stonkityPrivacy, plainly.
What is stored.
We store public wallet addresses, sign-in challenges, hashed session tokens, saved launch metadata and the charity selection used for a launch draft. The server may retain security and operational logs. Browser-local draft fields stay in localStorage until you clear site data. Artwork previews remain in browser memory.
What is never requested.
We never request your seed phrase or private key. Wallet sign-in uses a single-use, expiring challenge and an HttpOnly session cookie. We do not sell wallet information.
Third-party services.
Vercel hosts the website. Railway hosts the API, worker, PostgreSQL and Redis. Donate.gg supplies charity data and images; StonkFun supplies market availability. Website typefaces are served directly by this website. These services receive ordinary connection metadata when accessed.
Retention and requests.
Authentication sessions expire after twelve hours. Expired challenges are cleaned by the worker. Financial and audit records, when activated, require retention for reconciliation. A verified operator contact and formal data-retention policy must be published before public financial launch.