Privacy & safety
A community.
A little less exposure.
You can explore and create here without telling us who you are. Keeping people safe also means being clear about the limits.
Create without a profile.
The public PFP maker runs in your browser without a photo, email or wallet. Public designs and downloads stay on your device. Optional wallet sign-in is a separate step. A design link contains artwork choices only.
Keep contact details private.
Owner account information and enquiry submissions are not public profiles. Business and support forms are private submissions. Use an alias and share only the details needed for your request.
Know what remains visible.
Our hosting provider processes requests and security information, including network metadata. External platforms have their own policies. No website can promise complete anonymity.
Before token access opens
Know the boundaries.
Premium membership stays closed until the token and holder verification are ready. You can test wallet sign-in now. It verifies ownership only and does not unlock membership or authorize a claim.
Does a wallet hide my identity?
A wallet address is a public alias, not an anonymity guarantee. Public transactions, holdings, transfers, and a reused social profile can connect activity to a person. A separate community wallet can reduce accidental sharing of your main wallet, but transfers can still link the two. Never post your recovery phrase or private key.
Read Solana's explanation of privacyWhat does wallet sign-in ask for?
Phantom asks you to connect and sign a readable message for community.fun. The challenge expires after five minutes and can be used once. A successful sign-in creates a one-hour session. After token launch, a separate server check will determine eligible cosmetics. Sign-in never requests a seed phrase, private key, payment, token transfer, spending approval or NFT mint.
What happens if I share a design link?
Anyone with the link can recreate and change the same character. It contains artwork choices in the part after the # symbol. That part is not sent with the page request. The maker does not include your email, wallet, real name, or a tracking identifier.
How do I avoid impersonation?
Start from community.fun/official-links. Treat unsolicited DMs, support offers, claims, urgency, and requests to sign unfamiliar messages as suspicious. Do not trust a familiar PFP or display name as proof. There is no Community token or NFT claim open now.
How do I report doxxing or get my data removed?
Use the support form and choose "Privacy or data request", "Report impersonation", or "Report content". Give the relevant URL and a short explanation. Do not copy exposed personal information into a public post. We may need to verify a data request, but will never ask for your wallet recovery phrase. Support is not an emergency service.
Open private supportHow is the website protected?
HTTPS, restricted browser permissions, a strict content policy, server-side access checks, limited request sizes, bot checks on submission forms, hashed passwords and session tokens, and rate limits are in place. We keep contact forms out of public pages and avoid advertising trackers. These controls reduce risk; they are not an independent security audit or a promise that breaches are impossible.
Use a password manager and multi-factor authentication on your email, social accounts, and hosting account. Keep recovery codes private.
Read our data notice