Privacy Policy

This Privacy Policy explains how The Nifty Company, which operates Rekt Writeoff ("we," "us," "our"), collects, uses, and shares information when you use rektwriteoff.com and our related services (the "Service"). By using the Service, you agree to this Policy.

The short version

We are a read-only tax-analysis tool. We never take custody of your crypto or NFTs, never ask for your private keys or seed phrase, and never initiate transactions. We look only at public, on-chain data for wallet addresses you give us. We do not sell your personal information.

Information we collect

• Account info: your email address, used to sign you in (passwordless magic links) and deliver your reports.
• Wallet addresses you enter: public blockchain addresses / account names you choose to scan. These are public data; we use them only to query on-chain activity for your reports.
• Payment info: processed by Stripe. We never see or store your full card number. We receive confirmation that a payment succeeded plus limited billing metadata.
• Usage & device data: basic logs (IP, timestamps, pages/actions) and a session cookie to keep you signed in.

How we use it

• To provide the scan, generate reports, and let you sign in.
• To process purchases and deliver what you paid for.
• To secure the Service, prevent abuse, and fix problems.
• To respond to support requests you send us.

Third-party services

To operate, we share limited data with providers who process it on our behalf: Stripe (payments), Resend(transactional email), Render (hosting), and blockchain & market-data providers such as Alchemy, Moralis, Helius, CoinGecko, AtomicAssets/AtomicMarket, TzKT, and objkt (we send the public wallet addresses you scan to retrieve on-chain data and prices). These providers have their own privacy terms.

Cookies

We use a single, essential session cookie to keep you signed in. We do not use advertising cookies or sell data to advertisers.

Data retention & your choices

We keep your account, wallets, and reports so you can return to them. You can request that we delete your account and associated data at any time via our contact form. Depending on where you live, you may have rights to access, correct, delete, or port your personal information (e.g., under GDPR or CCPA/CPRA). We honor verified requests.

Security

We use industry-standard measures to protect your data, including encrypted connections and scoped access so one account cannot see another's data. No system is perfectly secure, but because we never hold your keys or funds, a breach cannot move your assets.

Children

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

Changes

We may update this Policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, additional notice.