PRIVACY POLICY
last updated 3 November 2026
who we are
onlybags is run by the onlybags contributors ("we"), an independent group; there is no company behind it. We handle the data described here. Contact us through the "report" button on any coin or comment, or a message to onlybags on X or Telegram.
what we process and why
- IP address and approximate country (from our hosting provider): to block restricted jurisdictions, to rate-limit uploads, comments and reports, and to protect the service. Kept in short-lived server logs.
- Wallet addresses: public blockchain data. We show trades, holdings and profiles that anyone can read on-chain.
- Content you submit: coin names, tickers, images, descriptions, links, comments (signed with your wallet) and reports. Comments and coin data are public; shortly after a coin launches on mainnet, its details and image are published to IPFS (a public network, stored through our provider Pinata), where they stay public and permanent even if we hide them on our site.
- Local storage in your browser: your terms acceptance (version + time), your burner key on test networks only, wallet connection state, and the id of a bridge from another chain while it is in flight (removed when it finishes). These stay on your device; we don't use tracking cookies or ads.
Legal bases: performing the service you request, our legitimate interest in security and moderation, and legal obligations (sanctions, illegal-content handling).
third parties
- Our hosting/CDN provider and the RPC providers of each chain (they see your IP when your browser connects).
- Your wallet provider, WalletConnect (relay for mobile wallets) and Coinbase Wallet if you choose them.
- Relay (relay.link), only if you pay with a coin from another chain: your browser sends it your wallet address, the chains, coins and amount to get a quote and track the bridge.
retention
Server logs: [X days — counsel/ops]. Public content stays until you ask us to hide it or we remove it; on-chain data can never be deleted by anyone.
your rights
Depending on where you live you can ask for access, correction, deletion (of off-chain data we control), restriction or objection, and you can complain to a data protection authority. Contact us through the channels above.