Legal
Privacy Policy
PlanetPad is built to need very little about you: a public wallet address and a signature. This page lists what we collect, what we never collect, and what is public on chain no matter what we do.
The controller of the data described here is [OPERATOR: legal entity name], [OPERATOR: registered address].
1What we collect
| Data | When | Why |
|---|---|---|
| Public wallet address | When you connect Phantom and sign in | It is your account. Launches and coins (satellites) are recorded against it. |
| Sign-in signature | When you sign in | Our server verifies it to prove you control the wallet. It cannot move funds. |
| Session cookie | After sign-in | Keeps you signed in. See section 5. |
| IP address and user agent | On every request | Server logs, security, and rate limiting to stop abuse. |
| Terms acceptance record | When you accept the Terms | The terms version, the time, your IP address and user agent, kept as proof of acceptance. |
| Browser error reports | When a page hits an error | The error message, the page and the browser, so we can fix bugs. |
| Launch metadata | When you launch a coin | The planet you picked, name, ticker, description, image and links you submit. This is published. See section 3. |
| Payout records | Each hour, for every wallet that holds enough of a satellite (or of SUNCOIN, once it exists) to be due a reward | The wallet address, the coins held at the snapshot, the amount, the time, the status and, once sent, the transaction signature. We keep them so that a reward is paid once and never twice, and to show payout history on the site. The same kind of record is kept for the holders of a planet coin and of SUNCOIN, and for Sunlight. Records are made whether or not that wallet has ever signed in here, and while payouts are switched off they are stored as previews. |
| Burn records | When a planet's coin is bought and burned to launch a satellite, or SUNCOIN to mint a planet | The wallet address, the coin and the amount, the transaction signature and the time, with what the burn was used for and any unused credit. We keep them so that one burn cannot be used twice and so that a burn whose launch failed can pay for your next attempt. The wallet that minted a planet is shown publicly on that planet, and the creator and minter wallets that receive a share of a coin's fees are recorded on chain and shown on the site. |
On a phone, swipe the table sideways to read every column.
Watchlist. If you use the optional watchlist, it is stored in your own browser, not on our servers. Clearing your browser data removes it.
2What we do not collect
- No private keys or seed phrases, ever. We never ask for them, never see them and could not store them. They stay in your wallet.
- No email address or password for wallet sign-in.
- No advertising trackers. We do not run ad networks or sell data to advertisers.
- No name, postal address, phone number or identity documents.
We do not sell personal data.
3On-chain data is public
Anything on the Solana blockchain is public and permanent, and outside our control.
Your wallet address, every launch, buy and sell, your balances, and a coin's name, ticker, image and description are visible to anyone, on PlanetPad and on any other site or explorer. We read this public data to show charts, holders, levels and standings, and to work out who is due an hourly reward. A burn and a reward sent to your wallet are themselves public transactions, and the payout history of a satellite is shown on the site. We cannot edit or delete it, and deleting your data from our servers does not remove it from the chain.
If a wallet address can be linked to you, your activity with that wallet can be linked to you too. Use a separate wallet if that matters to you.
4How we use it
- To run the service: sign you in, record which planet each of your satellites orbits, show your coins.
- To check burns: read the burn from the chain, record it, and keep any credit for your wallet.
- To pay hourly rewards: read the public list of a coin's holders, work out each share, send it, and keep the record.
- To keep it safe: prevent abuse, enforce rate limits and the Terms, investigate attacks.
- To fix it: diagnose errors and measure whether the site is working.
- To meet legal duties and to keep proof that the Terms were accepted.
Legal bases, where the law requires one: [OPERATOR: legal bases for processing].
5Cookies and browser storage
We set one essential cookie: a session cookie that keeps you signed in. It is HTTP-only, is sent only to our site, and lasts up to 30 days or until you sign out. We do not use advertising or cross-site tracking cookies.
The site also keeps a few preferences in your browser's local storage, such as the watchlist and display settings. They stay on your device.
6Who processes data for us
We share data only with providers that help us run PlanetPad: [OPERATOR: hosting provider, RPC providers].
- Hosting and database: currently Railway. Server logs and our database live there.
- RPC providers: we read the Solana blockchain through RPC providers. Requests our server makes on your behalf can include your public wallet address. [OPERATOR: RPC provider names]
We may also disclose data when the law requires it, or to protect the service and its users from fraud and attacks.
7Fonts, charts and your wallet
- Google Fonts. The site's fonts are loaded from Google Fonts. Your browser contacts Google to fetch them, which exposes your IP address and user agent to Google.
- TradingView charts. The charting library is self-hosted on our own servers. Chart data comes from our servers, not from TradingView.
- Phantom. Your wallet is separate software with its own privacy policy. When you send a transaction, your wallet and the network it uses see your IP address and the transaction.
- Jupiter. Every coin is paired with SPCX. When you pay in SOL, or launch, our server asks the Jupiter swap service to price and build the swap between SOL and SPCX, and sends it your public wallet address and the amount so the transaction can be built for your wallet. Jupiter has its own privacy policy.
- pump.fun and other links. Links to pump.fun, explorers and other sites take you to services with their own policies.
8How long we keep it
| Data | Kept for |
|---|---|
| Session | Up to 30 days, or until you sign out |
| Server logs (IP, user agent) | [OPERATOR: log retention period] |
| Browser error reports | [OPERATOR: error report retention period] |
| Terms acceptance record | [OPERATOR: consent record retention period] |
| Account record (wallet address, satellites, launch metadata) | [OPERATOR: account data retention period] |
| Payout records (wallet address, amount, time, transaction signature) | [OPERATOR: payout record retention period]. Preview records are deleted after about 48 hours. |
| Burn records (wallet address, amount, transaction signature, time) | [OPERATOR: burn record retention period] |
| On-chain data | Permanent. Not ours to delete. |
9Your rights
Depending on where you live (for example under the GDPR in the EEA and UK, or the CCPA in California), you may have the right to:
- know what personal data we hold about you and get a copy;
- have it corrected or deleted;
- object to or restrict how we use it;
- receive it in a portable form;
- not be treated worse for using these rights;
- complain to your data protection authority.
To use a right, write to [OPERATOR: contact email]. We may ask you to sign a message with your wallet to prove the request is yours. We will answer within [OPERATOR: response time for rights requests].
Two limits apply. We cannot change or erase blockchain data. And we may keep records we are legally required to keep, such as proof of terms acceptance and records of payouts made.
EU and UK representative, if one is required: [OPERATOR: EU / UK representative]. Data protection contact: [OPERATOR: data protection officer or contact].
10International transfers
Our providers may process data in other countries, including the United States. Safeguards used for those transfers: [OPERATOR: transfer safeguards and hosting region].
11Children
PlanetPad is not for children. You must be at least [OPERATOR: minimum age] to use it. We do not knowingly collect data from anyone younger. If you believe a child has used the site, contact us and we will delete what we hold.
12Changes
We may update this policy. The effective date at the top will change, and we will flag important changes on the site.
13Contact
Privacy questions and requests: [OPERATOR: contact email].
See also the Terms of Use and How PlanetPad works.