Privacy Policy

This policy explains what information DevBundler collects and how it is used.

#What we collect

• Account: your email address, when you signed up and last signed in, and whether two-factor sign-in is on. Your password is never stored; it only derives your encryption key.
• Wallets: the addresses of wallets in your account and their private keys, encrypted. We cannot read the keys without your password.
• Activity: your launches, trades, transfers, fees paid, plan payments, referral earnings, settings and labels.
• Referral and source: the referral code or link you signed up with, and the website or campaign that brought you (for example "google" or a utm_source). Not your browsing history.
• Network data: your IP address is used in memory to limit abuse (sign-in and sign-up limits). For referral fraud checks we store a keyed hash of the IP you signed up from, not the address itself.
• Errors: when something fails on the server we keep a short technical record (where it failed and a redacted message) to fix it.

We do not use advertising trackers or sell your information.

#Cookies

We use a small number of first-party cookies: a session cookie that keeps you signed in, a cookie that remembers a referral link you followed (30 days), and one that remembers which site brought you (30 days). We also keep a few preferences in your browser, such as the color theme.

#Public blockchain data

Everything your wallets do on Solana is public by design and visible to anyone. Share cards you make are public pages showing the results you chose to share, never your wallet addresses.

#Who else sees data

• Blockchain infrastructure: RPC providers and Jito block engines receive the transactions we send for you and the addresses we look up.
• Token hosting: token images and metadata you upload go to IPFS through Pinata or pump.fun, where they are public.
• Hosting: our server provider stores the encrypted databases.
• Authorities: if the law requires it.

#How long we keep it

Account and activity data are kept while your account exists. Encrypted backups are kept for up to 14 days. Error records are trimmed automatically. Fee and payment records may be kept longer where needed for accounting.

#Your choices

You can export your wallet keys at any time. You can ask us to delete your account; we will delete your data except records we must keep, and your wallets will no longer be recoverable through DevBundler, so move your funds first. You can also ask what data we hold about you. Contact: contact@devbundler.com.

#Changes

We may update this policy. The date below shows the current version.