Privacy Policy

Effective Date: 6 August 2025

MatterFi Inc. (“MatterFi”, “we”, “us” or “our”), a corporation incorporated in Wyoming, USA (registered office: 30 N Gould St, Ste R, Sheridan, WY 82801, United States), operates the website https://americanfortress.io (the “Site”). We are committed to protecting your privacy and processing personal data transparently and in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Consumer Privacy Act (“CCPA”), and other applicable laws.

AmericanFortress™ (“AmericanFortress”) is a brand owned and operated by MatterFi.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit the Site, subscribe to our newsletter, or purchase digital asset name services (the “Services”).

1. Scope

This Privacy Policy applies to personal data processed through the Site and related Services. Separate terms and conditions apply to the checkout, management, and sale of FortressNames™ via Stripe; however, the underlying data processing is referenced here for transparency.

2. What Personal Data We Collect

CategoryData ElementsSourcePurposeLegal Basis (GDPR)
Contact DataEmail addressDirectly from you via newsletter sign‑up formProvide newsletter and marketing communicationsConsent (Art. 6 (1)(a))
Transactional DataPayment token, last 4 digits of card, billing country (processed by Stripe)StripeFacilitate payments for FortressNames™Contract (Art. 6 (1)(b))
Usage DataIP address, browser type, device ID, referral URL, pages viewed, time spentAutomatic via cookies & similar tech (Google Analytics, Hotjar)Site analytics, debugging, improvementConsent (Art. 6 (1)(a))
Marketing EngagementEmail open & click‑through metrics, campaign sourceSmartLeadOptimise newsletter performanceConsent / Legitimate Interest (Art. 6 (1)(f))

Special Categories of Data. We do not intentionally collect sensitive personal data (e.g., health, biometrics).

3. How We Use Your Information

  1. Provide and maintain the Services (processing payments via Stripe, delivering purchased FortressNames™).
  2. Send newsletters and promotional content where you have opted‑in.
  3. Analyse and improve the Site via Google Analytics and Hotjar heat‑mapping.
  4. Detect and prevent fraudulent or malicious activity.
  5. Comply with legal obligations and respond to lawful requests.

4. Cookies & Similar Technologies

We use first‑ and third‑party cookies, web beacons, and pixels. Non‑essential cookies are set only after you have provided consent via our cookie banner.

4.1 Cookie Table (ready to paste)

CategoryCookie Name(s)ProviderPurposeExpiration
Strictly Necessary__stripe_mid, __stripe_sid, mStripeEnable secure payment processing1 year / 30 min / 2 years
 cookie_consent, cookie_settingsamericanfortress.ioStores your cookie preferences6 months
Analytics_ga, _gid, _gatGoogle AnalyticsDistinguish users / throttle request rate2 years / 24 h / 1 min
 _hjSession_{siteID}, _hjAbsoluteSessionInProgress, _hjIncludedInSessionSampleHotjarSession telemetry & sampling30 min / 30 min / 2 min
Marketing & EngagementCellYouTubeStores a unique ID to keep statistics of what videos a user has seenSession
 VISITOR_INFO1_LIVEYouTubeEstimate bandwidth & optimise video delivery6 months
 IDE, test_cookieGoogle AdvertisingDeliver or retarget ads1 year / 15 min
 smartlead_uid, smartlead_sessionSmartLeadTrack newsletter campaign performance1 year / Session

Note: Cookie names and lifespans may change as providers update their services. This table is reviewed at least annually.

5. Third‑Party Recipients)

ServiceLocation of ProcessingSafeguards
Stripe, Inc. (payments)USA / GlobalStandard Contractual Clauses (SCCs) & PCI‑DSS compliance
Google LLC – Google Analytics, YouTubeUSA / GlobalSCCs & IP anonymisation
Hotjar Ltd.EU (Ireland)GDPR‑ready, DPA in place
SmartLead AI, Inc.USASCCs; marketing DPA

We do not sell your personal data.

6. International Data Transfers

Where data is transferred outside the European Economic Area (“EEA”) or UK, we rely on SCCs approved by the European Commission, or other legally recognised mechanisms, to ensure adequate protection.

7. Data Retention

Data SetRetention Period
Newsletter subscription dataUntil you unsubscribe + 30 days for suppression list
Payment records (via Stripe)7 years (tax & accounting)
Analytics records26 months (Google Analytics default)

8. Security

We implement administrative, technical, and organisational measures, including HTTPS encryption, least‑privilege access controls, and regular penetration testing. No method of transmission over the Internet is entirely secure; however, we strive to use commercially acceptable means.

9. Your Rights (GDPR / UK GDPR)

You have the right to: * Access your personal data. * Rectify inaccurate data. * Erase data (‘right to be forgotten’). * Restrict or object to processing. * Data portability. * Withdraw consent at any time (this does not affect lawfulness prior to withdrawal). * Lodge a complaint with a supervisory authority (e.g., your local DPA or the Wyoming Attorney General).

To exercise any of these rights, contact us at privacy@matterfi.com.

10. Children’s Privacy

The Site is not directed to children under 16. We do not knowingly collect personal data from children. If we learn we have, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy occasionally. The “Effective Date” at the top indicates when the latest version took effect. We will notify you of material changes via email or a Site notice.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

MatterFi Inc.
Attn: Privacy Team
30 N Gould St, Ste R
Sheridan, WY 82801, USA
Email: privacy@matterfi.com
Tel: +1‑307‑555‑0120 (business hours MT)

© 2025 MatterFi Inc. All rights reserved.