Privacy
Last updated 2026-11-02
The service collects as little as it can to run the bounties. This page says what that is, where it lives and what you can ask for.
No cookies, no analytics
The site sets no cookies, runs no analytics and no advertising, and loads no tracking script. See the cookies policy.
What is stored
| Data | When | Why |
|---|---|---|
| Wallet address and signed withdrawal request | You ask for your share back | To check the signature and send the refund |
| Encrypted source archive, its sha256, payout wallet and signed submission | You submit a source | To judge it; the archive can be opened only by the judge machine |
| Program address and note | You nominate a program | To check it and add it to the wall |
| Contact and message | You send a takedown request | To answer it |
This data is kept in a private storage area of the site's host and is never sold or shared for marketing. A source that fails stays encrypted. A source that passes is published, as the terms say.
What is public on Solana
Chip-ins, refunds, payouts, vault legs and proof records are Solana transactions with Memos. They are public, permanent and readable by anyone, and neither the operators nor anyone else can delete them. The site displays them as they are on chain.
Host and processors
The site, its API and its storage run on Vercel. The judge machine runs on Fly.io. Solana RPC nodes, Jupiter and OtterSec receive the public requests the service makes to read chain data, quotes and verification statuses. Your wallet extension is your own software and follows its own policy.
Your rights (GDPR)
You can ask for access to the data the service holds about you, for its correction, or for its erasure, and you can object to its use. Anything not written to Solana can be erased on request. Write to the project on X or through the request form. You can also complain to your data protection authority.
Retention
Withdrawal requests and submissions are kept as long as the target they concern is on the wall, so that every verdict and refund can be checked. Takedown messages are kept until the request is closed.