Privacy Policy

GLHF ("we," "us," or "our") operates a platform that enables users to create and deploy token websites. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use our website, applications, and services (collectively, the "Service").

We are committed to transparency and minimal data collection. We only collect information that is necessary to provide, maintain, and improve the Service.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.

2.1 Information You Provide Directly

• •Account credentials — Email address and password when you create an account
• •Token information — Contract addresses, descriptions, social links, and other project details you enter
• •Website content — Text, colors, images, and design customizations you create
• •Feedback and communications — Messages, feedback, and support requests you submit
• •Affiliate codes — Referral codes you create or use

2.2 Blockchain Information

When you make payments or connect a wallet, we may process:

• •Wallet address — Your Solana wallet address used for payment
• •Transaction hash — Public blockchain transaction identifiers
• •Payment amount — SOL amount transferred

2.3 Automatically Collected Information

• •IP address — Used for rate limiting, abuse prevention, and security
• •Device and browser data — User agent string, screen resolution, operating system
• •Usage analytics — Pages visited, features used, session duration, click patterns
• •Timestamps — When accounts are created and websites are deployed
• •Referral source — How you arrived at our Service (referrer URL)

We process your information for the following purposes:

We process personal data under the following legal bases:

• •Contract performance — Processing necessary to deliver the Service you requested (account creation, website deployment, payment processing)
• •Legitimate interests — Analytics, fraud prevention, security monitoring, and service improvements, balanced against your privacy rights
• •Consent — Where we rely on your consent, you may withdraw it at any time by contacting us
• •Legal obligation — Where required to comply with applicable laws, regulations, or legal proceedings

We do not sell, rent, or trade your personal information. We may share data in the following circumstances:

5.1 Service Providers

We use trusted third-party services to operate the platform:

5.2 Legal Requirements

We may disclose information when required by law, including:

• •Court orders, subpoenas, or valid legal process
• •Law enforcement requests compliant with applicable law
• •Protection of our rights, property, or safety
• •Prevention of fraud, abuse, or illegal activity

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of the transaction. We will notify you of any such change.

5.4 Public Information

Deployed websites are publicly accessible on the internet. Any information you include in your website becomes public content.

We use minimal tracking technologies:

Managing Cookies

Most browsers allow you to control cookies through their settings. Disabling essential cookies may prevent you from using certain features of the Service. You can clear local storage through your browser's developer tools or settings.

We implement industry-standard security measures to protect your data:

• •Encryption in transit — All data transmitted via HTTPS/TLS
• •Encryption at rest — Database contents encrypted at the storage level
• •Row-level security — Database policies ensure users can only access their own data
• •Access controls — Limited production data access with authentication required
• •Regular monitoring — Continuous security monitoring and timely updates

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

We retain data only as long as necessary for its intended purpose:

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• •Access — Request a copy of the personal data we hold about you
• •Rectification — Request correction of inaccurate or incomplete data
• •Erasure — Request deletion of your data (subject to legal retention requirements)
• •Restriction — Request that we limit how we process your data
• •Data portability — Receive your data in a structured, machine-readable format
• •Objection — Object to processing based on legitimate interests
• •Withdraw consent — Where processing is based on consent, withdraw at any time

To exercise any of these rights, contact us at @glhfwtf on X (Twitter). We will respond within 30 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation:

• •All rights listed in Section 9 above
• •Right to lodge a complaint with your local Data Protection Authority
• •Right to withdraw consent at any time without affecting the lawfulness of prior processing
• •Right not to be subject to solely automated decision-making

Legal basis for processing: We process your data under contract performance (providing the Service), legitimate interests (analytics, security, fraud prevention), consent (where applicable), and legal obligation (regulatory compliance).

Data transfers: When we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• •Right to know — What personal information is collected, used, shared, or sold
• •Right to delete — Request deletion of your personal information (subject to legal exceptions)
• •Right to correct — Request correction of inaccurate personal information
• •Right to opt-out — Opt out of the sale or sharing of personal information
• •Right to limit — Limit the use of sensitive personal information
• •Non-discrimination — We will not discriminate against you for exercising your CCPA rights

The Service is not directed at and is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 (or under 16 in the EEA).

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information promptly.

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction.

When we transfer data internationally, we take steps to ensure appropriate safeguards are in place:

• •Standard Contractual Clauses approved by the European Commission
• •Data processing agreements with all third-party service providers
• •Encryption in transit and at rest

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• •We will update the "Last updated" date at the top of this page
• •Material changes will be communicated via the Service or by email
• •Continued use of the Service after changes constitutes acceptance of the updated policy

For privacy-related questions, concerns, data requests, or complaints:

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local Data Protection Authority.