Privacy policy

What CiteMint stores

CiteMint stores registered creator names, public article URLs, public wallet addresses, research questions, generated answers, single-use authorization messages, and Arc Testnet transaction metadata in PostgreSQL. Private keys and wallet seed phrases are never requested.

Secrets

API credentials belong only in server-side environment variables. CiteMint does not intentionally display them in the browser. Never submit private keys, seed phrases, or real payment credentials through creator or question forms.

Article ingestion

When a public URL is registered, CiteMint may fetch its public title, description, and article text to create a searchable source. Private-network and localhost addresses are blocked.

Third-party services

Arc RPC providers process blockchain reads and transaction broadcasts. If OpenAI is enabled, paid source context and the research question are processed under OpenAI's terms. Wallet signatures are verified by the CiteMint server.

Contact and deletion

This is a demonstration project. A production deployment should provide a publisher contact address and a documented process for source removal and data deletion.