Privacy policy

• You sign in with a wallet. We never ask for your email, name or seed phrase.
• We store what the game needs: your wallet address, username, items, balance history and trades.
• We use one sign-in cookie. No advertising or analytics trackers.
• We do not sell your data.

• Account: your wallet address, the username and avatar you choose, when you joined, and your sign-in sessions.
• Activity: packs bought and opened, cards owned, listings, offers, sales, balance changes and notifications.
• Deposits and withdrawals (after the token launches): the sending or receiving wallet, amounts and Solana transaction signatures.
• Technical data: IP address and browser details in server logs, and briefly for rate limiting and abuse checks.
• Trader claims: if you claim a trader page or ask to be removed, the wallet you signed with and any reason you give.

Trader pages and ratings come from public Pump.fun trading activity of the wallets we rate. We store that trade history to calculate and check ratings. A trader can claim their page, or ask to be removed, by signing with their wallet on their trader page. After removal we stop showing the page and stop updating the rating. [How long removed data is kept, to be confirmed.]

Your username and profile page, which shows your join date, collection and recent activity. Market trades appear in the public activity feed. Deposits and withdrawals are Solana transactions, which anyone can see on the blockchain.

We set one cookie, tp_session, to keep you signed in. It is required for the site to work, cannot be read by scripts, and lasts up to 30 days or until you sign out. There are no advertising, analytics or third-party cookies.

• To run your account, the pack store, the market and your balance.
• To send the notifications you see in the app.
• To prevent fraud and abuse, and to check that balances and items add up.
• To meet legal duties such as keeping financial records.

Only the services that run TraderPacks for us, under contract:

• Supabase, our database host. Data is stored in Mumbai, India (AWS ap-south-1).
• Vercel, our web host. [To be confirmed at launch.]
• Helius, which we use to read Solana transactions for deposits and withdrawals.

We share data with authorities only when the law requires it.

Balance, trade, deposit and withdrawal records are kept permanently, because our ledger is append-only and every balance must be traceable. Sessions expire after 30 days. If you ask us to delete your account, we remove your username and avatar and keep the financial records the law requires. [Log retention periods, to be confirmed.]

Depending on where you live, you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to [contact email, to be confirmed]. [Data controller details and supervisory authority, to be confirmed.]

Connections use HTTPS, sessions can be revoked from Settings, and balances only change through checked database operations. TraderPacks is not for anyone under 18.

We will post updates here and tell signed-in users about important changes. See also the terms of use.