Privacy Policy

OnlySigned collects only what is necessary to provide the platform's functionality on the Internet Computer blockchain: • Blockchain identity (Internet Identity principal) — required for authentication • User profile information you voluntarily provide: display name, bio, profile photo URL, personal URL, email address, birthdate, and profile type • Digital assets, signed copies, and collections you upload or create • Transaction records for marketplace activity (publicly recorded on-chain) • Contact relationships, follow connections, and messaging content (encrypted and private) • Support form submissions you choose to send We do not collect browsing history, device fingerprints, location data, or any analytics beyond what is required for the platform to function.

Under GDPR, CCPA, and applicable international privacy law, you have the right to: • Access all personal data we hold about you • Correct inaccurate profile information at any time through your profile settings • Delete your account and associated off-chain data • Export your data in a portable format upon request • Object to processing of your personal data • Withdraw consent for any optional data processing To exercise any of these rights, contact us at support@onlysigned.com. We will respond within 30 days. Note: Blockchain transaction records (on-chain NFT ownership, signed certificates) are immutable by design and cannot be deleted. This is fundamental to the authenticity guarantees the platform provides.

All private data is encrypted using industry-standard methods: • Private assets, signed copies, and collections marked as private are encrypted at rest • Encryption keys are derived from your Internet Identity — only you can decrypt your private content • Admin users have NO access to your private assets, messages, or encrypted content • Private chat messages are encrypted end-to-end and accessible only to conversation participants • All data transmission uses HTTPS/TLS The Internet Computer protocol provides cryptographic guarantees at the infrastructure level, meaning your data is protected by the underlying blockchain architecture itself.

You control the visibility of all your content: • All assets, signed copies, and collections default to private upon creation • You can toggle any item public or private at any time from your profile or detail pages • Private items are visible only to you — never shown on public profiles or in searches • Public items appear on your public profile and may be indexed in the User Explorer • You can share private assets with specific trusted contacts only • Contact relationships are mutual and require both parties to accept These privacy settings are technically enforced, not just policy-enforced.

OnlySigned has a strict zero-advertising policy. We do not display any advertisements on the platform. We never have and never will. Our revenue is generated exclusively through: • Transaction fees on marketplace sales (a small percentage of each completed sale) • Voluntary donations from users who want to support the platform We do not sell, rent, license, or share user data with any third parties for commercial purposes. We do not use your data to build advertising profiles or engage in behavioral targeting. Your data is not a product. All revenue is used exclusively for platform development, infrastructure costs, and operational maintenance.

All transactions on OnlySigned are conducted in cryptocurrencies on the Internet Computer blockchain (ICP, ckBTC, ckUSDC, ckUSDT). IMPORTANT — PLEASE READ CAREFULLY: • You are solely responsible for your own funds, wallets, and private keys • OnlySigned cannot reverse, recover, or refund blockchain transactions under any circumstances • If you lose access to your Internet Identity, your funds and assets may be permanently inaccessible • The ONLY exception: admin can assist in recovering Username NFTs for users who can prove identity through alternative means — but no other asset recovery is possible • OnlySigned is not responsible for losses due to user error, lost keys, compromised devices, or network issues • Cryptocurrency values are volatile — only invest what you can afford to lose • You are responsible for complying with the tax and regulatory laws of your jurisdiction By using OnlySigned, you acknowledge and accept full responsibility for all cryptocurrency transactions you perform on the platform.

For privacy-related requests, data protection inquiries, or general support: Email: support@onlysigned.com Platform: Use the Support form at onlysigned.com/support We are committed to responding to all privacy-related inquiries within 30 days. For urgent matters, please include "URGENT" in your subject line. This Privacy Policy was last updated on April 7, 2026. We will notify users of material changes by updating this page and, where appropriate, sending a notification through the platform.