privacy policy

1. what we collect

• Wallet address(es) you choose to import — a public identifier — and the on-chain transaction history we fetch for it.
• Email address — for magic-link sign-in and account-related messages.
• Journal notes and tags you write, and the AI sentiment scores derived from them.
• Payment metadata — plan purchased, a transaction/payment ID, and timestamps. Card and crypto payments are handled by our processors; we never see or store your card number or crypto private keys.
• Basic usage & device data — pages viewed, referrer, coarse analytics — to keep the product working and improve it.
• For Starter Kit buyers, the GitHub username you enter, so we can send your repo invite.

2. what we do NOT collect

We do not collect, request, or store your private keys, seed phrases, or any signing credentials. We do not have the ability to move your funds. Wallet access is strictly read-onlyagainst a public address. Anyone asking you for a seed phrase "for DegenJournal" is a scammer.

3. how we use it

• To import your trades and generate your stats, insights, and journal.
• To authenticate you and keep your account secure.
• To process payments and grant the right plan or repo access.
• To send transactional email (sign-in links, receipts, renewal reminders, support replies).
• To debug, prevent abuse, and improve the product.

We do notsell your personal data, and we don't run third-party advertising trackers on you.

4. who processes your data (subprocessors)

To run DegenJournal we share the minimum necessary data with:

• Supabase — database, authentication, and storage of your account, trades, and notes.
• NowPayments — crypto checkout and payment confirmation.
• Lemon Squeezy — card checkout and receipts (as it comes online).
• Helius — Solana on-chain data for the wallet addresses you import.
• Hyperliquid — public perps trading data you choose to import.
• Resend — outbound transactional email.
• Vercel — hosting, serverless functions, and product analytics.
• Cloudflare — DNS, CDN, and network-level protection.
• GitHub — for Starter Kit buyers only, to grant private-repo access.

Each provider processes data under its own privacy terms. Sending a public wallet address to a chain-data provider is inherent to how the product works.

5. cookies

We use a small number of essential cookies— chiefly to keep you signed in (your auth session) and to remember a referral code if you arrived via one. We use privacy-respecting product analytics that don't require intrusive cross-site tracking. Because we don't run advertising cookies, there's no ad-consent wall to click through.

6. how long we keep it

We keep your account data for as long as your account is active. Payment records may be retained longer where required for tax, accounting, or fraud-prevention. When you delete your account (or ask us to), we remove your personal data from active systems within a reasonable period, except anything we're legally required to keep. Note that on-chain transactions are public and permanenton the blockchain itself — that's outside anyone's control, including ours.

7. your rights

You can access, correct, export, or delete your data. Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA/CPRA), you may have additional rights, including to object to certain processing. To exercise any of these, email hello@degenjournal.xyzfrom your account address and we'll handle it — we don't charge for reasonable requests.

8. security

We use reputable infrastructure, encryption in transit, row-level security on our database so accounts can only read their own data, and service-role-only writes for anything sensitive like plan changes. No system is perfectly secure, but we work to keep the attack surface small — starting with never holding your keys.

9. international transfers & children

Our providers may process data in the United States and elsewhere. By using DegenJournal you understand your data may be handled in those locations. The service is not intended for anyone under 18, and we don't knowingly collect data from minors.

10. changes & contact

We'll update this policy as the product evolves; the "last updated" date above always reflects the current version. Privacy questions or requests? Email hello@degenjournal.xyz or use the contact page.

Your keys, your coins, your data. We just keep the receipts.