Privacy policy

Last updated: 11 October 2026

This policy covers KURV's three sites: kurv.fun, the docs at docs.kurv.fun, and the KURV app, where collections are launched, minted and traded. It says what each one collects, where it is kept, who else sees it, and the choices you have. "KURV", "we" and "us" mean the people who run KURV. The rules for using KURV are in the Terms of use.

In short

KURV never holds your wallet's keys and never sees a password. Logging in goes through Coinbase, which makes your wallet.
KURV keeps what it needs to run: your wallet address, your login, what you put on your profile, and what you send us.
What you do on Base, and the files a collection publishes, are public and permanent. Nobody can take them back, KURV included.
Cookies for counting visits are your choice. Some counting uses no cookie and runs whatever you choose; this page says which.
KURV does not sell your personal data.

What you give KURV

The list on kurv.fun

You join the list with Continue with X. Coinbase runs the X login and tells KURV who you are on X. KURV keeps:

your X username and display name;
the side you picked and the kind of collection you picked;
when you joined, your own referral code, and the code of whoever brought you in;
when you said yes to showing your X name and photo, and the address of that photo.

The line under Continue with X says "Your X name and photo appear on the list." Joining with it there is your yes. Once you have joined, the list shows everyone who said yes by their X username, their X profile photo, their number in the order people joined and the side they picked, newest first. It never shows an email address, a wallet, a referral code or an X account number. People who joined before that line was there are not shown until they join again with it, from Add my photo.

Coinbase does not pass KURV your X photo. So when you say yes, KURV looks it up by your X username, once, with FxTwitter, or unavatar if that fails, and keeps its address only if it is a profile photo on X's own image server. The page shows it through kurv.fun, which fetches it from X, so X does not see who is looking at the list. KURV does not keep your X account number, email address or followers.

Before you join, the list on kurv.fun shows people by a made-up name, such as NFT-degen-0001, and never by their X name. Your browser keeps your X username, your codes, and your place and photo on the list, so the page can show you your card and your own tile again.

If you joined the list with your email address instead, KURV keeps that address with the side you chose, when you joined and your referral codes, and uses it only to write to you about KURV.

Logging in to the app

Logging in with Google, Apple, email, Base, X or Telegram makes a wallet for you with Coinbase. Coinbase handles the login itself. KURV receives your wallet address, and your wallet signs a message that proves the address is yours. KURV keeps your wallet address and when your login ends, and keeps no IP address or browser details with it.

Your profile

The name, bio and picture you set are public, on your profile and beside your collections. A picture is kept exactly as you upload it, with anything the file itself carries, such as where a photo was taken, so take that out first if you would rather not share it.

If you link your X account with Connect X, Coinbase confirms it and KURV keeps your X username, display name and account number. Your profile shows the username and the name, never the number. Removing the link takes it off your profile.

Invites and coins KURV sends you

An invite code: which wallet redeemed it, and when. KURV keeps a scrambled form of each code, not the code itself.
Coins KURV sends you: which wallet got which coin, how much, from where, and the transaction that sent it.

Feedback and tester reports

When you send feedback from the app, KURV keeps what you write, the page you were on, the app's version, your wallet, whether it was invited, and when. A tester report also keeps the task, how it went, whether you were on a phone, a tablet or a computer, the size of your screen, and your notes. Anything shaped like an invite code is hidden before a note is kept.

Agents you connect

You can connect an AI agent, such as Claude or ChatGPT, to KURV so it can read collections and prepare drafts for you. See Connect an agent with MCP. You approve each connection on KURV, logged in. For each one KURV keeps your wallet, the agent's name, the address it sends you back to, and what you allowed it to do. The key an agent uses lasts an hour, and the one it renews it with lasts seven days. The drafts an agent makes, and the art it uploads for them, are kept with your wallet.

An agent cannot publish, launch or sign anything: you do that yourself, in the app. Revoke a connection whenever you like under Connected agents on My pieces, or with your agent's own disconnect.

