> ## Documentation Index
> Fetch the complete documentation index at: https://docs.microset.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Data & Privacy

> What data Microset collects, how it is handled, and what it never touches.

<Info>
  This page documents Microset's data practices for reviewers and users. It is
  consistent with the published [Privacy Policy](/legal/privacy-policy) and
  [Data Policy](/legal/data-policy).
</Info>

## Data collected

| Data                         | Collected?             | Purpose                                                    | Retention                   |
| ---------------------------- | ---------------------- | ---------------------------------------------------------- | --------------------------- |
| Wallet public key            | Yes                    | Authentication and linking predictions/positions to a user | While the account is active |
| Auth signature / session JWT | Yes                    | Verifying wallet ownership and maintaining a session       | Session duration            |
| Prediction history (cached)  | Yes                    | Displaying positions, profile, and market activity         | While the account is active |
| Support correspondence       | Only if you contact us | Responding to your request                                 | While the account is active |

## Wallet & key handling

Microset authenticates users by asking the wallet to sign a human-readable
message (`Microsets:wallet-auth:`) and verifying that signature server-side to
issue a session JWT. The public key is stored to associate on-chain activity with
the user. Microset never receives or stores the user's private key or seed phrase.

The optional quick-prediction delegate is an on-chain session: the user funds an
escrow with a spend cap, the delegate key signs only predictions drawn from that
capped escrow, and the user can withdraw unused funds or revoke the session at any
time.

## What Microset never collects

<Warning>
  Microset never requests or stores private keys or seed phrases. Any site asking
  for these is not affiliated with Microset.
</Warning>

* ❌ Private keys
* ❌ Seed / recovery phrases

## Backend & third-party services

| Service                              | Purpose                                | Data shared                                            |
| ------------------------------------ | -------------------------------------- | ------------------------------------------------------ |
| Microset API (`testapi.microset.io`) | Auth, market data, user profile        | Wallet public key, signatures, app data                |
| MongoDB                              | Application database                   | Off-chain application data (profiles, cached activity) |
| Solana RPC provider                  | Read chain state / submit transactions | Public key, transaction data                           |
| Privy                                | Wallet connection & auth               | Wallet address and authentication signals              |
| Hosting (Railway)                    | Runs the backend                       | Operational data                                       |

## Data retention

Off-chain data is kept only as long as needed to operate the Service and meet
legal obligations, then deleted or anonymized. On-chain data is public and
permanent. See the [Privacy Policy](/legal/privacy-policy) for full details.