What we collect, why we collect it, how long we keep it, and how to have it removed.
Last updated 6 September 20261K Gallery is a small art project, not a data business. We do not sell, rent or trade your information, and we do not build advertising profiles. Everything below describes what the site actually does — not what a generic policy template says it might do.
You can browse the entire gallery without giving us anything at all. We only receive personal information when you choose to type it in: registering as an art dealer, writing in the chat room, or signing the guest book.
This site is operated by 1K Gallery, an independent art project, at 1kgallery.com. For anything in this policy — a question, a correction, or a request to delete your data — write to privacy@1kgallery.com.
If you register, we store your wallet address and your email address. The email exists for one purpose: to tell you when a drop is coming. We use double confirmation, which means nothing is saved until you click the link we send you — so nobody can register your address on your behalf. One wallet is tied to one email.
We will not send you anything other than gallery announcements, and every message includes a way out.
The chat room stores the name you choose, the text of your messages, and the time they were sent. The name is whatever you type — it does not have to be your real one, and we would rather it were not.
Each message disappears from the room 24 hours after it was written, but the conversation is not gone. We keep a private copy for 90 days so we can read what visitors are saying about the project. Please treat the chat as a public room being recorded, and do not type anything there that you would not want read later.
The guest book stores the name you sign with, the country you pick, your rating and your message. All of it is published on the page for anyone to read — that is the entire point of a guest book — so please write it with that in mind.
Like every website, our server receives your IP address and your browser's identification with each request. We also use Google Analytics to count visits. There is a separate section on each of these below.
When you post a message or register, we do not store your IP address. We store a salted SHA-256 hash of it — a one-way fingerprint that cannot be turned back into the original address. We use it for one thing only: stopping the same source from flooding the chat or the guest book, and enforcing a ban when someone abuses the room.
We want to be accurate rather than flattering here: a hashed IP is still considered personal data under European and Brazilian law. It is pseudonymised, not anonymous. It is a real improvement over storing the address itself, but it is not the same as collecting nothing, and we are not going to claim otherwise.
We use Google Analytics to see how many people visit, which pages they read, which of the twelve languages they choose, and which links they follow out to OpenSea and our social accounts. It tells us whether the work is reaching anyone. It does not tell us who you are.
Analytics sets cookies in your browser and sends your IP address to Google, which processes it as a data processor on our behalf. We have not enabled advertising features, remarketing, or Google Signals. If you would rather not be counted, Google publishes a browser add-on that opts you out of Analytics everywhere: tools.google.com/dlpage/gaoptout. Your browser's "do not track" or private mode will also limit it.
We do not use advertising or tracking cookies of our own. What the site does use:
| What | How long |
|---|---|
| Art dealer registration | Until you ask us to remove it |
| Unconfirmed registration | 48 hours, then deleted automatically |
| Chat messages in the room | 24 hours from the moment you write them |
| Private chat archive | 90 days, then deleted automatically |
| Guest book entries | Until you ask us to remove them |
| Google Analytics data | Held by Google under their own retention settings |
Three companies, each doing a specific job, and none of them buying anything from us:
We would hand over data if a court ordered us to. We have never been asked.
This is worth saying plainly, because it is easy to miss. A wallet address is public by design: anyone can look up its full transaction history on the blockchain, and that has nothing to do with us. If you buy an NFT, that purchase is permanently visible to the world. We cannot delete it, and neither can OpenSea, and neither can you. Consider which wallet you use accordingly.
Wherever you live, you can ask us to show you what we hold about you, correct it, or delete it. If you are in Brazil the LGPD gives you these rights; in Europe, the GDPR does. We apply them to everyone regardless, because keeping two standards would be more work than doing the right thing once.
Write to privacy@1kgallery.com and we will answer within 30 days, usually much sooner. To delete an art dealer registration, tell us the wallet address. To delete a guest book entry or a chat message, tell us roughly when you posted it and what it said.
One honest limit: because we deliberately do not keep your IP address in readable form, we cannot always prove that an anonymous chat message was yours. For anything posted under a made-up name, we will do our best with what you can tell us.
This site is not intended for children under 13, and we do not knowingly collect anything from them. If you believe a child has sent us information, write to us and we will remove it.
If we change how the site handles data, we will change this page and move the date at the top. There is no version buried in a changelog somewhere — what is on this page is what the site does today.