Your collections

A collection you are making stays in your browser until you publish it: its layers, its settings and its pieces. Publishing sends its images to KURV's own storage for a moment and then to IPFS, a public file network, where Pinata, a service KURV pays, keeps them. The images, the names, descriptions and traits of its pieces, and its collection file, are public from then on. KURV adds neither your wallet address nor your name to these files. KURV deletes its own copy of the images once publishing finishes.

KURV records which wallet launched each collection. The launch itself is on Base, where anyone can see the wallet that made it.

Errors

When the app hits an error, it sends the error, where in the app it happened, the page and the app's version to KURV's server logs, and nothing about you. The app also counts the error in KURV's own count, below.

What you do on Base

Everything you do on Base, such as a mint, a listing, an offer, a sale or a sell-back to a Vault, is public for good, under your wallet address. That is true of every blockchain, not only KURV. KURV keeps a copy of this public activity (who holds, lists, offers on and buys which piece) to show it in the app and in your notices.

What counts visits

Cloudflare Web Analytics

Cloudflare runs all three sites, and its Web Analytics counts every page view. For each page it notes the address of the page, the page or site you came from, your browser and device type, your country, and how quickly the page loaded. It sets no cookie and keeps nothing in your browser, so it needs no answer from you and runs whatever you choose.

Google Analytics

Google Analytics runs on all three sites, on every page, from the first page you open. For each page it is told:

the address of the page, with every wallet address replaced by "(address)" and every invite or referral code removed;
the page before it, or only the name of the site you came from;
the page's title, again without any wallet address;
your screen size, browser, device and language.

Google also sees your IP address, as every site you visit does, and uses it for a rough location. On its own, Google's tag also notes when you scroll to the end of a page, follow a link to another site, download a file, use a site's search or start and send a form. KURV takes every wallet address out of all of it before it leaves your browser.

Before you answer the cookie question, and while Analytics stays off, all of this is sent without a cookie: nothing is read from or written to your browser. Once Analytics is on, Google may keep its cookies _ga and _ga_… in your browser. They hold a random number, not your name or wallet, and they last up to two years unless you clear them or turn Analytics off again.

Microsoft Clarity, on kurv.fun and the app

Where kurv.fun or the app has a Clarity project, Clarity records how a visitor moves through a page (heatmaps and session recordings) to help find what is confusing or broken. It follows the Analytics choice, the same as Google Analytics: nothing before Analytics is on. Clarity masks every input, every number and every email address it can recognise, and KURV also marks any wallet address or email shown as text so a recording never carries one.

Advertising, on kurv.fun and the app

Where kurv.fun or the app has an id for Meta, TikTok, X, Reddit, LinkedIn or Google Ads, that platform's own pixel measures how its own ads perform. It never receives a wallet address or an email, only the page you are on and, on a mint page, the collection's own public contract. None of it loads, and no request reaches any of these platforms, until Advertising is on; turning it off again stops the ones that support it and stops KURV sending anything further to the rest. Not every one of these is necessarily in use: this page describes what each does when it is.

KURV's own count

KURV also counts, in its own records, each page you open on any of its sites, how far down a page on kurv.fun or the docs you read, and what you do in the app: the tour, logging in, redeeming an invite, coins KURV sends you, each step of launching a collection, publishing and launching, minting, listing, buying, offers, declines, selling back to a Vault, buying from a Vault, opening your notices, sending feedback, and errors the app hits. It runs whatever you choose, so KURV knows how its sites are used even where Google is blocked.

Each record carries a random number your browser makes, not your name or your wallet. Once Analytics is on your browser keeps that number, as kurv:anon, so your next visit counts as the same visitor; before you answer, and while Analytics stays off, it lasts only until you close the tab. A second random number, kurv:session, ties together the pages of one visit and always ends with the tab. Every wallet address, email address and referral code is taken out of what a record says, as it is for Google.

