Last updated
The short version
- A wallet sign-in and two cookies apply only if you join a Quest Board campaign. No names or emails, no analytics, ads or trackers.
- If you join a campaign, the website keeps your wallet address, your X handle and the steps you finished until the campaign’s data is deleted. The public board shows your handle and a shortened address, the collection owner gets the full address for rewards, and you can leave and delete your entry at any time.
- Your wallet address, holdings and transactions are public on Elysium for good, and nobody can delete them.
- Your browser keeps a few small settings for this site, such as which wallet you connected and a friend code from a link you opened, and you can clear them at any time.
- To show live data, your browser talks to an Elysium RPC service, which sees your IP address and, once you connect, your wallet address.
- The company that hosts this website keeps standard request logs.
This summary helps you find your way. The full notice below gives the details.
Contents
Who we are
This notice explains what this website handles when you visit it, and what is public by nature on Elysium. “We”, “us” and “the Aether team” mean the anonymous creator of Aether, who runs this website. The Terms of Use cover everything else.
What we do not collect
The website is built to need as little as possible about you. It has:
- no accounts, except a wallet sign-in if you join a campaign, and it never asks for your name, email address, phone number or any other contact details;
- no analytics, advertising, tag managers, tracking pixels, heatmaps or error-reporting services;
- no cookies for visitors, except the sign-in cookies in section 7 if you join a campaign;
- no message signatures from visitors, except the free campaign sign-in, which moves nothing and approves nothing;
- no fingerprinting or other tracking of your device;
- no fonts, scripts or images loaded from other companies’ servers when you visit;
- no database or logs about visitors, except the campaign records described in section 6;
- no access to your location, camera or microphone: the website tells your browser to block them, and the Topics API too.
What is public by nature
Elysium is a public blockchain. Whatever you do with Aether there is recorded for everyone to see: your wallet address, the Aether you hold, every summon (with its care) and transfer, any trade a marketplace settles there with its price, and any name you give an Aether.
This record is public and permanent. Nobody, including us, can change or delete it, and a name you clear stays visible in the chain’s history.
Anyone can read it, including this website, block explorers and other marketplaces. The Live Feed on this website, for example, shows shortened wallet addresses of other holders. If someone links your wallet address to you, for example because you shared it, they can see this whole history. For more privacy, you can use a separate wallet for Aether.
What your browser stores
The website keeps a few small entries in your browser’s local storage for this site. They stay on your device. A friend code you type is sent to the server, to check it and to join with it, and is not kept in your browser.
aether.
store - What it holds
- Which wallet and accounts you connected, and on which network. The website writes this entry on every visit; until you connect a wallet, it holds no address.
- Why
- To reconnect your wallet when you come back.
- How to clear it
- Disconnecting in the account menu empties it, and clearing this site’s data removes it.
aether.
recentConnectorId - What it holds
- The name of the wallet you used last, such as io.metamask.
- Why
- To try that wallet first when the website reconnects.
- How to clear it
- Clear this site’s data. Disconnecting leaves it in place.
aether.
io. metamask. disconnected - What it holds
- The value true. The middle part names the wallet, so each wallet gets its own entry, such as aether.injected.disconnected.
- Why
- Set when you disconnect a browser wallet, so that the website does not quietly reconnect it.
- How to clear it
- Removed when you connect that wallet again, or when you clear this site’s data.
aether.
injected. connected - What it holds
- The value true.
- Why
- Marks a connection through a wallet that does not announce itself by name, as in some wallet apps’ built-in browsers.
- How to clear it
- Removed when you disconnect, or when you clear this site’s data.
aether-sfx-muted
- What it holds
- 1 when the sound is off, 0 when it is on. It is written only when you press the sound button.
- Why
- Remembers the sound switch of the mint ritual and the reveal. Muting also stops the short vibrations on phones.
- How to clear it
- Press the sound button again to change it, or clear this site’s data.
aether.
quests - What it holds
- Which wallet is signed in to the Quest Board and, for each wallet you signed in with here, its progress as the server last sent it (steps done, points, X handle, friend code and friends), and which quest links you opened.
- Why
- So a reload shows your progress at once.
- How to clear it
- Clear this site’s data.
Older versions of the website kept the wallet entries above in cookies with the same names. If your browser still has any, the website moves them into local storage and deletes the cookies on your next visit.
