Privacy Policy
Last updated: October 11, 2026
1. Overview
CryptoTokenMaker ("we", "us", "our") provides a non-custodial token creation service, related tools and optional paid services. This Privacy Policy explains what information we collect, how we use it, who else receives it, and your rights regarding that information.
We are committed to protecting your privacy. We do not require account registration, we do not store your private keys, and we never have custody of your funds or tokens.
2. Information We Collect
We collect only the information needed to operate the site and our services:
- Wallet address β your public wallet address, visible when you connect a wallet. Wallet addresses and transactions are public on the blockchain, and they can be personal data when they can be linked to you.
- Token configuration data β the name, symbol, supply and features you enter into a token generator. This data is processed in your browser and sent to the blockchain through your wallet. The only part of it we keep on our servers is the optional logo upload described in the next item.
- Token logos and metadata (Solana, Sui and TON) β if you add a logo on the Solana, Sui or TON generator, your browser uploads it to our server (/api/upload.php). The upload happens when you click Create, before you approve the transaction in your wallet, so it is stored even if you cancel. We store the image, together with the token name, symbol and description you entered, as a metadata file under https://cryptotokenmaker.com/token-assets/. These files are public: anyone with the link can view them, and the on-chain metadata of a token you create points to them so that wallets and explorers can show your token's name and logo.
- Upload rate limiting β to prevent abuse, uploads are limited to 20 requests per hour from one IP address. For this, our server keeps a small record of the times of your recent upload requests. The record is named after a pseudonymised (keyed) hash of your IP address, kept for up to 1 hour, and does not contain the IP address itself.
- Usage analytics β we use Google Analytics 4, a service of Google LLC, to produce aggregate statistics about how the site is used (for example, which pages and tools are visited). Google Analytics receives information such as the pages you view (with their full address), your browser and device type, an approximate location derived from your IP address, a random identifier stored in its cookies, and actions you take on the site, such as clicking a link or button, connecting a wallet, creating a token, adding liquidity, using a tool or starting a checkout. The events we send can include details such as the network, the type of wallet, the service plan or the fee amount, but never wallet addresses, transaction hashes or what you type. Google Analytics may also record the address of a link you click that leads to another website (for example a block-explorer link that contains a public wallet or token address, or the WhatsApp order link that contains the details you typed). See section 6 for how consent works.
- Orders for paid services β when you order a paid service, the checkout page does not send your details to our server. It prepares a message containing the details you typed (for example, your project details and your Telegram username or email address), which you send to us yourself through WhatsApp, a service of Meta. Because these details are part of the WhatsApp link, Google Analytics may also record them when you click it (see "Usage analytics" above). The transaction hash you add links your order to the wallet address you paid from. We use this information to deliver your order and to contact you about it.
- Messages you send us β if you contact us by email or WhatsApp, we receive your message and contact details and use them to reply.
- Log data β standard server logs (IP address, browser type, pages visited) retained for security purposes and automatically deleted after 30 days.
3. Blockchain Transactions
Token deployments, Add Liquidity transactions and payments for paid services are transactions on public blockchains. We support 23 networks: Arbitrum, Avalanche, Base, Berachain, BNB Chain, Cronos, Ethereum, HyperEVM, Linea, Mantle, Metis, Monad, Optimism, Polygon, Robinhood Chain, Scroll, Soneium, Sonic, Unichain, World Chain, Solana, Sui and TON. Once submitted, transactions are permanently recorded on the blockchain and are publicly visible. We have no ability to reverse, modify, or delete on-chain data.
