This Privacy Policy describes the practices regarding the information we collect, use, and share in connection with the Platform and the Services, including information about people who do not have an OpenSea Account, provided pursuant to the Platform Terms of Service and the Wallet & Onramp Terms of Use (together, the “Terms”). Where this Privacy Policy refers to “OpenSea,” “we,” “us,” or “our,” it refers to the entity responsible for the relevant processing activity as described below. Unless otherwise defined herein, terms in title case carry the definitions in the Terms.
This Privacy Policy covers data processing activities carried out by two entities. The entity responsible for your data depends on which services you use:
We collect information about people who use the Platform and Services, and about people who do not have an Account but whose profiles on other platforms we display, as described below.
Account Information. When you create an Account or use the Platform and Services, you provide us with certain information. We collect this information and other data you add to your Account, such as email address, username, linked social media accounts, favorited items and watchlisted collections, and other information you provide (“Account Information”). Certain Account Information (other than your email address) will be publicly visible on the Platform. Remember, public content can exist elsewhere on the internet even after you remove it from your Account on OpenSea.
Verification Information. We may need to collect information to verify your Account or identity, such as your phone number, email address, and information relating to the authentication method you use.
Identity Verification for Onramp Services. If you choose to use the Onramp Services, we may collect supplemental identity verification data. This data may include full legal name, date of birth, tax ID, physical address, government-issued identification documents, mobile number, IP and email addresses. Depending on how you access the Onramp Services, this information may be collected directly through our interface and transmitted to the Onramp Provider, or you may enter it directly on the Onramp Provider’s own page under the Onramp Provider’s privacy policy (see Section 3.F below).
You are not required to use the Onramp Services to access or use the Platform.
Identity Verification Through Third-Party Providers. In certain circumstances, such as when required for rewards eligibility, compliance, or settlement-related contexts, we may ask you to verify your identity by providing a government-issued ID and a selfie through a third-party identity verification provider. The provider may use facial recognition technology to create a biometric identifier from the geometry of your face in order to compare your selfie with the photo on your ID. The provider generates and holds the biometric identifier on our behalf and destroys it when the verification is complete, and in any event within three years of your last interaction with the provider. We do not receive or store the information you provide to this third-party provider or the biometric identifier generated by the provider. We only receive the verification result from the provider.
Preferences. The Platform lets you store preferences like how your content is displayed, notification settings, and favorites. We may associate these choices with your Account, browser, and/or mobile device.
Feedback. If you provide us with feedback or contact us, we may receive your name and contact information (such as an email address), as well as any other content included in or associated with the message you send.
Promotions and Rewards. If you participate in a contest, rewards program, promotion, or sweepstakes, we may collect your wallet address, name, contact information, and other details relevant to that program, and, where needed for tax reporting, your Social Security number, employer identification number, or other taxpayer identification number and your address (for example, on an IRS Form W-9 or W-8BEN). We may use this information to determine eligibility, deliver rewards, and meet our tax reporting obligations.
Other Information. We also collect information and other data at other points where you voluntarily provide it or where we state that your information is being collected. This may include demographic information you provide in surveys or research.
Additionally, like much of web3, your blockchain wallet address functions as an identifier on the Platform. Accordingly, you will need a blockchain wallet and associated wallet address to access certain aspects of the Platform and Services. A blockchain wallet address may become associated with you, your user ID, or information we collect about you when you use the Platform and Services.
As you navigate through and interact with the Platform and Services, we may use automatic data collection technologies to collect certain information, including:
Interactions with the Platform and Services. To provide and improve the Platform and Services, analyze trends, and enforce the Terms, we collect information when you interact with the Platform and Services, including, but not limited to, your browser/device type, device identifiers (such as device fingerprint and device ID), operating system and device settings, IP address and associated geolocation, blockchain wallet address, wallet type, actions and clickstream data, referring/exit pages, and date/time stamps. We may also store this data in log files. We use device fingerprinting only to provide security, to detect and prevent fraud, and to comply with legal obligations (such as restricting access from certain jurisdictions).
