1. Who is responsible

The party responsible for your data on bopzop is [TO BE COMPLETED BY ADAM: name of the person or company, registration number and address].

Contact for privacy matters: [TO BE COMPLETED BY ADAM: contact email].

2. In short

• bopzop does not ask for your name, email or password: your account is your public wallet address.
• bopzop does not use analytics or advertising tools, and the website sets no cookies on the people who visit it.
• bopzop does not hold your private keys or your funds, and it will never ask you for your recovery phrase.
• What you publish (your theses) is public.

3. What bopzop stores if you sign in with your wallet

• Your wallet address and its chain, when you first signed in and when you last signed in.
• Your session: bopzop stores only an encrypted fingerprint of the session code (never the code itself), when it was last used and when it expires (after 30 days). The code itself stays in your browser.
• The wallets you follow. Your list is private, but the number of followers of each wallet is public, and so is how many wallets each account follows: that shows that an address has a bopzop account.
• Your watchlist and your lists: private.
• Your theses: public, with your address, the date and your account’s internal number. Your likes count in each thesis’s public total.
• Your alerts: private, with a record of each time they went off.
• If you ever turn on Telegram alerts (they are not available yet), the identifier of your chat.

bopzop reads the Solana activity of the wallets that someone follows ahead of other wallets.

4. What bopzop stores even if you have no account

• When the balance of a wallet is read (yours, if you connect it, or any address you look at in Portfolio), bopzop stores what it read from it and does not delete it.
• If you have a wallet connected, its address goes with every quote you request; bopzop deletes quotes 5 minutes after they expire.
• bopzop keeps its own record of the pump.fun and PumpSwap trades on Solana, which are public on the chain, and does not delete it. If you trade there, your trades may be in it and count towards your wallet’s Wallet Score.

5. IP addresses and technical logs

bopzop uses the IP address of each request for its per-minute request limit; that count is deleted after about 60 seconds.

bopzop’s technical logs record the IP address and the web address requested, which may contain a wallet address (for example, when looking at a portfolio). They do not store your session code or passwords. Error logs do not store IP addresses. [TO BE COMPLETED BY ADAM: how long technical logs are kept in production and where].

6. Cookies and storage in your browser

The website sets no cookies on the people who visit it. There are only two technical cookies, for two restricted areas:

• bopzop_preview: only on a private preview protected by a password, when it is switched on. It lasts 7 days.
• bopzop_operator: the session of bopzop’s admin panel. It lasts 12 hours.

In your browser’s storage, bopzop keeps your session (30 days), your settings, the order of the tables, the quick-buy amounts and the Pro settings, the simulated copy plans, the addresses you watch in Portfolio and your recent searches. None of this leaves your browser, except the session (to identify you to bopzop) and the Portfolio addresses (to read their balance).

If you connect a wallet, the services that make that connection also store their own data in your browser.

7. Third-party services that receive data

• Nodes of each chain: the ones bopzop has configured and public nodes such as PublicNode or dRPC receive the address of the wallet whose balance is read.
• Helius, Birdeye and GMGN: if they are switched on, receive the address of the Solana wallet whose balance or trades are read.
• 0x: receives the address of your connected wallet when quoting on the EVM chains (switched off today). Jupiter, on Solana, does not receive it.
• Reown and WalletConnect: connect your wallet to bopzop and receive the data of that connection under their own policies.
• Token images: are loaded directly from the address each source gives (the IPFS ones from Filebase's public gateway, ipfs.filebase.io, or Pinata's when the source names it), so those sites see your IP address; bopzop asks the browser not to tell them which page you came from.
• Telegram and LiveKit: switched off today. If they are switched on, Telegram will receive the text of your alerts, and LiveKit your account’s internal number and your address (shortened, as a name) when you open or watch a live stream.
• Claude, by Anthropic: the optional explanation of a token (switched off today) only sends it data about the token, never data about you.

[TO BE COMPLETED BY ADAM: legal basis of each transfer and links to the privacy policy of each service]

8. How long it is kept

• Your account (address, chain and dates): not deleted.
• Sessions: deleted after they expire, including the ones you closed.
• The wallets you follow, saved tokens and likes: deleted when you remove them.
• Theses and alerts you delete are no longer shown, but their text stays stored. If you edit a thesis, the new text replaces the previous one.
• The record of alerts sent: kept.
• What bopzop read from a wallet: kept with no deletion date.
• Quotes: deleted 5 minutes after they expire.
• The detail of the market activity read from third parties: 3 days; after that, summaries remain. bopzop’s own record of Solana trades is not deleted.
• Database backups: the 14 most recent are kept.

[TO BE COMPLETED BY ADAM: confirm that the 3-day retention is switched on in production]

9. Test accounts

To test the website, bopzop creates test accounts with wallets made only for that purpose. They are marked as test accounts when they sign in, never count in the public figures and are deleted at the end of each test. While they exist, their theses and likes can be seen.

10. Your rights

Today bopzop has no button to delete your account or download your data. [TO BE COMPLETED BY ADAM: rights recognised by the applicable law (access, rectification, erasure…) and how to request them].

11. Minors

[TO BE COMPLETED BY ADAM: minimum age to use bopzop]

12. Changes to this policy

When this policy changes, the date above will change. [TO BE COMPLETED BY ADAM: how it will be announced].