Privacy Policy

1. What we do not collect

There are no accounts on LumpFun. There is no sign-up, no password, no email, no name, no phone number, no government ID, and no KYC. We run no analytics, no advertising, and no cross-site tracking of any kind — there is no analytics package in the application at all. We do not sell data, because we do not have any to sell.

We never receive your seed phrase or private keys. Your wallet extension holds them; the site only ever receives a signature your wallet produced.

2. What we do process

• Your wallet address. Sent to our server so it can look up your UTxOs and build an unsigned transaction for you. It is used for that request and is not stored in a profile.
• Connection metadata. Serving a website inherently involves your IP address and browser user-agent reaching our infrastructure and our CDN provider. This is ordinary request handling, not profiling.
• Token metadata you submit. If you launch a token, the name, ticker, description, image, and links you provide are stored and shown publicly, and are also written to the Cardano blockchain as CIP-25 metadata.
• Uploaded images. Token images you upload are stored by our file-storage provider and served publicly.

3. On-chain data is public and permanent

Everything you do on Cardano — addresses, balances, every trade, every launch — is written to a public blockchain by design. We read and aggregate that data; we do not obtain it from you. We cannot alter, hide, or delete it, and neither can you. Blockchain activity is pseudonymous, not anonymous: anyone can analyse it, and it may be linkable to your identity through exchanges or other services you use.

4. Cookies and local storage

We use no advertising or analytics cookies. The site may keep small amounts of data in your browser's local storage to remember interface preferences, such as which wallet you last connected and whether you have acknowledged the risk notice. This never leaves your browser.

5. Third parties

LumpFun depends on services with their own privacy practices that we do not control: your wallet extension, our CDN and tunnel provider, our file-storage provider for uploaded images, and the Cardano network itself. Reading chain data and building transactions is done against our own self-hosted Cardano node and indexes rather than a third-party API.

6. Security

Transaction building happens on our server, but signing does not: the server operates a read-only wallet for your address and cannot produce a signature — sign.withWallet() throws. The practical consequence is that a compromise of our server cannot move your funds without your wallet also signing.

No system is perfectly secure, and LumpFun is experimental, unaudited software. See the Disclaimer.

7. Your choices

Because there are no accounts, there is no profile to access, export, or delete. You can stop all data flow to us by disconnecting your wallet and not using the site. Token metadata you have already published, and all on-chain activity, cannot be withdrawn — it is public and permanent.

8. Changes

If this policy changes, the "last updated" date above changes with it. Material changes will be described on the site.