Privacy Policy · Pootpad

1.Scope

This Policy covers the Interface and the off-chain features we operate with it, such as social-account fee claims, takeover applications, reports and moderation. It does not cover the blockchain itself, your wallet, or third-party services you reach from the Interface (section 7), which have their own policies.

2.What we collect

2.1Public wallet data and signatures

When you connect a wallet we see its public address and the network it is on. We read and index public blockchain data about that address: balances, trades, tokens launched, creator fees and claims. When you sign a message, for example to prove you control a wallet when claiming creator fees or applying for a takeover, we receive the message and the signature and keep them where needed to verify and record the action. We never receive your private key or recovery phrase.

2.2Content you submit

Token metadata you enter when launching (name, symbol, description, website and social links), images you upload and the IPFS address they are stored at, and social-account handles you name as fee recipients.

2.3Takeover applications and links

When you apply for a token's creator fees: the token, your wallet and payout wallet, your answers, the verification code, the links to your verification post, proof post and any other links you add, your token holding at the time, and the signed message. We also keep the application's status and our reviewers' notes.

2.4Reports

When you report a token: the token, the reason and any details you type. To limit abuse we store only a keyed hash of your IP address with a report, never the IP address itself.

2.5Social-login details when you claim fees

When you log in with a social account to claim creator fees, we receive from that platform, through the login service we use: the platform, your username, the platform's account identifier and your profile picture. We do not receive your social-account password. We also record the wallet you claim to and the transactions we send to offer you the creator role. When a launcher names a social handle, we check whether the account exists and fetch its public profile picture.

2.6Device and network data

Like any website, our servers receive technical data when your browser connects: your IP address, browser and operating system, device type, the pages and data requested, the referring page and timestamps. We use it to deliver the Interface, keep it secure, limit abuse and fix errors.

2.7Browser storage and session cookies

Preferences and a few records kept in your own browser, and session cookies for logins. See section 8.

3.Where it comes from

From you, when you enter or upload something or sign a message.
From your wallet, which shares your address and signatures with the Interface when you approve it.
From the public blockchain and IPFS.
From the social platform you log in with when you claim fees, and from public profile lookups for handles named at launch.
From your browser and device, automatically, when you use the Interface.

4.How we use it

to run the Interface: show tokens, charts, your portfolio and creator fees, and prepare transactions for your wallet;
to index and display public blockchain data;
to process creator-fee claims, verify social accounts and wallet ownership, and handle takeovers and marketing milestones;
to review reports and moderate content;
to keep the Interface secure, prevent fraud and abuse, apply rate limits, and enforce our Terms of Use, including eligibility and restricted jurisdictions;
to diagnose problems and improve the Interface;
to comply with legal obligations and respond to lawful requests; and
to reply when you contact us on X.

We do not sell your information, use it for advertising or build advertising profiles. Takeover applications are reviewed by people, not decided automatically.

5.Blockchain transparency

Public blockchains are public and permanent. Your wallet address and everything it does on-chain (transactions, balances, launches, claims, accepted takeovers) can be seen by anyone, and cannot be changed or deleted by us or by anyone else.

Files on IPFS, including token logos, are public and permanent. We cannot delete them, and copies may exist elsewhere.

When you claim fees for a social account, the token page can show that the account has claimed, and the creator role moves on-chain to your wallet, so others may be able to link your social account to your wallet.

We do not sell or rent personal information. We share it only as follows:

Service providers that help us operate the Interface, such as hosting, databases, blockchain data access, file storage, social login, profile-picture lookups and security. They may use it only to provide their services to us.
Legal requirements and protection: when we believe in good faith it is required by law, regulation, legal process or a governmental request, or needed to protect the rights, safety or property of our users, the public or Pootpad, or to investigate fraud, security issues or breaches of our Terms of Use.
Public surfaces: what you submit for display (token details, logos, social fee-recipient badges and their claim status) and everything on-chain is visible to everyone. Takeover applications are seen by the people at Pootpad who review them; your verification post is public on the platform where you posted it.
Changes to the Interface: if the Interface is reorganised or transferred, information may pass to whoever operates it next, under this Policy.
Aggregated or de-identified information that cannot reasonably identify you.

7.Third-party services

Your wallet, the social platform you log in with, block explorers, third-party trading platforms, Bubblemaps and token data sites are run by others under their own privacy policies. When you use them or follow a link to them, they may collect information about you.

Some content on the Interface, such as fonts, token images and profile pictures, loads from third-party servers, which receive your IP address and browser details as part of that request.

8.Browser storage and cookies

Local storage. The Interface keeps a few things in your own browser: your acceptance of the Terms and this Policy (the version and when), trading preferences such as slippage and preset amounts, your watchlist of starred tokens, portfolio view filters, form drafts while you fill them in, and the wallet connection state kept by your wallet connector. This stays on your device and is not sent to us.

Session cookies. When you log in with a social account to claim fees, we set a session cookie that keeps you logged in during the claim. Similar cookies are used for administrator sign-in. They are used only for those functions and expire after a short time or when you log out.

We do not use advertising cookies or cookies that track you across other websites. You can clear storage and cookies in your browser settings at any time; the Interface will then forget your preferences and ask you to accept the Terms again.

9.How long we keep it

On-chain data and IPFS files are permanent and outside our control.
Indexed blockchain data is kept while the Interface operates; it is public anyway.
Submitted content, takeover applications, reports and claim records are kept as long as needed for the purposes above, to keep a record of decisions and payments, to resolve disputes and to meet legal obligations.
Server logs and other technical data are kept for a limited period and then deleted or aggregated, unless needed longer to investigate a security incident or abuse.
Session cookies expire after a short time or when you log out.

10.Security

We use reasonable technical and organisational measures to protect information, including encrypted connections, access controls, keeping secrets on our servers only, and storing report IP addresses only as keyed hashes. No system is completely secure, and we cannot guarantee the security of information sent over the internet.

Never send us your private key or recovery phrase. We will never ask for them. Keep your wallet and devices secure.

11.International processing

Pootpad and our service providers may process information in countries other than the one you live in, where data protection laws may differ. Blockchain data is copied worldwide by the network's nodes. By using the Interface you understand that your information may be processed in those countries.

12.Your choices

Disconnect your wallet at any time from the wallet menu, and remove the site's connection in your wallet.
Clear local storage and cookies in your browser.
Log out of the social session when you have finished claiming.
Keep personal information out of anything public: token names, descriptions, images and links, and the posts you link in an application. Once on-chain or on IPFS, it cannot be removed.
Send requests through X: you can ask what information we hold about you, or ask us to correct or delete it where we can. We may ask you to prove you control a wallet by signing a message (never by sharing a key). We cannot change or delete on-chain data or IPFS files. Where a law gives you specific rights, we respond as that law requires.

13.Children

The Interface is not for anyone under 18, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us on X and we will delete what we can.

14.Changes to this Policy

We may update this Policy. When we do, we change the effective date at the top of this page, and for material changes the Interface asks you to accept again the next time you connect a wallet.

15.Contact

Questions and requests: send us a direct message on X at @pootcoinxyz (x.com/pootcoinxyz), our only official contact channel.