PLACEHOLDER DRAFT — this text was generated as a starting point and has not been reviewed by a lawyer. it must be reviewed and finalised by qualified counsel in every jurisdiction tuft serves before any mainnet launch. it is not legal advice.

privacy policy (placeholder draft)

draft updated 25 September 2026

what we process

your IP address and derived country, at the network edge, to enforce regional restrictions (we keep the country, not the address). your wallet public key, when you connect one, to build transactions and to screen it against sanctions lists (the key is sent to our screening endpoint and, when configured, to a third-party screening provider). reports you submit (token, reason, free text, browser user agent). standard server logs.

what stays in your browser

paper balances, paper trades, your chosen mode, your mainnet acceptance (with timestamp), pasted RPC endpoints. these are stored in localStorage on your device and never sent to us. clearing site data removes them.

what we do not do

no accounts, no passwords, no e-mail collection, no advertising trackers, no sale of data. public blockchain data (your transactions) is public by nature and outside our control.

third parties

Solana RPC providers, the PumpPortal websocket, IPFS gateways and an image resizing CDN receive requests from your browser and see your IP address under their own policies. a sanctions screening provider may receive wallet addresses.

retention

edge logs: [TO BE COMPLETED]. reports: until reviewed and for [TO BE COMPLETED] after. legal basis, controller identity, data-subject rights and supervisory authority: [TO BE COMPLETED BY COUNSEL].