Nothing else is stored: no session storage, IndexedDB, cache storage or service worker. To remove everything at once, clear this site’s data in your browser settings, often listed as cookies and site data.
Who sees your requests
Like any website, this one works by sending requests over the internet, and whoever receives a request sees your IP address and basic details of your browser. These are all the places the website sends requests, and why.
The host of this website
Every page you open is served by the company that hosts this website. Like any web host, it receives your IP address, your browser’s user agent and the address you open, which can include a token number, such as /collection?token=12. The host keeps standard request logs under its own policies. The website’s code does not configure, read or export those logs.
The Elysium RPC
While a page is open, your browser reads the chain directly from a public Elysium RPC service (for this copy of the website, testnet-rpc.elysium.kinetiq.xyz), continuously, to keep prices, balances and the Live Feed current. The RPC provider sees your IP address, your browser’s user agent and this website’s address, but not the page you are on.
Before you connect a wallet, these requests carry nothing that identifies you. After you connect, some of them include your wallet address: to read your HYPE balance and how many vessels you can still summon, and to check each transaction before your wallet opens it. After a transaction, the website asks for its receipt by its hash.
The website’s relay
If a read through the public RPC fails, your browser sends the same read to this website’s relay at /api/rpc, which passes it on to an RPC provider chosen by the Aether team. The relay accepts only reads, at most 20 calls at a time, and refuses requests from other websites.
It passes on the calls alone, without your IP address, cookies or other headers, so that provider sees the website’s server instead of you; the calls themselves may include your wallet address. The relay uses your IP address only to limit how many calls it answers, at most 1,500 a minute. It keeps that count in the server’s memory, where it disappears when the server restarts or clears its list, and the website’s code never writes your requests or your IP address to a disk, a database or a log. The host still sees each request, as described above.
Your wallet
When you connect, switch networks, sign in to a campaign or start a transaction, the website talks to your wallet: the browser extension or app you chose. Your wallet sees this website’s address, the network details the website suggests (including the RPC address it saves for Elysium), the sign-in message and every transaction you are asked to approve, and it sends your transactions through its own RPC. Apart from the Control Room, which only the collection owner uses, the website asks your wallet to sign one message only, the campaign sign-in, and it uses no wallet relay service such as WalletConnect. Your wallet’s own terms and privacy policy apply to it.
Links to other websites
Links to X, OpenSea, the block explorer, the faucet, the bridge and wallet download pages open in a new tab, and the website does not tell those sites which page you came from. This website sends OpenSea nothing: trading there happens on OpenSea’s own site, under its own terms and privacy policy. On a phone without a wallet browser, a wallet button opens the wallet app through the wallet’s own link service and passes along the address of the page you are on, so that the app can open it. Once you are on another website, its own privacy policy applies.
Fonts
The website’s fonts are served by the website itself. They were fetched once, when the website was built, so no font service learns about your visit.
Quest Board campaigns
If you join a Quest Board campaign, your browser sends your wallet address, your sign-in signature, the steps you claim and the link to your reply to the website’s own server, which keeps the records below in a database service that the Aether team uses for this website. Looking at the Quest Board records nothing about you, and neither does signing in: your entry starts with the first step you claim. The website never contacts X. Your steps happen on X itself, under X’s own terms and privacy policy.
What is kept, and why
- Your entry: your wallet address, when you joined, a friend code made for it, which steps you finished and when, whose friend code you joined with, if you did, and the reason, if the entry is removed. They run the campaign: the steps, the points, the board and the rewards.
- Your reply: the X handle and the post number of the reply you add, read from the link you paste. The link itself is not kept.
- Used sign-in codes: so that one signature can never sign anyone in twice. They hold nothing about you.
- Control Room changes: what the collection owner changes, such as removing an entry, with the wallet involved, so that every change can be traced.
- Winners: the wallet, handle, points and friends of each winner, and the transaction that sent the reward, as proof of delivery.
- Entries that left: a one-way code made from the wallet, so that it cannot join the same campaign again. The wallet and the handle themselves are deleted.
Who sees it
Anyone can see the public board. Each entry on it shows its X handle and its wallet address shortened to the first 6 and last 4 characters, such as 0x1234…abcd, with its friends and points, and the list of winners shows them the same way. The full address never appears on a public page. The collection owner gets the full wallet address of every entry in the Control Room, with its handle, points, friends, status and the time it joined, and can copy the addresses, to check the top entries by hand on X and to send the rewards. The owner may also name the winners by their X handles in a post. A reward is a transaction on Elysium like any other, so the wallet it goes to is public there for good.
