Privacy Policy

Last updated: April 28, 2026

1. Who We Are

This Privacy Policy describes how hallu, LLC ("Hallucinate," "we," "us," or "our") collects, uses, and shares personal information when you visit hallu.art (the "Site") or purchase a non-fungible token ("NFT") associated with one of our original digital artworks.

Controller: hallu, LLC, 718 Trailsway Lane, Neenah, WI 54956, USA.
Contact: support@hallu.art

2. Information We Collect

2.1 Information you provide directly

Order information: name, email address, U.S. billing address (including ZIP code, which we use to verify U.S. eligibility and to compute applicable U.S. state and local sales tax), and items purchased.
Wallet information: if you elect self-custody, the public Polygon-blockchain wallet address you provide for delivery. If you pay with USDC on Polygon, the public wallet address from which you send funds.
Communications: the contents of emails, phone messages, or chat messages you send to our customer-service channels.

2.2 Information collected automatically

Device and usage data: IP address, browser type, device type, pages viewed, referring URL, and timestamps.
Cookies and similar technologies: small text files stored on your device. We use a minimal set of cookies for site functionality and aggregate analytics.

2.3 Information collected by Stripe

Payments on this Site are processed by Stripe, Inc. When you check out, your payment-card details are submitted directly to Stripe and are not stored on our servers. Stripe's use of your information is governed by Stripe's own privacy policy at https://stripe.com/privacy. Stripe shares with us only the information necessary to fulfill your order (e.g., name, billing address, transaction status, last four digits of the card).

3. How We Use Your Information

To process and fulfill your order, including minting the NFT to your custodial account or wallet;
To provide customer service and respond to your inquiries;
To detect and prevent fraud, abuse, sanctions violations, and other unlawful activity;
To comply with our legal obligations, including tax and KYC/AML requirements;
To improve the Site and our services;
With your consent, to send you occasional updates about new artworks and drops (you may opt out at any time).

4. Legal Bases (EEA / UK Visitors)

Where the General Data Protection Regulation applies, we process personal information on the following legal bases: (a) performance of a contract (to fulfill your order); (b) compliance with a legal obligation (e.g., tax, sanctions); (c) legitimate interests (e.g., fraud prevention, site security); and (d) consent (e.g., marketing emails).

5. How We Share Your Information

We share personal information only as described below:

Stripe, our payment processor, for the purpose of processing payments;
Our minting and infrastructure providers (e.g., the third-party platform we use to mint NFTs on the Polygon blockchain), to deliver your purchased NFT;
Hosting and email providers, to operate the Site and communicate with you;
Tax and accounting providers, to compute and remit applicable sales tax;
Law-enforcement and regulators, where required by law or to protect our rights or the rights of others;
Successors, in connection with a merger, sale, or acquisition of all or part of our business, subject to this Privacy Policy.

We do not sell your personal information. We do not share personal information with third parties for their independent marketing purposes.

6. Public Blockchain Disclosure

When we mint an NFT for you, the transaction is recorded on the Polygon blockchain. Blockchain transactions are public, permanent, and outside our control. The wallet address that ultimately receives the NFT and the transaction hash are visible to anyone with access to a Polygon block explorer. We do not publish your name, email, or other off-chain personal information on the blockchain.

7. Data Retention

We retain personal information for as long as necessary to provide our services and to satisfy our legal and accounting obligations. Order records are typically retained for at least seven (7) years for tax compliance.

8. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, or to withdraw consent. California residents have rights under the CCPA/CPRA, and EEA/UK residents have rights under the GDPR/UK GDPR. To exercise any of these rights, contact support@hallu.art. We will not discriminate against you for exercising your rights.

9. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information, including HTTPS encryption in transit, payment-data tokenization via Stripe, and access controls. No system is perfectly secure; we cannot guarantee absolute security.

10. Children

The Site is not directed to children under 18 and we do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us so we can delete it.

11. International Transfers

We are based in the United States. If you access the Site from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those of your jurisdiction.

12. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent revision. Material changes will be communicated to you by email or by a prominent notice on the Site.

13. Contact

hallu, LLC
718 Trailsway Lane, Neenah, WI 54956, USA
support@hallu.art · +1 (541) 286-8851