Privacy and cookie policy
Last updated: 16/10/2026
OBJECTIFY Privacy Policy
1. Introduction
Welcome to the OBJECTIFY Privacy Policy.
OBJECTIFY (or "We") processes the personal data ("Data") of users ("You", "the User") when they visit the OBJECTIFY Platform accessible here: https://objectify.io (the "Platform"), interact with our services, or make inquiries. In this context, OBJECTIFY acts as a data controller. Information regarding OBJECTIFY is available in the Legal Notice.
It should be noted that, for the processing of personal data included in the NFT metadata, OBJECTIFY acts as a data processor on behalf of the relevant Seller. If you have any questions regarding this processing, you should contact the Seller directly. Similarly, the Seller is the data controller for any statistical data processing carried out on NFT Holders.
The protection of your Data is important to Us, and we are committed to complying with all French and European regulations regarding personal data protection and privacy, in particular the General Data Protection Regulation (EU) 2016/679 of 27 April 2016 ("GDPR") and French Law No. 78-17 of 6 January 1978 as amended (the "Data Protection Act").
This Privacy Policy may be updated from time to time. We invite you to review it regularly.
Contact - To contact us regarding the processing of your Data carried out in our capacity as data controller, you can send an email to: contact@objectify.io.
2. Purposes of Processing
We use your Data for the following purposes:
- Allow you to access the Platform;
- Ensure the proper functioning and security of the Platform;
- Create your account and track your information and browsing activity;
- Automatically check the profile pictures you upload, so that no sexual or violent image is displayed publicly on the Platform;
- Process, track, and manage your purchases;
- Record purchases and transactions on the blockchain;
- Conduct analysis and statistics to improve our products and your experience on the Platform;
- Respond to your support and contact requests: We use the information you provide via the contact form to answer your inquiries;
- Send you information about our products and services if you subscribe to our newsletter: We use your email address to send you our newsletter, updates, and promotional offers;
- Comply with our legal and regulatory obligations, ensure the exercise of your rights, and defend our legal interests.
3. Legal Basis for Processing
We process your Data based on the following legal grounds:
- User Consent: When You subscribe to our newsletter or use our contact form, you expressly consent to the processing of your Data for that specific purpose.
- Performance of a Contract: To provide you with services related to the use of the Platform and record information regarding your crypto wallet on the blockchain, in accordance with the OBJECTIFY General Terms of Use.
- OBJECTIFY's Legitimate Interest: Processing your Data is strictly necessary: (i) to conduct analytics to improve Our service, (ii) to ensure Platform security, (iii) to respond to your support and contact requests, (iv) for commercial prospecting activities carried out with Users, and (v) to check uploaded profile pictures before they are displayed publicly.
- Compliance with Legal Obligations: We may process your Data to comply with statutory or regulatory obligations.
4. Collected and Processed Data
We process Data strictly necessary to achieve the purposes outlined in this Privacy Policy.
This includes Data provided when You: create an account and use the Platform, contact OBJECTIFY, or subscribe to our mailing lists, newsletter, or other forms of commercial communications. This covers: identification, contact, location, usage, and connection data.
When you purchase an NFT on the Platform, your banking data is processed directly by our service provider, Wert.
When you upload a profile picture, it is resized and stripped of its metadata (including location), then analysed automatically within the European Union by Google's Cloud Vision service to detect sexual or violent content. A picture detected as such is refused and is not stored. We keep the result of the analysis and a digital fingerprint of the image, from which the image cannot be reconstructed, so that the same image is never analysed twice. A refusal has no other effect on your account: you can upload another picture or choose one of the avatars provided.
You undertake to ensure that your Data is updated as necessary.
5. Data Retention Period
We retain your Data for the duration of our contractual relationship. In the event of the deletion of your OBJECTIFY account, your Data is retained for the period strictly necessary to fulfill the purposes set out in this Privacy Policy or as required by law.
If You subscribed to our newsletter and wish to unsubscribe, your email address will be retained for this purpose until You effectively unsubscribe.
6. Rights of Data Subjects
In accordance with applicable regulations, notably Articles 15 to 22 of the GDPR, you have the following rights regarding the processing of your Data, within statutory limits:
- Right of access: obtain information about your Data and receive a copy of your Data;
- Right to information: obtain details about the conditions of processing (recipients, purposes, categories of data, etc.);
- Right to rectification: correct or update your Data when it is inaccurate or incomplete;
- Right to object: object to processing based on grounds relating to your particular situation, or withdraw your consent for processing based on that legal ground;
- Right to restriction of processing: request that all or part of your Data be temporarily restricted from processing, without deleting it;
- Right to erasure (right to be forgotten): request the deletion of your Data;
- Right to data portability: obtain your Data in a structured, commonly used, and machine-readable format and transmit it to a third party;
- Right to define specific instructions regarding the processing of your Data post-mortem.