A handle next to a shortened address can let others link your X account to that wallet, and through it to the wallet’s public history on the chain (section 3). For more privacy, join with a separate wallet.
How long it is kept
- Entries, replies and Control Room changes: until the campaign’s data is deleted, within 90 days after the rewards are sent, or after the winners are published if no reward is due.
- Winners: for good, as proof of delivery, like the reward itself on the chain.
- Codes of entries that left: until that campaign’s data is deleted.
- Used sign-in codes: they expire 10 minutes after they are made, and the next sign-in after that deletes them.
Your IP address
The campaign uses your IP address only to limit how many requests it answers, counted in the server’s memory. It stores no IP address in any form, and the website’s code still never writes your requests or your IP address to a disk, a database or a log.
Leaving
Leave and delete my data, on the Quest Board, deletes your entry and your reply at once, after one confirm, and signs you out. While a campaign runs, the friend whose code you joined with then loses the points you brought. Once the winners are published, a winner can leave after the reward has landed, and the winners record stays.
Cookies
The website sets cookies only for people who sign in: a visitor who joins a Quest Board campaign, and the collection owner in the Control Room. Visitors who do neither get no cookies from this website.
Quest Board sign-in
- __Host-aether_nonce holds a one-time sign-in code, the wallet address being signed in and its times. It lasts 10 minutes, and is cleared once you are signed in.
- __Host-aether_engage holds the signed-in wallet address, an expiry time and a signature. It lasts 7 days, or until you disconnect your wallet or leave the campaign.
- Only people who sign in get them. Both are HttpOnly, so page scripts cannot read them, and SameSite=Strict; on the live website they are sent over HTTPS only.
The Control Room
- aether_control is set only for someone who enters the correct access code on the Control Room page, which is meant for the collection owner. It holds an expiry time and a signature, nothing personal, and lasts 12 hours, or until you press Leave in the Control Room.
- Unlocking changes asks the owner wallet to sign one free message, which sends no transaction. That sets __Host-aether_nonce for 5 minutes, then __Host-aether_write, which holds the owner wallet, an expiry time and a signature, for 2 hours.
- These are HttpOnly and SameSite=Strict too, and on the live website they are sent over HTTPS only.
- When someone tries an access code, the server uses their IP address to allow at most 8 tries every 10 minutes, counted in memory only. The code that was typed is checked, and never stored or logged.
- The access code only opens the page: every Control Room change still needs the collection owner’s wallet.
Security
The website is served over HTTPS only and tells browsers to keep it that way. It refuses to be shown inside other websites’ frames, gives other websites at most its own address as the referrer, and tells your browser to block the camera, microphone, location and the Topics API for it. It never holds your keys or funds, so there are none to steal from it.
No system is perfectly secure. Always check the website’s address and what your wallet shows before you approve anything, and never share your seed phrase with anyone.
Children
Aether is not meant for children: the Terms of Use require you to have reached the age of majority where you live. The website collects no names or emails from anyone, children included. A campaign stores an X handle only if you add a reply. Anything sent to the chain, by anyone, stays public.
International visitors
The company that hosts this website, the database service that keeps campaign records and the RPC providers may handle your requests on servers outside your country, and anyone, anywhere, can read and copy what is recorded on the Elysium chain.
Your choices
- You can browse without connecting a wallet; you need one only to take part.
- You can disconnect your wallet in the account menu at any time.
- You can clear this site’s data in your browser to remove everything the website stored there.
- You can use a separate wallet for Aether to keep it apart from the rest of your activity.
- If you joined a Quest Board campaign, you can leave it with Leave and delete my data on the Quest Board.
Apart from the campaign records in section 6, the website keeps no accounts, profiles or records of its visitors. Leave and delete my data removes your own entry; for anything else about your campaign records, such as a correction, contact us. The only other records of your visits are any request logs that the host and the RPC providers keep under their own policies, and nobody can change or delete what is on the chain. If you have a question or a request about your data, please contact us.
Changes to this notice
We may update this notice when the website changes. The date at the top of this page shows when it last changed.
Contact
Questions about this notice or your data? You can reach the Aether team at x.com/AetherElys (opens in a new tab). We will never message you first, and nobody from the Aether team will ever ask for your seed phrase or private key.