1. Information the service handles
| Information | Examples and purpose |
|---|---|
| Account details | Automatically assigned or chosen username, account identifier, creation time, sign-in wallet and account preferences. |
| Sign-in and security | Wallet-verification challenges and session records. The owner’s legacy recovery records can also contain password hashes and two-factor setup/recovery information. Your wallet’s private key is never needed. |
| Public content | Profile picture, bio, username, token name, ticker, description, image, links, and the relationship between a creator profile and launched coins. |
| Names and pictures | The names you type or roll; the name, ticker and seed used to draw a picture; drawn and uploaded pictures. A refused picture is not stored. |
| Transactions | Launch reviews, reviewed $BTC price references, curve targets, signed transactions submitted through TITPAD, signatures, amounts, fee and reward records, status and recovery history; the treasury’s revenue, burn, buyback and payday records, including the holder snapshots a payday was planned from. |
| Operational data | IP addresses used to handle requests and apply abuse limits; request metadata, error details, moderation records, and any logs maintained by the hosting infrastructure. |
The normal account flow does not ask for a legal name or email address. Information you choose to put in a public profile or launch can still identify you.
2. What other people can see
Your creator username, bio, picture, publicly listed launches and displayed market history are public. Usernames can be found through search, and search results link to public creator profiles. Hidden and archived launches are excluded from public results.
Solana wallet addresses, balances, transaction signatures, token holdings, transaction activity and onchain fee settings are public blockchain information. Connecting a username to a launch can make that activity easier to associate with you. The bonfire and payday pages publish the treasury’s totals, its rounds and the signatures of its transactions; the payday pays named wallets on chain, so a top-50 wallet’s share is public there, as is every other transfer on Solana.
Launch images and metadata can be uploaded to public storage through Irys. They may remain accessible independently of TITPAD. Public profile and token images are also served from addressable URLs on the site. Avoid putting secrets or information you want to keep private in an image, bio or token description.
3. Wallets and security
When you use an external wallet, your wallet app signs the login message or transaction. TITPAD receives the address, proof and any transaction you submit; this does not require sending that wallet’s private key to TITPAD. TITPAD does not generate a personal wallet for new accounts.
Separate launch, rewards and treasury wallets use service-managed signing keys stored encrypted. The treasury uses a dedicated signing key stored encrypted, with saved revenue, burn, buyback, payday and withdrawal records; its public address and confirmed transactions are visible on chain. TITPAD controls these service-managed keys and uses them to perform the configured launch, fee, reward, recovery, burn and payout operations. They are separate from your connected wallet’s private key.
4. Cookies and browser data
TITPAD uses a relay-session cookie to keep you signed in. It is HTTP-only, so site scripts cannot read its value. Wallet verification uses a short-lived curve-wallet-proof cookie, which expires after five minutes. Blocking these cookies prevents the corresponding sign-in flows. The site remembers your light or dark theme choice in your browser’s local storage. Your wallet app may keep its own connection and preference data. Clearing site data or signing out ends your browser access; disconnecting a wallet alone is not the same as signing out or stopping an already authorized onchain operation.
5. How information is used and shared
The service uses this information to operate accounts, display profiles and markets, draw pictures, prepare and track transactions, calculate rewards and fees, run the treasury, recover pending operations and prevent abuse. Authorized administrators can inspect relevant account and launch records for moderation and support.
Hosting and storage providers process the data needed to operate the site. RPC, market-data (DexScreener), routing (Jupiter) and blockchain services receive the addresses, queries, transaction data or metadata needed for their part of an operation. The picture generator sends the coin’s name and ticker to a hosted image model through OpenRouter, which processes them under its own terms and those of the model’s provider; TITPAD asks the provider not to retain or train on them where the provider offers that choice. Public transaction data is broadcast to Solana. An external link or embedded third-party view may expose your IP address and request information directly to that provider. Records may also be disclosed when required by applicable law or necessary to investigate misuse and protect users or the service. Independent providers handle data under their own terms and may process it in other countries.
6. Retention and uploaded images
Account, launch, fee, treasury and transaction records are retained to operate accounts, reconcile activity and investigate abuse. The application does not currently impose an automatic deletion date on account records or uploaded media. Infrastructure logs and backups can have separate retention periods.
You can replace or remove the picture shown on your profile. That changes the profile reference; it does not automatically erase the old uploaded file, cached copies or any image already used in token metadata. Uploaded images currently have no automatic expiry. TITPAD cannot erase confirmed Solana history or guarantee removal from permanent storage and third-party caches. Hidden coins and manually archived launch requests remain accessible in the private Archived tokens section; archiving retains the records, it does not delete them.
7. Your choices
You can edit your public bio and picture, change your username once every 30 days and manage the supported account settings. You can stop using the service, disconnect your external wallet, sign out and clear browser data. There is currently no self-service account-deletion tool. Depending on applicable law, you may have rights to access, correct or request deletion of personal information. Nothing in this notice limits those rights, and deleting offchain information cannot remove a public blockchain transaction.
For privacy questions or to ask how to exercise applicable rights, contact TITPAD on X and ask for a private support channel. Do not post sensitive information publicly or send credentials, private keys, seed phrases or recovery codes. Updates to this notice will appear on this page with a revised effective date.