- Right to register on the French do-not-call list Bloctel at www.bloctel.gouv.fr.
You may exercise your rights via the contact address (above) for Data processing where OBJECTIFY acts as data controller. In case of doubt regarding your identity, proof of identity may be requested.
Any request deemed abusive or unfounded under applicable laws and regulations may be rejected.
We undertake to respond to your requests to exercise your rights as quickly as possible and, in any event, within legal time limits.
If, after contacting us, you feel that we have not adequately responded to your request, you may lodge a complaint with the French Data Protection Authority (CNIL).
7. Recipients of Your Data
In the context of processing your Data, OBJECTIFY relies on the following services:
| Subprocessor | Purpose | Data Concerned | Location | Transfer Outside EU | Resources | Scope |
|---|---|---|---|---|---|---|
| Google Cloud Platform (Google Ireland Ltd / Google LLC) | Hosting of the Platform and its data; automatic check of uploaded profile pictures (Cloud Vision). | User accounts (wallet address, username, avatar, email derived from orders), ownership titles, orders, technical logs (IP address, browser). | Belgium (EU); European Union for Cloud Vision | Data stored within the EU. Google Cloud Data Processing Addendum (Standard Contractual Clauses included; Google LLC is Data Privacy Framework certified). | https://cloud.google.com/privacy DPA: https://cloud.google.com/terms/data-processing-addendum | Marketplace, Admin Dashboard, Shopify App |
| Inferno Research Foundation ("Burnt" - Verona network, formerly XION; Abstraxion SDK) | Creation of user accounts and sign-in to the Platform (by email, Google, Apple, passkey or wallet); access to the Verona blockchain. | Login identifier (email or social account, processed by Burnt only), wallet address. | Not specified in their privacy policy (contact: privacy@burnt.com) | Country of establishment and guarantees to be obtained from Burnt. | https://burnt.com/privacy-policy https://docs.verona.dev | Marketplace |
| Wert (SHA2 Solutions OÜ, Estonia, registration 14952299 / SHA2 Solutions Inc., USA) | Card payments for purchasing ownership titles (NFTs) on the marketplace, and crypto-to-fiat conversion (off-ramping). Identity verification (KYC) conducted by Wert. | Identity and KYC documents, card details (never transmitted to OBJECTIFY), wallet address, order amount and reference. | Estonia (EU) / United States | No transfer if contract is concluded with the Estonian entity; Standard Contractual Clauses required if contracted with the US entity. | https://wert.io/ | Marketplace |
| Shopify (Shopify International Ltd, Ireland / Shopify Inc., Canada) | E-commerce platform for partner brands. The OBJECTIFY app installed on the store receives orders and refunds; product images displayed on the marketplace are served via Shopify's CDN. For orders, Shopify and the merchant act as data controllers; OBJECTIFY acts as a data processor on behalf of the merchant. | Order data (name, email, shipping address, items, amount), store identifier. | Ireland (EU) / Canada | European contracting entity (Ireland); Canada benefits from an adequacy decision by the European Commission. | https://www.shopify.com/legal/privacy DPA: https://www.shopify.com/legal/dpa | Marketplace, Shopify App |
| Mailjet (Sinch AB, Sweden - Mailjet SAS, Paris) | Transactional emails related to purchases. | Email address, name, order details. | France / Sweden (EU) | None (provider established within the EU). | https://www.mailjet.com/legal/privacy-policy/ | Marketplace, Shopify App |
| Sentry (Functional Software, Inc., USA - data hosted in the EU, Frankfurt) | Detection of technical errors and monitoring of the Platform's performance. | Technical information about the error (page, browser). IP addresses are not sent. | Germany (EU) | Data stored in the EU; Sentry DPA with standard contractual clauses (Sentry is Data Privacy Framework certified). | https://sentry.io/privacy/ DPA: https://sentry.io/legal/dpa/ | Marketplace, Admin Dashboard, Shopify App |
| Plausible Analytics (Plausible Insights OÜ, Estonia) | Cookieless audience measurement of the Platform: pages viewed, where visits come from, aggregate statistics. | Page address, referring site, browser, operating system, device type and country. The IP address is only used to derive the country and to count the day's unique visitors in a non-reversible form; it is not stored. | Germany (EU) | None (provider established in the EU, data hosted in the EU). | https://plausible.io/privacy https://plausible.io/data-policy DPA: https://plausible.io/dpa | Marketplace |
Your delivery data will be transmitted to the Seller upon redemption/destruction of the NFT so they can fulfill the tokenization contract.
Finally, your user account profile may be publicly visible.