4. How We Use Your Information
- To process your token creation request via smart contract
- To display transaction status and token details
- To host the logo and metadata you upload for your token
- To deliver paid services you order and to communicate with you about them
- To understand how the site is used through aggregate statistics (Google Analytics)
- To maintain security and prevent abuse (for example, by rate-limiting uploads)
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share data only in the following cases:
- With blockchain networks (transactions are broadcast publicly by design)
- With the service providers listed in section 7, which receive data when your browser connects to them or when you choose to use them
- When required by law or valid legal process
- To protect the rights and safety of our users or the public
6. Cookies and Browser Storage
We use Google Analytics cookies (_ga and _ga_4SV2MHD9FZ) to produce aggregate usage statistics. They are set by Google Analytics on cryptotokenmaker.com and expire after up to 2 years.
If you are in the European Economic Area, the United Kingdom, Switzerland or Turkey, these analytics cookies are only set after you accept them in our cookie banner. We use Google Consent Mode v2: before you make a choice, or if you reject, Google may still receive cookieless pings (measurements sent without cookies). In other regions, analytics cookies may be set when you visit. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a rejection of analytics cookies in every region, unless you accept them yourself through "Cookie settings". Wherever you are, you can change or withdraw your choice at any time with the "Cookie settings" link in the footer of every page.
We save your choice in your browser's local storage under the name ctm_consent. This entry is strictly necessary: it only records your choice and when you made it. It is used for 12 months, after which it expires and, in the regions above, we ask again.
Wallet connection libraries (such as WalletConnect/Reown and TON Connect) store connection data in your browser's local storage and IndexedDB so that your wallet stays connected. We do not use advertising cookies. See our Cookie Policy for details.
7. Third-Party Services
Parts of the site are provided by third parties. When your browser connects to them, they receive your IP address and browser information, and they process data under their own privacy policies:
- Google Analytics 4 (Google LLC) β aggregate usage statistics, as described in section 6.
- Google Fonts (Google LLC) β web fonts used on our pages.
- jsDelivr and esm.sh β content delivery networks that serve the open-source code libraries used by our token generators and tools.
- WalletConnect / Reown β the wallet connection window and QR-code connections on our EVM token generator pages. Its libraries may store data in your browser's local storage and IndexedDB, and Reown may receive technical usage data when its components load. After you connect through this window, Reown's servers also receive your wallet address (for example, to look up balances and names and to relay network requests). If you choose to sign in with email or Google in that window, Reown handles that login.
- Coinbase (Base Account SDK) β used when you choose Coinbase Wallet or Base Account in the wallet connection window.
- TON Connect β connects your wallet on the TON generator page through bridge servers operated by wallet providers. The TON Connect library also sends technical usage data to analytics.ton.org.
- Blockchain RPC providers β public node services such as PublicNode, Binance (BNB Chain), Helius, dRPC, the networks' own public endpoints and tonapi.io. They receive your wallet address and the queries and transactions that your browser or wallet sends to the blockchain.
- WhatsApp (Meta) β orders for paid services and messages you send us through WhatsApp.
- Hostinger β hosts this website and its content delivery network, and processes the requests your browser makes to our site.
8. Data Retention
Server logs are deleted after 30 days. Logos and metadata files uploaded for Solana, Sui and TON tokens are public and are not deleted automatically, even if you cancelled the token creation (the on-chain metadata of a created token points to them). Apart from those uploads, we do not keep a record of the token configurations you enter. Upload rate-limit records are described in section 2. Order details you send us through WhatsApp remain in our WhatsApp chat history. Your cookie choice is used for 12 months, and Google Analytics cookies expire after up to 2 years. Blockchain data is permanent by the nature of distributed ledgers.
9. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you, and to withdraw your consent to analytics cookies at any time through "Cookie settings". Data stored in your browser (your cookie choice, analytics cookies and wallet connection data) can be removed by clearing this site's data in your browser. For other requests, for example about an order or an uploaded logo, contact us at the address below. Data recorded on a blockchain cannot be changed or deleted by anyone.
10. Children's Privacy
This service is not intended for users under 18 years of age. We do not knowingly collect information from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions, contact us at: support@cryptotokenmaker.com
This policy is effective as of October 11, 2026.