$ cat ./docs/privacy_policy.md
Privacy Policy
1. Non-Custodial Architecture
- This application is fully non-custodial. We never have access to your private keys, seed phrases, or wallet credentials.
- All transactions are signed locally in your browser using your connected wallet (Phantom, Solflare, Backpack, or Glow).
- We cannot initiate, modify, or reverse any transactions on your behalf.
2. Data We Do Not Collect
- We do not collect personal information (name, email, phone, address).
- We do not use cookies or third-party tracking scripts.
- We do not use analytics services (Google Analytics, Meta Pixel, etc.).
- We do not store your wallet private keys or seed phrases.
3. Data We Process
- Wallet public address — used only in your browser to display your stakes and balances. It is not sent to our servers.
- Minimal server logs — our server may log basic request metadata (IP address, timestamp) as part of standard web server operation. These logs are used solely for debugging and security monitoring, and are automatically rotated.
4. Third-Party Services
The application connects to the following third-party services to function:
- Solana RPC nodes — to read blockchain data and submit signed transactions.
- Sanctum API — to fetch liquid staking token data.
- Jupiter API — to obtain swap quotes and execute token swaps.
- CoinGecko API — to fetch current token prices.
- Google Fonts — to load the JetBrains Mono typeface.
Each of these services has its own privacy policy. We recommend reviewing them if you have concerns.
5. Local Storage
- We use browser localStorage to save UI preferences (theme) and pending multi-step operation state.
- No sensitive data is stored in localStorage.
- You can clear this data at any time through your browser settings.
6. Open Source
- All client-side code is unminified and fully readable in your browser's developer tools.
- You can verify that no data is being sent to unauthorized endpoints.
7. Contact
For privacy-related questions, contact us at [email protected].