Cookies and Tracking Technologies. When you use the Platform and Services, we and our third-party partners use cookies, pixel tags, and similar technologies to collect information about your activity, browser, and device. This section describes what these technologies are, how we use them, and your choices. Third-party providers listed in this section may collect information about your online activities over time and across different websites when you use the Platform and Services.
Cookies are small text files stored on your browser or device when you visit a website. They may be “session” cookies (deleted when you close your browser) or “persistent” cookies (stored until they expire or you delete them). We also use pixel tags (sometimes called web beacons or clear GIFs), which are small code snippets that allow us to understand how users interact with the Platform and Services.
We organize cookies into four categories. These categories correspond to the choices presented in the cookie preferences panel.
Strictly Necessary Cookies. These cookies are essential for the Platform and Services to function and cannot be disabled. They include cookies that maintain your authenticated session, store your consent preferences, provide security and fraud protection, and support infrastructure services such as bot management and content delivery.
Functional Cookies. These cookies remember your preferences and settings to provide a more personalized experience. They include your language and currency preferences, user interface layout choices (such as sidebar states, table views, and filter panel positions), and display settings. These cookies do not track your activity across other websites.
Analytics Cookies. These cookies help us understand how visitors use the Platform and Services, measure performance, and improve the user experience. The following third-party providers set analytics cookies:
| Provider | Purpose |
|---|---|
| Amplitude | Measures how users interact with the Platform and Services (session and device identifiers) |
| Datadog | Measures page load times and application performance |
| Google Analytics (GA4) | Traffic measurement and audience analytics |
Marketing Cookies. These cookies support attribution and referral tracking. The following providers set marketing cookies:
| Provider | Purpose |
|---|---|
| Amplitude | Marketing attribution (tracks how you arrived at the Platform) |
| OpenSea | Referral code capture (records referral source when you arrive via a referral link) |
Strictly necessary cookies persist for the duration of your session or as long as needed for their security or authentication function (ranging from 30 minutes for bot management to 30 days for session refresh). Functional, analytics, and marketing cookies persist for up to one year. You can clear cookies at any time through your browser settings or the cookie preferences panel.
We apply different consent models depending on your location:
Opt-in regions (European Union, United Kingdom, Liechtenstein, Iceland, Norway, Switzerland, Canada, and Brazil): Analytics, marketing, and functional cookies are blocked — and the associated tracking scripts are not downloaded — until you affirmatively grant consent through the cookie banner.
All other regions: Analytics, marketing, and functional cookies are active by default. You may opt out at any time through the cookie preferences panel.
Your consent choices are stored in a cookie on your device and respected on each subsequent visit.
Browser Privacy Signals. We do not respond to browser “Do Not Track” signals. We honor Global Privacy Control (GPC) signals. When your browser sends a GPC signal, we automatically disable marketing cookies for your session. You do not need to take any additional action.
We may receive information about you or related to you from service providers and other sources/companies that offer their products and/or services to us or to you, for use in conjunction with the Platform and Services, or whose products and/or services may be linked from the Platform and Services. We may add this to the data we have already collected from or about you through the Platform and Services. This information may include, for example:
1. third-party wallet providers and partners that provide us with your blockchain wallet address and certain other information you choose to share with those wallet providers and partners;
2. data analytics providers or vendors who provide us information related to certain blockchain wallet addresses;
3. vendors who provide communication and identity verification services to us and which you choose to use;
4. other vendors who provide us information necessary to run our business or enforce the Terms;
5. data providers that supply information from third-party platforms, as described in Section 1.D; and
6. information you share through third-party community platforms we operate, such as our official Discord server and Telegram channels, including your username, public profile information, messages, and reactions. We may use service providers, including AI tools, to help analyze this information.
We collect data from activity and information that is publicly visible and/or accessible on blockchains or other public sources, including third-party platforms and websites. This may include, for example, blockchain wallet addresses and information regarding purchases, sales, or transfers of digital assets, as well as publicly available profile information, usernames, social connections, and user-generated content, which may then be associated with other data we have collected about you.
We may also display publicly available profiles of people who have accounts on third-party platforms (“External Profiles”), so that users can discover and follow traders and collectors across platforms. These profiles do not mean the person uses or endorses OpenSea.
