Privacy Policy

There are no accounts, no emails, no passwords, no analytics scripts and no advertising trackers on this site. Most of what VaultBags works with is blockchain data, which is public by nature and was never ours to begin with.

Wallet addresses, balances, transactions, claims and locks live on Solana, where anyone can read them forever. VaultBags reads and displays that public record; it cannot edit it and cannot delete it. If you interact with the vault on-chain, that activity is public in the same way every other Solana transaction is.

Connecting a wallet uses Sign-In With Solana: you sign a message, and the server issues a short-lived session token. That token is held in your browser's memory and is gone when you close the tab. It is not written to a cookie and there is no persistent login. Your private key never leaves your wallet, and no part of the service ever asks for it.

Rate limiting: request IPs are used to throttle abuse, with short-lived counters. Standard server logs exist at the hosting layer, as they do on effectively every website.

Telegram bot: if you link your wallet, the link between your Telegram user ID and your wallet address is stored, along with your notification preferences and a log of which alerts were sent to avoid duplicates. Sending /unlink confirm to the bot deletes the link.

AI analyst: your conversations with the analyst are stored keyed to your wallet so your history survives a page reload. You can delete any session from the interface, and deletion removes its messages.

Preferences: your theme choice (light or dark) is kept in your own browser's local storage, not on a server.

The service runs on infrastructure providers (hosting, database, connections to the Solana network, price data, the Telegram API for the bot, and a language model provider for the analyst). Requests to them are made server-side as part of operating the service. None of them are given anything about you beyond what is necessary to serve the request, and none of it is sold to anyone, because nothing here is for sale.

No advertising identifiers, no cross-site tracking, no fingerprinting, no marketing database, no data brokers. There is no email list because there are no emails. If a future feature ever needs to collect something new, this page changes first.

Updates are posted here with a new effective date. Questions and reports via X or Telegram.