NORMIES CREDHUB

Privacy

CredHub is a read-only community tool. This page is the whole privacy note — short on purpose.

Wallet

  • Connecting a wallet is optional. It is used to find the Normies that wallet controls.
  • The only signature we ever ask for is a gas-free signMessage. No transactions, no token approvals, no custody. We never ask for keys or seed phrases.
  • We never look up a wallet from a username or link wallets to people.

What we keep, and for how long

  • Usage counters (Upstash Redis): when Pulse or Moves is called we keep the token id, the time, a short intent text for Moves (up to 200 characters), the caller's wallet if one was sent, and a keyed one-way hash of the IP address (never the IP itself; it can't be turned back into the IP without our server secret). Day counters expire after 16 days; the event list keeps the latest 10,000 entries. Wallets are never shown in reports.
  • Rate limits and security log (Upstash Redis): IP addresses are used briefly to rate limit requests. When a limit is hit, or a security report is sent, the IP, any wallet sent and any contact you give are kept in a tamper-evident security log.
  • Ratings (Supabase): a 👍 or 👎 on a Move is stored with the Move, your intent, and your wallet if you connected one (unverified, never shown publicly). Only our server can read it. Deleted after 180 days.
  • Zulo's answers (Supabase): we may keep an answer (not your question, wallet or name) and the Normie it was about, to check later whether the advice held up. Deleted after 180 days.
  • Hosting logs (Vercel): like any website, requests are logged by our host, including the page address, which can contain a wallet address you looked up. They are kept for the host's standard log period.
  • Your browser: wagmi remembers your wallet connection, and we remember the last Normie you picked (local storage) and cache delegate lookups for 10 minutes (session storage). No tracking cookies, no ads, no analytics.

Who else sees data

  • Ask Zulo: your question, your connected wallet address or ENS name, and public on-chain data about the Normies involved go to an AI model provider (Venice, with xAI as a backup) to write the answer.
  • Looking up a wallet sends that address to the services that answer it: the Normies API, Ethos, AgentCheck, OpenSea (offers, on Pixel Check) and a public Ethereum RPC. Market data (floor prices, listings) comes from OpenSea and the Normies rarity site without any wallet.
  • Burn helper may send the Normies and goal you picked (no wallet) to TypeSafe for a second opinion.
  • Wallet connect uses RainbowKit and WalletConnect (Reown), which see that you connected.
  • Infrastructure: Vercel (hosting), Supabase (database), Upstash (rate limits, counters). We don't sell data.

Contact

shisler671.eth / @zulo7141

Last updated 2026-10-19

Read-only. We never ask for a transaction, an approval or a transfer. At most one free message to prove you own a wallet.

Independent community tool, not made or endorsed by the Normies team.

shisler671.eth · @zulo7141 · Privacy · Terms