Privacy Policy
In short: You sign in with your public Solana wallet address. We store that address and the DCA records you enter. We never ask for your private key or seed phrase. We don’t sell your data. Blockchain data is public and we can’t delete it.
1. Who we are
Dripstack (“we”, “us”) is a cryptocurrency tracking app that helps you monitor dollar-cost averaging (DCA) activity and review transaction history and performance for your Solana wallet. It is run by an independent developer and is available internationally. This policy explains what information we handle and why.
2. Information we collect
Wallet and authentication data. When you connect your wallet and sign a message, we process your public wallet address, the signed message, timestamps, and temporary data such as nonces and session identifiers that protect against replay attacks. Your wallet address identifies your account. It may not show your legal name, but it can be linked to you through other information, so we treat it as personal data.
DCA records you enter. This can include token identifiers, purchase amounts, quantities, prices, dates, and any notes you type. Records are stored against your wallet address. Please don’t put sensitive personal information in notes.
Public blockchain data. We use your wallet address to request public Solana data (transaction signatures, timestamps, token transfers and balances) from a third-party RPC provider when you use the app. We don’t keep our own permanent copy of this history.
Technical data. We don’t run analytics or advertising trackers. Our hosting, database, RPC and security providers may automatically process IP addresses, device and browser details, request logs, and error reports under their own policies.
What we don’t collect. We don’t ask for your private keys or seed phrases, email address, name, phone number, home address, or precise location. Never share your private key or seed phrase with anyone claiming to be Dripstack. A wallet signature proves you control an address; it does not give us control of your funds.
3. How we use information
- To verify wallet ownership, sign you in, and keep your session secure.
- To store and show your DCA records and calculate cost-basis and performance figures.
- To fetch your public blockchain activity.
- To detect abuse, fix errors, and keep the service secure and reliable.
- To comply with the law and protect our legal rights.
Where privacy law requires a legal basis, we rely on: providing the service you asked for (contract), our legitimate interests in security and reliability, legal obligations, and consent where the law requires it.
4. Who we share it with
We use these kinds of service providers, which process data on our behalf or under their own terms:
- Neon (managed PostgreSQL) stores your wallet address and DCA records.
- An RPC provider receives your wallet address and request metadata to return blockchain data.
- Hosting and security providers process technical data needed to deliver and protect the app.
We may also disclose information when the law or valid legal process requires it, to investigate fraud or security incidents, to protect rights and safety, or as part of a sale, merger or transfer of the service. We don’t sell personal information or share your DCA records for advertising. If that ever changes, we will update this policy and obtain consent where required.
5. Public blockchain data
Solana is a public blockchain. Your transaction history is visible to anyone, Dripstack doesn’t make it private, and we can’t remove or alter it. Deleting your Dripstack account does not delete blockchain transactions. We aren’t responsible for how third parties such as explorers or analytics services use public data.
6. Cookies and local storage
We don’t use advertising cookies. The app may use cookies or browser storage that are necessary for sign-in, security and session management. Where the law requires consent for non-essential technologies, we will ask first. You can control cookies in your browser, though some features may stop working.
7. Retention
- Wallet address and DCA records: kept while your account is active or until you ask us to delete them.
- Authentication and session data: kept only as long as needed to keep sessions secure.
- Provider logs: kept according to each provider’s practices.
We may keep limited information longer where needed to meet legal obligations, resolve disputes, or prevent fraud.
8. Deleting your data
There is no self-service deletion yet. Email sol.dripstack@gmail.com and we will delete your account and DCA records unless we must keep something for legal or security reasons, in which case we’ll tell you. Backups and provider logs may keep copies for a limited time. We may ask you to prove you control the wallet by signing a message. We will never ask for your private key or seed phrase.
9. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, or US state laws), you may have the right to access, correct, delete, restrict or object to processing of your data, receive a portable copy, withdraw consent, and complain to your data protection authority. Email us to exercise these rights and we will respond within the time the law requires.
10. International transfers
Our providers may process data in countries other than yours. Where the law restricts such transfers, we use appropriate safeguards.
11. Security
We use reasonable measures such as encrypted connections, access controls and restricted database access. No system is completely secure. You are responsible for protecting your wallet and devices and for reading signing requests carefully. If a breach affects you, we will notify you and regulators as the law requires.
12. Children
Dripstack is for people aged 18 or over. We don’t knowingly collect data from anyone under 18. If you believe a child has used the service, contact us and we will delete the data.
13. Third-party services
Wallets, explorers, RPC providers and other linked services have their own privacy practices, and we aren’t responsible for them.
14. Changes
We may update this policy as Dripstack changes. We will update the date above and, for material changes, give reasonable notice or request consent where the law requires it.
15. Contact
Dripstack, operated by an independent developer.
Email: sol.dripstack@gmail.com
Website: incoming...