External Profiles. We display External Profile information we obtain from digital asset trading and community platforms (“Source Platforms”) and from data providers that supply Source Platform data to us. For each External Profile, we collect the username and display name, profile bio, profile photo and banner image (which we copy to our servers), wallet addresses linked to the account, the accounts the person follows and is followed by and the related counts, posts, linked social media handles, and account statistics published by the Source Platform. From public blockchains, we collect the holdings and transaction history of the linked wallet addresses and calculate portfolio value and profit and loss.
We process information about or related to you to:
1. provide, operate, and maintain the Platform and Services;
2. improve and analyze the Platform and Services;
3. analyze, improve, and personalize your use and experience on the Platform and Services, including by making recommendations to you, by enabling social and community features, and by moderating the community and enforcing our community guidelines and the Terms;
4. communicate with you;
5. maintain the safety, security, and integrity of the Platform and Services, and investigate, address, and prevent conduct that may violate the Terms and/or that is otherwise harmful or unlawful, including sanctions screening;
6. connect you to Onramp Providers who provide Onramp Services, which may require transmitting your data for identity verification, anti-money laundering, and sanctions screening purposes;
7. send you newsletters, promotional materials, and other notices related to the Platform and Services or third parties’ goods and services;
8. comply with applicable laws, cooperate with investigations by law enforcement or other authorities of suspected violations of law, and/or protect our and our Affiliates’ legal rights; and
9. act in any other way which we have communicated to you and to which you have consented or we may describe when you provide your information.
Anonymized and Aggregated Records. We may create anonymized, deidentified, or aggregated records from identifiable information. We use this data for the same purposes as outlined above, and we may also use and/or disclose such anonymized, deidentified, or aggregated information for any purpose. We will maintain and use anonymized and deidentified data in anonymized / deidentified form and not attempt to reidentify the information unless permitted by law.
Marketing Communications to Non-Users. We do not use information collected from third-party platforms and websites to send marketing communications to individuals who are not OpenSea Account holders.
Automated Decisions, Profiling, and Artificial Intelligence. We use automated tools, including artificial intelligence (“AI”), to support compliance, security, and fraud prevention, for example, to screen wallet addresses against sanctions lists and to detect suspicious activity. These tools may involve profiling, meaning the automated analysis of personal information to evaluate risk or unusual patterns of behavior, and may lead to decisions that significantly affect you, such as restricting your access to certain features. Where applicable law gives you this right, you may ask for a human to review such a decision by contacting us as described in Section 15. We also use automated tools, including AI, to recommend content, accounts, and digital assets, to improve search, and to support customer service. These uses are not intended to produce decisions with legal or similarly significant effects on you.
Legal Basis. If you are a resident of the EEA, UK, or Switzerland, please refer to Section 12, which details the legal bases we rely on for the processing activities described in this Section 2.
We disclose your information and information about you as described below:
We may share your information and information about you with third-party service providers to: provide technical infrastructure services; conduct quality assurance testing; analyze how the Platform and Services are used; prevent, detect, and respond to unauthorized activities or potential violations of the Terms or policies; verify identity; provide technical and customer support; and/or provide other support to you, us, and/or to the Platform and Services.
In order to provide the Platform and Services in accordance with our contract with you and in our legitimate interests to run an efficient business, we may share some or all of your information and information about you with any subsidiaries, joint ventures, or other companies or products under our common control (“Affiliates”), in which case we will require our Affiliates to honor this Privacy Policy.
In order to provide the Platform and Services, we may display or share information relating to your public activity on blockchain networks, other platforms, or the Platform. This may include publicly available profile information, social connections, and activity associated with your blockchain wallet address. We also use technology like APIs to make certain information, such as blockchain activity, available to third parties. We do not make External Profile information available through our APIs.
In our legitimate interests to run an effective business, we may share some or all of your information and information about you in connection with or during negotiation of any merger, financing, acquisition, or dissolution transaction or proceeding involving a sale, transfer, or divestiture of all or a portion of our business or assets. In the event of an insolvency, bankruptcy, or receivership, your information and information about you may also be transferred as a business asset. If another company acquires our companies, business, or assets, that company will possess the information collected by us and will assume the rights and obligations regarding your information and information about you as described in this Privacy Policy.