Note: Your Data may be disclosed to third parties legally authorized to access it upon specific request, in certain cases provided for by law: judicial authorities, administrative authorities, etc. Your Data may also be communicated to third parties if necessary to protect and/or defend our rights or enforce these provisions.
Cookie Policy
OBJECTIFY (or "We") places cookies on the terminal equipment (computer, smartphone, tablet) of the user ("you" or "the User") upon connecting to the OBJECTIFY platform: https://objectify.io (hereinafter the "Platform").
1. What is a Cookie?
Cookies are small data files that may be stored on the User's terminal equipment when connecting to the Platform. The terminal retains cookies for a certain period and sends them back to the web server each time the User connects to the Site again, for example, to allow the Platform to remember the User's preferred language.
There are different types of cookies:
- session cookies, which are deleted as soon as the User leaves the visited website;
- permanent or persistent cookies, which remain on the User's terminal until their expiration or until deleted by the User;
- first-party cookies, set by the website the User is currently browsing;
- third-party cookies, set by a domain other than that of the website the User is currently browsing.
Certain cookies are "technical" cookies, placed exclusively to facilitate electronic communication or strictly necessary for providing an online service. They are automatically stored on the User's terminal when browsing the Platform. The User cannot disable them.
2. Why Do We Use Cookies?
Where applicable with the User's consent, OBJECTIFY places cookies on their terminal for the following purposes:
- to enable User navigation on the Platform;
- to enable User authentication.
3. What Cookies Do We Use?
Data collected from cookies is processed in accordance with applicable legal provisions and the OBJECTIFY Privacy Policy.
Principle: The platform places only strictly necessary cookies (authentication, language preferences). No advertising, audience measurement, or social network cookies are used: the marketplace's audience measurement (Plausible Analytics) works without cookies or browser storage. No prior consent, and therefore no cookie banner, is required under Article 82 of the French Data Protection Act.
Marketplace (objectify.io)
Cookies set by OBJECTIFY on its own domain.
| Type | Name | Purpose | Retention Period | Issuer |
|---|---|---|---|---|
| Session cookie (authentication) | objectify_session | Keeps the User signed in. | 7 days | OBJECTIFY |
| Session cookie (authentication) | objectify_refresh | Extends the session without a new sign-in. | 30 days | OBJECTIFY |
| Technical cookie | NEXT_LOCALE | Remembers the chosen language. Collects no personal data. | Session (deleted when closing browser) | OBJECTIFY |
Shopify App for Brands (integrated into the merchant's Shopify admin dashboard)
The application is displayed within the Shopify administration interface, which places its own cookies on its own domains (admin.shopify.com): these fall under Shopify's cookie policy (https://www.shopify.com/legal/cookies).
| Type | Name | Purpose | Retention Period | Issuer |
|---|---|---|---|---|
| Technical cookie | shopify_app_state | Secures the installation of the application. | 1 minute | Shopify (SDK) |
| Session cookie | shopify_app_session | Keeps the session during the installation of the application. | Merchant session | Shopify (SDK) |
Browser Local Storage (non-cookie) - Marketplace
This data is stored in the User's browser, is never automatically sent to a server, and serves solely for application functionality. Regulations (Article 82) assimilate them to cookies: they are exempt from consent as strictly necessary.
| Key | Purpose | Retention Period | Issuer |
|---|---|---|---|
| auth-store | Remembers the sign-in state for displaying the interface. Contains no personal data. | Until logout or deletion | OBJECTIFY |
| pending-claim | Attaches a purchased title to the User's account after sign-in. | Until claim processing | OBJECTIFY |
| pending-settlements | Completes a purchase whose confirmation was interrupted. | Until full settlement | OBJECTIFY |
| xion-authz-granter-account, xion-authz-temp-account | Keeps the User signed in to their account. | Until logout | Burnt (Abstraxion SDK) |
Third-Party Cookies Placed During External User Journeys - Marketplace
These services open a window or frame on their own domain; cookies set by them are governed by their own policies and OBJECTIFY has no access to them. They are not set on OBJECTIFY's site and require no banner on our end.
| Service | When | Domain | Privacy Policy |
|---|---|---|---|
| Burnt (Inferno Research Foundation) - account sign-in | During sign-in / account creation (pop-up window) | burnt.com | https://burnt.com/privacy-policy |
| Wert - Card Payment | When paying for a title via credit/debit card (interactive module) | wert.io | https://wert.io/ |
4. How Can the User Manage Cookie Settings?
The cookies placed on your terminal when browsing the Platform are exclusively necessary cookies for analyzing your navigation or improving services that do not require your consent. You cannot disable them.
For more information on cookies, you can visit the CNIL website: https://www.cnil.fr/fr/site-web-cookies-et-autres-traceurs.