Privacy

If you create an account we store your email and a scrypt password hash, plus optional alert destinations (Telegram chat id, email, webhook URL) that you save. We do not collect seed phrases or wallet private keys.

Scans query Solana RPC and a public DEX index with the mint address you paste. Share links (`/r/…`) are public snapshots of that data.

Payments, if enabled, are processed by Stripe. We store Stripe customer and subscription ids so the plan can update. Stripe's privacy policy covers card data.

Session cookies are httpOnly. On a self-hosted box, account and watchlist JSON live in the operator's `data/` directory. The operator is responsible for backups and access control.

Outbound alerts are sent only to destinations you configure. The Telegram bot token is a server secret; chat ids are per-account when you save them.