What we store, and why

Your account

You sign in with Google or with a link we email you. We store your email address and, for Google, the account identifier Google gives us. We never see your Google password.

If you link a Solana wallet, you first sign a message in the wallet to prove it is yours (Sign in with Solana), and we store the wallet's public address. We never see or hold your keys.

If you link a phone, we store a hash of that phone's device code, never the code itself, so the phone and the account share the same Pro.

Payments and votes

A Pro payment and an SKR vote are Solana transactions you sign yourself. They are public on the chain, together with the wallet address that signed them, and anyone can read them. We keep a copy of what we read from the chain (the transaction signature, the wallet address, the amount, and for a payment the hash of the code it was paid for) so Pro and the vote count work. The hash does not reveal the code.

The Android app

The app makes a random device code on the phone and sends it with its requests, so we can tell which phone holds Pro. The code stays on the phone; we keep only its hash.

You can sign in with Google in the app. When you sign in, the app sends Google's sign-in token to us, and we store the same email and Google identifier as for the site.

The app connects to your wallet through Mobile Wallet Adapter to read the wallet's public address and to ask you to sign the transactions you choose. Your keys stay in the wallet (on a Seeker, in the Seed Vault).

The app has no analytics, advertising or crash-reporting code. Your watchlist and notification settings stay on the phone. For prices, swap quotes and on-chain reads it also talks to xStocks, Jupiter and Solana RPC nodes, which see your IP address like any server, and for a swap you ask for, the wallet address.

Visiting the site

If you subscribe to updates through the form at the bottom of a ticker page, we store that email address. Nothing else from that form goes anywhere.

Every visitor's browser gets an anonymous identifier in a cookie. We use it for two aggregate counts: return visits (for example, how many people come back within a week) and where visits come from; for the source we keep the referring site's host only (for example, news.ycombinator.com), never a full page address. The identifier carries no email address or other personal data.

Separately, Vercel Analytics, Vercel Speed Insights and Google Analytics measure site visits and performance. These tools send page-view events or performance measurements to their respective providers. Google Analytics loads from Google and sets its own cookies, and we do not use its advertising features. We do not sell your data.

How long we keep it

Account data stays while the account exists and goes when you delete the account. An update-list email stays until you ask us to remove it or delete your account. Visit counts are kept only as totals. What is on the Solana chain stays there, because nobody can delete it.

Deleting your data

You can delete your account and all the personal data tied to it yourself: Account, Delete account. It takes effect at once and removes your email, your sign-in methods, your linked wallets and phones, and your update-list email. Payments and votes on Solana are public transactions that nobody can delete. A 30-day Pro paid for in the app with that phone's code keeps working on that phone until it ends.

To remove an update-list email without an account, write to hi@plainticker.com and we will delete it within a few days.