In our legitimate interests to run an effective business and/or as required by law, regardless of any choices you make regarding your information (as described below), OpenSea may disclose your information and information about you if it believes in good faith that such disclosure is necessary: (i) in connection with any legal investigation; (ii) to comply with relevant laws or to respond to subpoenas, warrants, or other legal process served on OpenSea; (iii) to protect or defend the rights or property of OpenSea or users of the Platform and Services; and/or (iv) to investigate or assist in preventing any violation or potential violation of the law, this Privacy Policy, or the Terms.
We may also disclose your information and information about you to our professional advisors (including, for instance, outside counsel and auditors) in our legitimate interests to run an effective and successful business; to our Onramp Providers, when you choose to use the Onramp Services, which receive your identity verification and transaction information as independent data controllers under their own privacy policies; at your direction, including to facilitate login integrations you choose to use; or with your consent.
The Platform and Services may contain links to third-party websites. When you click on a link to any other website or location, you will leave the Platform and go to another site, and another entity may collect information from you. We have no control over and cannot be responsible for these third-party websites or their content. Please be aware that this Privacy Policy does not apply to these third-party websites or their content, or to any collection of your information or information about you after you click on links to such third-party websites. We encourage you to read the privacy policies of every website you visit. Any links to third-party websites or locations are for your convenience and do not signify our endorsement of such third parties or their products, content, or websites.
To use certain aspects of the Platform and Services, you must use a wallet which allows you to engage in transactions on public blockchains. Your interactions with any third-party wallet provider are governed by the wallet provider’s applicable terms and privacy policy, if any. If you create a Wallet through the Platform, your use of the Wallet is governed by the Wallet & Onramp Terms of Use, and Sea Trove LLC is responsible for the processing of your information in connection with the Wallet, as described at the beginning of this Privacy Policy.
You have choices regarding the use of information on the Platform and Services:
We may periodically send you emails, push notifications, and text messages that directly promote the use of the Platform and Services or third parties’ goods and services. You can opt out of marketing and promotional emails at any time by following the unsubscribe instructions in the email. You can opt out of marketing and promotional text messages at any time by replying STOP to any text message we send. You can choose which account and activity notifications you receive by email, push notification or on-site alert through the Notifications preferences in your Settings page. You can also turn off push notifications in your device settings. Despite these preferences, we may send you occasional transactional service-related informational communications.
You can manage your cookie preferences at any time by visiting the cookie preferences panel in your account. This opens a panel where you can enable or disable functional, analytics, and marketing cookies individually. Strictly necessary cookies cannot be disabled because they are essential for the Platform and Services to function.
You may also control cookies through your browser settings. Please note that disabling cookies through your browser may affect the functionality of the Platform and Services.
You can view, access, edit, or delete your information and information about you for certain aspects of the Platform and Services via your Settings page. Depending on applicable law where you reside, you may have certain rights in relation to information about you. However, such rights are not absolute and may apply only in certain circumstances. If such rights are not provided under law for your operating entity or jurisdiction, we have full discretion in fulfilling your request.
Depending on your jurisdiction, rights available may include the right to (i) request access and obtain a copy of your personal information, or certain details regarding the ways in which we use and disclose your personal information (including, where applicable law provides, a list of the specific third parties to which we have disclosed it); (ii) request correction/rectification of inaccurate personal information that we hold about you; (iii) request deletion of your personal information; (iv) object to or restrict the processing of your personal information; (v) request portability of your personal information; and (vi) withdraw your consent at any time, where we have collected and processed your personal information based on your consent.
If you use the Onramp Services, please note that Onramp Providers are independent data controllers for data they process in connection with those services, and you may need to contact the Onramp Providers separately to exercise your rights with respect to data they hold about you. If you ask us to delete information that we shared with an Onramp Provider, we will notify that Onramp Provider of your request.
