Privacy Policy

Last updated: March 2026

1. Overview

TokenStart ("we", "our", "the Service") is committed to protecting your privacy. This Policy explains what data we collect, how we use it, and your rights regarding that data.

2. Data We Collect

• Wallet address — your public Solana wallet address, used to construct transactions. We never receive or store your private key or seed phrase.
• Token metadata — name, symbol, description, and image you provide during token creation. This data is uploaded to IPFS (public, permanent storage) and becomes publicly accessible on-chain.
• Server logs — standard HTTP access logs (IP address, timestamp, request path, response code) retained for up to 30 days for security and debugging purposes.

3. Data We Do NOT Collect

• Private keys, seed phrases, or any wallet secrets.
• Cookies or persistent tracking identifiers.
• Financial account information.
• Personal identity information (name, email, phone).

4. How We Use Data

• To construct and broadcast Solana transactions on your behalf.
• To upload token metadata to IPFS via Pinata.
• To maintain service security and investigate abuse.

5. Third-Party Services

We use the following third-party services which have their own privacy policies:

• Helius / Solana RPC — blockchain node infrastructure for submitting transactions.
• Pinata — IPFS pinning service for storing token metadata. Data uploaded to IPFS is public and permanent.

6. IPFS and Blockchain Data

Token metadata uploaded to IPFS and data written to the Solana blockchain are public and permanent by nature. We cannot delete or modify this data after it is published.

7. Data Retention

Server logs are retained for up to 30 days. Temporary session data used during token creation (mint session identifiers) is held in memory for up to 30 minutes and then automatically deleted.

8. Security

We implement reasonable technical measures to protect data in transit (HTTPS/TLS) and at rest. However, no system is perfectly secure. We recommend using a dedicated wallet for dApp interactions.

9. Your Rights

Since we do not collect personal information, there is no personal data to access, correct, or delete. Server logs are automatically deleted after 30 days.

10. Changes

We may update this Privacy Policy at any time. Continued use of the Service constitutes acceptance of the updated Policy.

11. Contact

For privacy-related questions, reach out via the social links in the footer.