Quick answer: You own a token on a blockchain that records your wallet as the holder of a specific ID in a specific collection. You do not automatically own the copyright to the artwork, and in most cases you do not own the image file either, since it usually sits off-chain on IPFS or a company’s web server. What you can actually do with the art, from personal display to full commercial use, depends entirely on the license the project attached to the token; licenses range from Bored Ape Yacht Club’s broad commercial grant to CC0 collections like Nouns that waive copyright entirely, to personal-use-only terms common on licensed-IP projects. Regardless of license, every token gives you a verifiable, transferable ownership record and whatever access rights (Discord roles, events, airdrops) the project ties to holding it. Read a collection’s published license before buying, since the default under copyright law, with no license, is personal use only.
That gap between “I bought this NFT” and “I own this picture” is where most of the confusion in the market comes from. Here is what the token actually gives you, what it does not, and how to check before you spend anything.
The token and the artwork are two different things
An NFT is a record in a smart contract. The contract holds a list of token IDs and the wallet address that currently controls each one. When you buy, the contract updates that list. That is the whole of what transfers on-chain.
The contract does not contain your picture. It contains a pointer, usually a field called the token URI, which returns a small JSON file describing the token. That JSON holds the name, the traits, and a link to the image. Buying the token means you control the entry in the ownership list. It does not mean a copy of the artwork was deposited into your wallet.
This is not a technicality that only matters to developers. It explains why an NFT can keep trading normally while its picture stops loading, and why two collections that look identical from the outside can give buyers completely different rights.
Where the image actually lives
There are three common setups, and they carry very different risk.
The safest is fully on-chain, where the artwork is generated or stored inside the contract itself. Nothing external needs to stay online for the image to exist. This is rare because storing data on Ethereum is expensive, so it tends to be limited to small generative or pixel-based art.
The most common setup is IPFS, a decentralized storage network. Files on IPFS are addressed by a hash of their contents rather than by a server location, so the link cannot silently point at a different file later. The catch is that someone still has to keep hosting the data. If every node that pinned the file stops doing so, the link resolves to nothing.
The weakest setup is a normal web server or a cloud host controlled by the project. The token points at a URL, and that URL is only as durable as the company paying the hosting bill.
The April 2025 CloneX incident showed what that looks like in practice. Cloudflare downgraded the account belonging to RTFKT, the Nike-owned studio behind the collection, to a free plan, and the image hosting was restricted for violating terms of service on high-bandwidth content. More than 19,000 NFTs showed an error message instead of artwork across OpenSea and Blur until the account issue was fixed. The tokens were untouched and ownership was never in question. The pictures simply were not there.
Before buying into a collection, look at the token URI on a block explorer. If it starts with ipfs:// you are in reasonable shape. If it points at a company domain, you are trusting that company to keep paying for hosting indefinitely.
Copyright stays with the creator by default
Under copyright law, the person who created a work holds the rights to it. Selling a copy of that work, or a token pointing at it, does not transfer copyright. That transfer has to be written down. So unless a project grants you rights in its license, buying the NFT gives you no more right to reproduce the artwork commercially than buying a poster gives you the right to print your own.
Nearly every serious collection publishes a license to fill that gap. They fall into a few recognizable shapes.
Broad commercial license
Bored Ape Yacht Club is the best-known example. Yuga Labs grants each holder an unlimited worldwide license to use, copy, and display the purchased art, including creating derivative works and earning revenue from them. That covers putting your ape on merchandise or building a brand around it. What it does not cover is the Bored Ape Yacht Club name and logo themselves, which stay with Yuga Labs as trademarks. The distinction matters: you get rights to your specific artwork, not to the collection’s brand.
CryptoPunks works similarly. After Yuga Labs acquired the collection from Larva Labs in March 2022, it published a license in August 2022 granting holders commercial rights to their individual Punk, with no revenue cap. That license is not public domain. Yuga Labs still owns the underlying copyright and grants terms to holders, including restrictions on hateful or discriminatory use, and no right to the CryptoPunks or Yuga Labs trademarks.
CC0 and public domain
Some projects waive their copyright entirely using Creative Commons Zero. Nouns is the best-known case. The artwork is in the public domain, so anyone can use the imagery for anything, whether they hold a Noun or not. Moonbirds moved to CC0 in August 2022 as well.
CC0 is worth understanding for what it does not do. It does not give holders exclusive rights. It removes the copyright question for everyone, holders and non-holders alike. Under CC0 your token is proof you own that specific NFT, and nothing about the artwork is restricted to you.
Personal use only
Plenty of collections, especially those tied to established brands, sports leagues, or entertainment IP, grant only a personal, non-commercial display license. You can show it, use it as a profile picture, and resell the token. You cannot print it on products and sell them. This is the default for licensed IP, because the brand cannot give away commercial rights to characters it licensed from someone else.
What you get regardless of the license
Four things hold true across essentially every collection.
You can prove ownership. The blockchain record is public and verifiable by anyone, which is the core function the token performs.
You can transfer or sell it. Control of the token is yours, and no marketplace or issuer can move it without your wallet’s signature.
You can display it. Every mainstream license permits personal display, including profile pictures and wallet galleries.
You can use it for access. Token-gated communities, events, and airdrops read your wallet to confirm you hold the asset. This is often the most concrete benefit a collection offers, and it is independent of copyright.
How to check before you buy
Find the license and read it. Look for a page on the project’s official site, often at a URL ending in “license” or “terms.” If the project has no published license, assume you get personal use and nothing more, because that is what the law gives you by default.
Check who holds the copyright. A license grants you use. It rarely transfers ownership of the copyright itself, which usually stays with the issuing company. That matters if the project shuts down or gets sold, since the new owner inherits the copyright and can change future terms.
Look at the storage. Pull up the contract on Etherscan or a similar explorer, call the token URI function for any token ID, and see where it points.
Separate the artwork rights from the brand rights. Almost no license gives you the collection’s trademarks. You can commercialize your specific character under a permissive license. You cannot open a store selling official-looking collection merchandise.
Watch for terms that can change. Some licenses reserve the right to be updated by the issuer. Others tie your rights to continued compliance with the terms, meaning the license can be withdrawn if you violate them.
The bottom line
Buying an NFT gets you a verifiable ownership record, the ability to sell or transfer it, and whatever access rights the project attaches to it. Everything beyond that is a licensing question, and the answer sits in a document on the project’s website rather than in the blockchain itself. The projects worth your money publish that document clearly and store their artwork somewhere that does not depend on one company’s hosting invoice.
If you have not made a purchase yet, our step-by-step guide to buying your first NFT covers the mechanics. For the questions to ask about a collection’s legitimacy before you commit, read how to spot a fake or scam NFT project. And if you want the fuller history of how the licensing question came to matter, our CryptoPunks case study walks through it.
This is general information, not legal advice. License terms differ by project and change over time, so read the current terms for any collection you are considering.