles.

You may submit an email address to receive the weekly market report. When you do, VARIBLE stores your email address, a consent timestamp, the signup source, and an unsubscribe token.

This information is used solely to send the weekly report. Every email carries one-click unsubscribe. Your email address is never sold or shared. (Report sending begins after launch; collection starts at launch.)

Legal reviewCounsel to confirm the lawful basis and consent wording, the unsubscribe mechanics, and the retention period. The brief leaves retention open, with a proposal to delete the record on unsubscribe.

A read-only JSON API exists in the codebase but is dormant at launch: no keys have been issued, and every request without a key is rejected. No consumer personal data is involved either way.

• Sell or share your email or other personal data.
• Transmit or store your watchlist on its servers.
• Build user profiles from server logs.
• Run tracking beyond the two analytics services named above.

Questions about the data or a wrong number currently route through the methodology page. A dedicated privacy and data-rights contact is an open item below.

The following are open in the source brief and must be supplied or confirmed by counsel before this policy is final. They are not yet addressed above:

• The data controller / operating entity, and whether this is a standalone policy or a supplement to Rarible's existing Privacy Policy.
• Applicable privacy law and the data-subject rights it grants, plus how to exercise them and a contact to do so.
• Cookie-consent mechanics and GA4 configuration for the target jurisdictions (see Analytics above).
• The email-signup retention period.
• International data-transfer basis for data processed by Vercel and Google.
• Any children's-data or minimum-age statement.