Privacy Notice
Last updated: 30 October 2026
This notice says what personal data Jig (jigpad.com) collects, why, who sees it, how long we keep it, and your rights. The controller is JiG. Contact: "Report an issue" on the site, or @jig_app on X.
1. What we collect, and why
| What | When | Why | Legal basis |
|---|---|---|---|
| Email address | you sign in with an email link | your account and sign-in links; a note when your build is ready, if you keep that on | contract |
| Telegram user id and username | you sign in with Telegram, or follow a build with the bot | sign-in; build updates in Telegram | contract (consent for the updates; stop them with the bot) |
| The contact you gave on a build (that email or Telegram) | you start a build | so we can reach you about that build | contract |
| Your brief: descriptions, settings, prompts, notes on re-rolls, and any picture you upload | you make a build | to draw, check and assemble your collection | contract |
| Wallet addresses | you connect a wallet, pay, launch, mint, list or trade | to build your transactions, check payments and show what you own | contract |
| Payment records (amount, currency, transaction signature, time, the build) | you pay | to confirm payment and keep accounts | contract; legal obligation |
| Gift code and credit records | you redeem a code | to apply it once | contract |
| Feedback and issue reports, with screenshots you attach | you send them | to fix problems and improve Jig | legitimate interests |
| Page views: the page, the referring site's host, a campaign tag, your country (two letters), mobile or desktop, and a daily hash of your IP address and browser | you use the site | to see which pages and campaigns bring people | legitimate interests |
| Server logs (IP address, browser, pages requested, errors) | you use the site | to run, secure and debug the service | legitimate interests |
The page-view hash is made fresh each day from your IP address, browser and a secret; it cannot be turned back into your address and it does not follow you across days. We use no advertising trackers and no third-party analytics. The only cookies are the ones that keep you signed in and one that holds a sign-in code while Telegram sign-in completes.
Public by design. Everything on the Solana blockchain (wallet addresses, payments, mints, listings, trades) and your collection's art and metadata on IPFS are public and permanent. We cannot delete or change them, and anyone can read them.
2. AI processing and your uploads
Your brief and any picture you upload are processed by AI services to make your collection:
- The art director (Anthropic's Claude, through Anthropic's API) reads your description and your uploaded picture, writes the drawing instructions and reviews what comes back.
- The image models (Google Gemini image models and OpenAI's image model, through OpenRouter) draw the character and layers from those instructions and from the character drawn for you.
What this means for you:
- A picture you upload is a reference. The art director describes it in words and the character is drawn from that description; the picture itself is not sent to the image models and is not published. It stays in your build's working files on our server until those are cleared (section 5), and we do not use it for anything else.
- Your text brief and the drawings are sent to those providers to be processed and are subject to their retention; we do not use your brief to train anything.
- If you upload a picture of a real person, you confirm they agreed. Do not upload pictures of children.
3. Who we share it with
Only the services that run Jig, each under its own terms, and only what each needs:
| Service | What it does for Jig | What it gets |
|---|---|---|
| Supabase | accounts and sign-in, your drafts and collection list, feedback, issue reports, page views; the private bucket that holds feedback screenshots | email, Telegram id, drafts, feedback, page-view rows |
| Vercel | hosts the website and its API routes; its edge adds the two-letter country to page views | request data, IP address |
| Hetzner | our own server in Germany that runs builds, payments, launches and the bot | briefs, pictures, art, payment records, logs |
| Telegram | sign-in and build messages when you choose them | your Telegram id and the messages |
| Anthropic | the art director | your brief and uploaded picture |
| OpenRouter, routing to Google and OpenAI | drawing the art | the drawing instructions and the drawn character |
| Pinata | pins your collection's art and metadata to IPFS and serves it through our gateway | the art and metadata (public) |
| Solana RPC providers (a public RPC and Helius) | read the chain and send transactions | wallet addresses and transactions (public) |
| CoinGecko, Coinbase, Kraken and Binance public price feeds | SOL and ETH prices for quotes and the mint fee | nothing about you |
| DexScreener | the JIG price shown on the $JIG page | nothing about you |
Not used, and not named by mistake: no marketplace, exchange or wallet provider receives your data from us. We do not sell your data and we do not share it for advertising. We disclose data where the law requires, or to protect Jig and its users from fraud or abuse.
4. International transfers
Some of these services process data outside the UK and EEA, mostly in the United States. Where they do, we rely on the safeguards those providers offer under their own data terms.
5. How long we keep it
- Account data: while your account is open, and for as long as we need it after you close it to meet our legal duties.
- Build working files (brief, uploaded picture, drawn pieces, assembled images) on our server: cleared automatically once a build is finished with, by an hourly job: a failed build after 2 days, a launched and revealed one after 3 days, an untouched one after 14 days. A record of the build (what was asked for, what was paid, what was launched) is kept. Launched art and metadata stay on IPFS and the chain for good.
- Payment and credit records: as long as the law requires for accounts, typically six years in the UK.
- Feedback, issue reports and screenshots: as long as they are useful for fixing and improving Jig.
- Page views: as long as they are useful for understanding how the site is used.
- Server logs: for a limited time, to run, secure and debug the service.
- Backups: our server is backed up every six hours to a storage box at the same provider; 14 backups are kept, so deleted data can remain in a backup for up to about four days.
6. Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, to receive a copy, and to withdraw a consent. Ask us through "Report an issue" on the site, or @jig_app on X; we answer within one month. We cannot change or delete what is on the Solana blockchain or on IPFS. If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk) or your local regulator.
7. Children
Jig is for people aged 18 and over. We do not knowingly collect data from children; tell us if you think we have and we will delete it.
8. Changes
We publish any change on this page with a new date and flag significant ones on the site.