If you are logged in with a wallet that has redeemed an invite, KURV links these records to your wallet in its own records, so it can see how the people it invited use KURV. That link stays with KURV: Google is never told your wallet.

The first time you open any KURV site, a bar at the bottom of the page asks about cookies: Accept all, Reject all, or Manage.

Accept all turns on Analytics and Advertising.
Reject all turns on neither. Nothing you need to use the site is affected either way.
Manage shows each category with the tools it covers. Essential is always on: logging in, security, and remembering this choice. Analytics covers visit counts and how pages are used. Advertising, shown only where an advertising tool is set up, covers measuring ads on other platforms.

Your answer is kept in this browser. Change it whenever you like with Cookie settings: at the foot of every page on kurv.fun and the docs, and in the Help menu in the app. Turning Analytics off after it was on removes the cookie Google Analytics left.

What your browser keeps

These are not for counting anything. The sites need them to work, and they stay whatever you choose.

Your login. When you log in, the app keeps one cookie, __Host-kurv_session, so it knows which wallet is yours. It works on the app's own address only, no page script can read it, and it lasts a day.
Your wallet. Coinbase keeps its own session in your browser so you stay logged in on this device.
Your answer about cookies, kept as kurv:consent:v2, and the random numbers KURV's own count uses, above.
Your place on the list. On kurv.fun, your X username, your codes, and your place and photo on the list, so the page can show your card and your own tile again.
Your own work. A collection you are making stays in your browser until you publish it. The app also remembers how far you got in its tour and the profile pictures it has shown you.
An agent you are approving. While you approve a connection, a cookie, __Host-kurv_mcp_consent, holds the request for ten minutes.

Who else sees what

Cloudflare runs all three sites and holds KURV's records and files. It handles your IP address and every request your browser makes, as any host does.
Coinbase runs logging in and your wallet, and the X login on kurv.fun. KURV also asks it which coins your wallet holds. Where the app offers Add cash, Coinbase runs it, and KURV passes it your IP address to start it.
Circle, the company behind USDC, receives your wallet address when KURV asks it to send USDC to you.
Pinata and IPFS keep and serve each collection's published files.
Nodes on the Base network, such as Base's own and PublicNode's, read balances and send your transactions. They see your wallet address and your IP address.
Google serves the typefaces on kurv.fun, and sees your IP address when it does.
Google Analytics, Microsoft Clarity and the advertising platforms, as set out above.
FxTwitter and unavatar, two public services that read X profiles, receive your X username once, when you join the list with its photo line, so KURV can find your X photo.
X, through Coinbase, when you use Continue with X or Connect X, and through KURV, which fetches the photo of each person on the list from X's image server.

Each of these handles what it sees under its own privacy policy. KURV does not sell your personal data, and shares it with nobody else except where the law requires it.

How long KURV keeps it

Your login: a day.
The scrambled piece of your IP address that stops floods: it stops meaning anything within twenty minutes and is cleared out after that.
An agent's keys: an hour, and seven days to renew. An approval in progress: ten minutes.
Everything else KURV keeps, from the list to your profile, invites, coins sent, feedback, agent drafts and KURV's own count, is kept until KURV deletes it or you ask it to.

What is on Base or on IPFS cannot be deleted by anyone, KURV included.

Your choices

Change your cookie answer with Cookie settings.
Change or remove your profile's name, bio and picture, and remove the link to your X account, on your profile.
Revoke an agent under Connected agents on My pieces.
Take your X name and photo off the list by asking at [email protected] or @kurvfun on X.
Ask KURV what it holds about you, or ask it to delete it, at [email protected] or @kurvfun on X.

Children

KURV is not meant for children, and does not knowingly keep anything about a child. The Terms of use say who can use it.

Changes

When this policy changes, the date at the top changes with it.

Questions

Ask us at [email protected] or @kurvfun on X.