If you wish to exercise your rights under an applicable data protection or privacy law, please contact us here or at the address provided in Section 15 below, specify your request, and reference the applicable law. We may ask for additional information to verify your identity (such as your email address or government-issued ID) or ask for more information about your request. We will consider and act upon any above request in accordance with applicable law. You may designate an authorized agent to make requests on your behalf to exercise your rights, but before accepting such a request from an agent, we will require them to provide proof you have authorized them to act on your behalf and may need you to verify your identity directly with us. We will not discriminate against you for exercising any of these rights. We will confirm receipt of your request within 10 business days and respond within 45 days, unless applicable law requires a shorter period. If we need more time, we may extend that period by up to 45 days where applicable law permits, and we will tell you if we do.
If your information appears on OpenSea, you may ask us to stop displaying an External Profile about you, whether or not you have an Account, by consulting this page, by contacting Support here or at the address in Section 15. Once your request is confirmed, we will stop displaying the External Profile, including its photo, banner, posts, and follow relationships, and we will prevent it from being imported again. We may keep a copy where we are required to preserve it in connection with legal claims.
Removing an External Profile does not delete your personal data from our systems. To request deletion under applicable data protection law, or to ask what External Profile information we hold about you, correct it, or object to our processing of it, please follow the process described above.
If you believe that we have infringed your rights, we encourage you to first contact Support here so that we can try to resolve the issue or dispute informally. If we deny your request, you may have the right to appeal our decision by contacting Support here or at the address in Section 15. While we hope you are satisfied with our responses, you also have the right to complain to the data protection regulator where you live or work. This section does not change the dispute resolution provisions of the Terms.
We may continue to retain your information or information about you even after you request deletion of your data if such retention is reasonably necessary to comply with our legal obligations, resolve disputes, prevent fraud and abuse, enforce the Terms or other agreements, and/or protect our legal rights and other interests. We otherwise retain information for as long as is reasonably necessary for the purposes specified in this Privacy Policy. In determining the length of time, we consider criteria such as whether we need the information to continue providing the Platform and Services, comply with legal obligations, and other factors set out in this section.
We keep External Profile information while the Source Platform continues to make the account available and we have not received a request from the individual to whom the External Profile belongs to stop displaying it. Upon receipt of such request, as described elsewhere in this Privacy Policy, we stop displaying the External Profile and keep its information only for as long as we are required to preserve it in connection with legal claims or to prevent it from being imported again.
Transactions on public blockchains, including the sale, purchase, offer, or transfer of NFTs and other digital assets, are permanently recorded on those blockchains. We cannot modify or delete on-chain data, including personal information that a creator includes in NFT metadata or linked media. Do not include in NFT metadata or media any personal information that you do not want to remain public.
We care about the security of your information and use physical, administrative, and technological safeguards to preserve the integrity and security of information collected through the Platform and Services. However, no security system is impenetrable, and we cannot guarantee the security of our systems, or those of our vendors. In the event that any information under our custody and control is compromised as a result of a breach of our security, we will take steps to investigate and remediate the situation and, in accordance with applicable laws and regulations, may notify those individuals whose information may have been compromised.
You are responsible for the security of your digital wallet, and we urge you to take steps to ensure it is and remains secure. If you discover an issue related to your wallet, please contact your wallet provider.
We do not intentionally gather information from visitors who are under the age of 13 (or under the age of 16 for individuals in the EEA). Minors who are at least 13 years old (or at least 16 for individuals in the EEA) but are under 18 years old may use a parent or guardian’s account, but only with the supervision of the account holder. If a child under 13 (or under 16 for individuals in the EEA) submits identifiable information to us and we learn that the identifiable information is the information of a child under 13 (or under 16 for individuals in the EEA), we will attempt to delete the information as soon as possible. If you believe that we might have any identifiable information from a child under 13 (or under 16 for individuals in the EEA), please contact Support here or at the address indicated in Section 15 below. If we become aware that we are displaying publicly available information about a person under the age of 18 who does not have an Account, we will promptly remove that information.
If you are a non-U.S. user, by visiting or using the Platform and Services and providing us with information directly or indirectly, you understand and acknowledge that your information and information about you may be processed in the country in which it was collected and in other countries, including the United States, where laws regarding processing of your information or information about you may be less stringent than the laws in your country.
For the purposes of the EU and UK General Data Protection Regulation, Ozone Networks, Inc. is the controller for the Platform generally, and Sea Trove LLC is the controller for the Wallet and Onramp Services, as described at the beginning of this Privacy Policy. Our contact details are set out in Section 15 below.
