Legal
Privacy Policy
Draft for legal review
This is a placeholder written by the build team, not a lawyer. It must be reviewed and completed before launch.
What we collect
- Public X profile data (numeric ID, @, display name, picture, follower count, join date), cached for up to 24 hours to avoid repeated lookups.
- Whether an account’s owner has signed in, mirrored from the public contract.
- Public blockchain data about deposits to public addresses and the moves into private balances.
- Aggregate counters (for example, total number of sends). No handles, addresses or amounts are attached to them.
What we never store
- Your X access token. It is used once inside secure hardware to read your ID, then discarded.
- Your balances or activity. They are fetched live for your session only.
- Who sent what to whom. Private-send status is tracked by the sender’s own browser.
Analytics and cookies
We use a session cookie only while you are signed in. Analytics are self-hosted and aggregate-only: no third-party trackers, no handles, addresses or amounts.
Contact and rights
[To be completed by counsel: controller details, data rights, retention periods.]