Privacy Policy

1. Introduction

Welcome to ROB Domains ("we," "our," or "us"), a decentralized domain name registry and marketplace built on Robinhood Chain. We are committed to transparency about what data is handled when you use our platform.

Because ROB Domains is built on public blockchain infrastructure, much of what you submit is stored publicly and permanently on-chain. This policy explains what that means for you and how we handle any off-chain data.

2. Wallet Authentication

ROB Domains uses wallet-based authentication. There are no passwords or email addresses. To use the platform you connect a compatible wallet (e.g. MetaMask or any WalletConnect-compatible wallet).

• Your public wallet address is read to identify you and fetch your on-chain domains.
• We never access, store, or transmit your private keys or seed phrase.
• All transactions are signed exclusively in your wallet — we have no control over your funds.
• Your wallet address is permanently associated with any domain NFT you mint.

3. On-Chain Data (Public & Permanent)

Every action that writes to the Robinhood Chain smart contract creates a public, immutable record. This is the nature of blockchain technology and cannot be reversed. Data stored on-chain includes:

• Your chosen domain name (e.g. "alex") and the full domain (e.g. "alex.rob")
• Your wallet address as the NFT owner
• Profile picture URL, cover image URL, bio, and background selection
• Social media links and custom links you add to your profile
• Marketplace activity: listing prices, offer amounts, sale records, and transfer history
• NFT token ID and IPFS metadata URI

Once confirmed on-chain, we are technically unable to delete or modify this data. You are responsible for what you choose to publish on the blockchain.

4. Decentralized Storage (IPFS)

When you update your NFT metadata, profile images and structured metadata (name, bio, links) are uploaded to the InterPlanetary File System (IPFS) via Pinata. This means:

• Your profile data is stored on a decentralized network and accessible to anyone with the IPFS hash.
• The IPFS hash (CID) is stored in the NFT's on-chain token URI, making your metadata publicly discoverable by OpenSea and other NFT platforms.
• We use platform-managed Pinata credentials to upload your metadata. These credentials are not shared with you and are used solely to facilitate uploads.
• Unpinning an IPFS file removes it from our Pinata account but does not guarantee removal from the wider IPFS network, as other nodes may have cached it.

5. Domain Ownership & NFT Minting

Each .rob domain is an ERC-721 non-fungible token (NFT) minted on Robinhood Chain. Ownership is determined entirely by blockchain state:

• A single wallet can own an unlimited number of .rob domain NFTs.
• Minting requires a fee of 0.0005 ETH, paid directly to the smart contract treasury.
• Domain names are permanently locked after minting — the name itself cannot be changed.
• Ownership transfers when you sell, transfer, or accept an offer on the marketplace.
• If you lose access to your wallet, we cannot recover your domain NFT.

6. Marketplace Transactions

The ROB Marketplace is a non-custodial, on-chain marketplace. When you buy, sell, or make offers:

• All transaction data (token IDs, prices, buyer/seller addresses) is public on-chain.
• Offer amounts are held in the marketplace smart contract until accepted, rejected, or withdrawn by the buyer.
• A 2% platform fee is deducted from each completed sale and sent to the platform fee recipient address.
• We do not hold custody of any user funds at any time.

7. Primary Domain & Reverse Resolver

The Primary Domain feature allows you to designate one of your .rob domains as your primary on-chain identity. This designation is managed by the RobResolver smart contract. Key facts:

• Setting a Primary Domain writes a mapping from your wallet address to a token ID on-chain — this is public and permanent.
• Reverse resolution reads your current Primary Domain at query time; if you have transferred the domain since setting it, the resolver returns an empty result (no stale data is served).
• Clearing your Primary Domain removes the on-chain mapping, but historical transaction records of the previous setting remain on the blockchain forever.
• Any application that calls our Reverse Resolution API (/api/reverse/:wallet) will receive your Primary Domain name in the response if one is set.