When you access or use the Platform and Services, we collect, use, share, and otherwise process your personal data for the purposes described in this Privacy Policy. We rely on a number of legal bases to use your information in these ways:
1. We process your personal data with your consent, for example, to: communicate with you; send you marketing emails and/or notifications; and for any other purpose that we communicate to you and to which you have consented.
2. We process your personal data in order to fulfill our contract with you and to provide you with the Platform and Services, for example, to: provide, operate, and maintain the Platform and Services; connect you to Onramp Services provided by Onramp Providers; and investigate, address, and prevent conduct that may violate the Terms.
3. We process your personal data pursuant to our legitimate interests to provide effective services to you and maintain our business relationship, for example, to: improve and analyze the Platform and Services; personalize your experience on the Platform and Services; and enable social features, including displaying External Profiles so that users can find and follow people who are active on other platforms.
4. We process your personal data in order to comply with legal obligations, in the public interest, or in your vital interests, for example, to: detect, prevent, and address activities that we consider could be fraudulent, violations of the Terms or policies, and/or otherwise harmful or unlawful.
We will use appropriate safeguards for transferring your personal data out of the EEA, UK, and Switzerland where required and only transfer such personal data under a legally valid transfer mechanism including, where relevant, entering into the EU Standard Contractual Clauses and/or the UK International Data Transfer Agreement / Addendum with the recipient outside the EEA / UK, or relying on derogations available under applicable data protection laws. Please contact Support here or write to us at the address indicated in Section 15 below to obtain a copy.
If you are located in the EEA, UK, or Switzerland, you may also direct data protection inquiries or requests to exercise your rights to our representative, Prighter Group GmbH, at this link.
This Privacy Policy may be updated from time to time for any reason. We will notify you of any changes to the Privacy Policy by posting the new Privacy Policy at https://opensea.io/privacy. The date the Privacy Policy was last revised is identified at the beginning of this Privacy Policy. You are responsible for periodically visiting this Privacy Policy to check for any changes.
This section applies if you are a resident of California, Colorado, or another U.S. state that has a privacy law similar to the California Consumer Privacy Act (“CCPA”). Over the past 12 months, we have collected the following categories of personal information (including sensitive personal information, denoted by *), as described further above in Section 1: (1) identifiers, (2) commercial information, (3) Internet and similar network activity, (4) geolocation data, (5) audio, electronic, visual, or similar information, (6) inferences and other information derived from other personal information about you, (7) account log-in credentials, such as login tokens and session credentials (not passwords or private keys)*; and (8) government identifiers, such as Social Security and taxpayer identification numbers*.
The categories of sources from which the personal information is collected are described above in Section 1.
The business or commercial purpose for collecting and using personal information, and the third parties we have disclosed such information to over the past 12 months, are described above in Sections 2 and 3. We only use and disclose sensitive personal information for the purposes specified in the CCPA or otherwise in line with your consent. We retain information, including sensitive personal information, as long as is reasonably necessary for the purposes described in Section 8 above.
The categories of personal information we shared with third parties over the past 12 months, as described above in Section 3, include: (1) identifiers, (2) commercial information, (3) Internet and similar network activity, (4) geolocation data, (5) audio, electronic, visual, or similar information, (6) inferences and other information derived from other personal information about you, (7) account log-in credentials, such as login tokens and session credentials (not passwords or private keys)*; and (8) government identifiers, such as Social Security and taxpayer identification numbers*.
We do not “sell” or “share” (as those terms are defined under the CCPA) personal information, nor have we done so in the preceding 12 months. Further, we do not have actual knowledge that we sell or share personal information of residents under 16 years of age.
If you have any questions, concerns, or complaints about the Privacy Policy or our data collection or processing practices, or if you want to report any security violations to us, please contact Support here or write to us at the following address. Address your letter to Sea Trove LLC if it concerns the Wallet or the Onramp Services, and to Ozone Networks, Inc. d/b/a OpenSea for all other matters:
Ozone Networks, Inc. d/b/a OpenSea or Sea Trove LLC
Attn: Legal Department
66 W Flagler St, Suite 929
Miami, FL 33130, USA