Privacy policy

Last updated: TODO(lawyer) — date of review

This policy explains what the RIP Interface, operated by [OPERATOR LEGAL NAME — TODO(lawyer)], does with data. Our approach is simple: collect as little as possible, keep it briefly, and never link a wallet to a person.

What we process

  • Wallet addresses you enter or connect. Blockchain addresses are public. We use them to fetch public on-chain data. The resulting analysis is cached for up to about 10 minutes under a keyed hash (HMAC) of the address, then expires. We do not store wallet addresses together with IP addresses or any other identifier.
  • “Buried by N wallets” counts. We keep a statistical counter (HyperLogLog) per coin, fed with keyed hashes of addresses. It produces an approximate count and cannot be reversed into a list of addresses.
  • Candles, votes, guestbook notes. These are tied to a random identifier generated in your browser (stored in localStorage) and hashed on our server. They are never tied to a wallet. Guestbook notes you write are public.
  • IP addresses. Used transiently for rate limiting and abuse prevention, as a keyed hash that changes every day. Our hosting provider may also keep standard server logs. TODO(lawyer): name the host and its log retention.
  • Approximate country. Read from a header added by our hosting provider, only to decide whether transactional features are available in your region. Not stored.
  • Analytics. Cookieless, first-party counts only: page views per page type (a wallet page is counted as “a wallet page”, never with its address) and an approximate daily visitor count made from a hash that changes every day and can’t be reversed. No cookies, no cross-site tracking, no advertising, no third parties. If your browser sends Do Not Track or Global Privacy Control, you are not counted.

What we do not do

  • We do not ask for, receive or store private keys or seed phrases.
  • We do not collect emails, names or phone numbers in this version.
  • We do not sell personal data or use it for advertising.
  • We do not set tracking cookies.

Third parties

To build your graveyard, our servers request public data from providers such as RPC nodes, Helius, Jupiter, DexScreener, GeckoTerminal and RugCheck. These requests include the wallet address or token addresses being looked up, and are subject to those providers’ policies. Your browser does not contact these providers directly. Your wallet extension is third-party software governed by its own policy.

Optional features

If you opt in to the Telegram hospice bot (when available), we store your Telegram chat id and the address you asked us to watch, and nothing else, until you unsubscribe with /stop.

Your rights

Depending on where you live, you may have rights to access, correct, delete or object to processing of personal data. Because we deliberately avoid linking data to people, we may be unable to identify data relating to you. TODO(lawyer): GDPR/UK GDPR/CCPA wording, legal bases, controller details, and DPO if needed.

Contact

[legal contact email — TODO(owner)]