Privacy

Is their phone number safe?

Here's exactly what happens to it.

• You type it once. After your coin is created, {{brand}} passes it to Privy, the sign-in service that texts login codes, so their share goes to a wallet they open with a text code sent to that number. {{brand}} doesn't save the number, doesn't write it in its logs, and never shows it to anyone.
• It never appears on the blockchain, on the coin page, on {{brand}}'s boards, or in the link you send.
• Privy keeps the number so they can log in. Nobody texts them unless they ask for a login code themselves. {{brand}} never messages anyone.
• Your name and theirs are locked inside the claim link. Your browser scrambles them before anything is sent, and the only key is in the link itself, so {{brand}}'s servers can't read them. Once they open the link and log in, it stops showing anything.
• Everything travels over encrypted HTTPS connections.

What's public

• Like any coin on Solana: the coin's name, ticker, picture, description and any website, X or Telegram links you add (all forever), its trades, the wallet its fees go to, how much that wallet has received, and where it was sent. The links show on the coin's pump.fun page and on {{brand}}'s Explore page. The claim link is private, so share it only with them.
• Right now each person has one wallet for all the coins made for them. Anyone who launches a coin for them sees that wallet's address, and anyone who knows it can see every coin that pays it.
• The wallet you launch from is public as the coin's creator, so coins you launch from the same wallet can be linked to you and to each other.
• The coin's picture is public forever. {{brand}} removes hidden details, like where a photo was taken, before uploading it. Only use someone's photo if they're OK with it. Coin names and descriptions can't include phone numbers or email addresses, and links can't include an email address or open a chat with a phone number.

What {{brand}} keeps

• For each coin: its name and ticker, any links you added, the wallet that launched it, the wallet its fees go to, the fee split, and when it went live.
• The locked claim card with both first names, which {{brand}}'s servers can't open, and a fingerprint of the link that can't be turned back into the link. The card is deleted once they open the link and log in.
• No phone numbers, no names in readable form, and no claim links.
• Launches that never created a coin are deleted after a day.

When someone logs in to claim, {{brand}}'s server looks up the balances of their wallets and doesn't keep that list.

On the Local page, the ZIP or postal code you type goes to {{brand}}'s server, which looks it up with zippopotam.us and OpenStreetMap (Nominatim and Overpass). Your browser never contacts them. Results are kept per ZIP for up to a week to spare those free services, and {{brand}} doesn't keep who searched for what.

What we can't promise

• Privy has to keep the full number so it can text login codes. People with access to Privy, or to {{brand}}'s Privy account, can see numbers and which wallets they own.
• Anyone who can read the Messenger chat, or anyone it's forwarded to, can open the link's greeting until they open the link and log in.
• For now a text message is the only way into their wallet. If their number is recycled or taken over, whoever holds it can get in.
• If someone launches a coin for you, your number reaches Privy without you asking first. That's needed so you can claim. Nobody texts you unless you ask for a login code.
• Netlify, which hosts {{brand}}, sees visitors' IP addresses. Privy sees people who open the claim page. The Solana data provider {{brand}} uses sees which wallets {{brand}} looks up together, but not who asked. Pinata, which stores coin pictures, sees the IP address of anyone whose browser shows one on the Explore page.

Removing your number

Email requests open soon. Until then you can move your money out any time by logging in on {{domain}}/claim.