The chip, the claim, the transfer

THE NFC CHIP

The chip goes on the stretcher, the backing board, the base or the frame — never on the face of the work. Anyone who holds a phone near it opens the statement's page, with no app to install.

On every read the chip itself writes an encrypted block and a signature into the address, and both change each time. A copied address replays a counter already seen: it still shows the statement, but with the warning « this read has been seen before (the label may be a copy) ». That is what tells a chip apart from a printed QR code.

To pair it you must hold it: you hold the chip near your phone and paste into the screen the address it opened. A chip already attached to another house is refused, without that house being named.

WHAT THE CHIP PROVES, AND WHAT IT DOES NOT

It proves that the label being read is the one recorded with this statement. It does not prove that the object it is stuck to is by the artist's hand. The public page says so to the reader, right next to the badge.

SENDING THE STATEMENT TO YOUR BUYER

The « Send to the buyer » button sends a personal link, valid for seven days, to the address you enter. The link is bound to that address: forwarding it to someone else gives them no rights.

Your buyer installs nothing and creates no account. They give their email address and tick a consent box. That address is stored encrypted; on the public page they appear only as « Private collection ». Their name is never published.

TRANSFERRING, THEN ERASING

A transfer always starts with you, never with the holder. Nothing moves until the new owner claims it: at that moment the previous holder becomes « transferred », the new one becomes active, and the public chain grows by one anonymous line.

The screen then reminds you of two obligations, without triggering anything: above €750, a resale involving a professional opens the artist's resale right; above €10,000, anti-money-laundering obligations apply.

If a holder asks for their data to be erased, the « Erase (GDPR) » button removes their address and their keys in place, and invalidates any link still in circulation. The public event, which carries no name, stays. Careful: the erasure fires on the first click, with no confirmation.