8. API Usage & Endpoints

ROB Domains exposes two categories of HTTP API endpoints. Your use of these endpoints is subject to this policy:

• Read-only endpoints (e.g. /api/resolve/:domain, /api/profile/:domain) query the blockchain and return public on-chain data. No authentication is required. Responses may be cached for performance.
• Transaction generation endpoints (e.g. /agent/tx/mint, /agent/tx/set-primary) generate unsigned transaction payloads. These endpoints do not execute any transaction or access your wallet — they return data for your wallet to sign independently.
• Standard server access logs (IP address, timestamp, user agent, path) may be recorded for operational purposes. These logs are not linked to your wallet address.
• No API key or authentication token is required for any current endpoint. We do not store or associate your IP address with your on-chain identity.

9. AI Agent & OpenAPI Integration

ROB Domains publishes a production OpenAPI 3.1 specification at /agent/docs/openapi.yaml and an AI plugin manifest at /.well-known/ai-plugin.json. These enable AI agents, custom GPT integrations, and third-party developer tools to interact with ROB Domains programmatically:

• AI agents that call our APIs receive only the same public on-chain data available to any other caller.
• Transaction generation endpoints return unsigned payloads. Signing and broadcasting a transaction always requires explicit wallet confirmation by the user — AI agents cannot execute on-chain actions without your approval.
• We do not log or store the identity of AI agents or systems calling our API endpoints, beyond standard server access logs.
• If you use a third-party AI tool that integrates with ROB Domains via our OpenAPI spec, that tool's own privacy policy governs any data it collects about your interactions.

10. On-Chain Chat & Encrypted Messaging

ROB Domains includes an On-Chain Chat feature that lets visitors send messages to .rob domain owners directly through the blockchain. Understanding how this works is important for your privacy:

• Messages are end-to-end encrypted client-side using AES-GCM-256 before being submitted to the chain. The shared encryption key is derived deterministically from both participants' wallet addresses using HKDF — only the two parties involved can decrypt the content.
• Encrypted content is stored on-chain permanently. Once a message transaction is confirmed on Robinhood Chain, the encrypted ciphertext is an immutable, public blockchain record. We cannot delete it, and neither can you.
• Sender wallet address is publicly visible. Even though message content is encrypted, the sender's wallet address, recipient token ID, and message timestamp are visible on-chain to anyone.
• We do not read, store, or process your messages. Decryption happens entirely in your browser. Our servers are not involved in message delivery or storage.
• Block/unblock status and read timestamps are also stored on-chain and are publicly visible via the smart contract.
• You are solely responsible for the content of messages you send. Do not include private information such as passwords, private keys, or sensitive personal data in chat messages.

Because messages are encrypted on-chain, historical ciphertext will persist even if you stop using the platform. However, without the wallet-derived key, the content is inaccessible to anyone other than the original participants.

11. Off-Chain Data We Collect

Our application frontend may collect standard technical data, including:

• Browser type and version, operating system, and device information (via server logs)
• Pages visited, time spent, and navigation patterns (anonymous analytics, if any)
• IP address (standard web server log — not linked to your wallet address)

We do not use tracking cookies, behavioral advertising, or sell any data to third parties. Local storage on your browser may be used to store UI preferences — this data never leaves your device.

12. Third-Party Services

• Pinata — IPFS pinning service for NFT metadata storage. Subject to Pinata's own privacy policy.
• Robinhood Chain — The underlying blockchain. All on-chain data is public and governed by the chain's infrastructure.
• RainbowKit / WalletConnect — Wallet connection infrastructure. Subject to their respective privacy policies.
• OpenAI / AI Platforms — If you use an AI assistant integrated via our OpenAPI spec, that platform's privacy policy applies to your interaction with the AI. ROB Domains is not a party to that relationship.

13. Your Rights & Limitations

Due to the nature of blockchain technology:

• On-chain data cannot be erased or modified by us or by you after it is confirmed.
• You may update your profile metadata (bio, links, images) at any time, but previous versions may remain accessible via old IPFS hashes.
• You can transfer or sell your domain NFT at any time, which changes on-chain ownership records.
• You may clear your Primary Domain at any time; the on-chain mapping is removed, but historical records remain.
• For any off-chain data requests, contact us through the official community channels.

14. Children's Privacy

ROB Domains is not directed at individuals under the age of 18. We do not knowingly collect information from children. If you are under 18, do not use this platform.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of the platform after changes constitutes your acceptance of the revised policy.

16. Contact

If you have questions about this Privacy Policy or how we handle data, please reach out through the official ROB Domains community channels.