Privacy

What Zoltrak knows about you

Last updated 4 August 2026 · Draft — not yet reviewed by a lawyer.

Without an account

Your journal, your settings, your watchlist, your notes and your paper trading account live in your browser's local storage. They are not uploaded. Clearing your browser data deletes them, and nobody holds a copy, Zoltrak included.

With an account

Signing up stores:

• your email address, held by the authentication service so you can sign in;
• a handle, which is public;
• a bio and picture, if you add them, both public;
• trades you upload, only if you turn sharing on;
• who you follow, which is public;
• anything you post in a coin room, which is public.

Sharing is off by default. Signing up does not put your trading on a public leaderboard. That is a switch you have to turn on yourself.

Zoltrak never stores your password. Sign-in goes straight to the authentication service, which returns a token.

Your wallet

Connecting a wallet shares its public address and nothing else. That is the same address anybody can already see on a block explorer.

Zoltrak never asks for, receives, or stores a private key or a seed phrase. There is no code path in it that could accept one. Every transaction is signed inside your wallet's own window.

Crash reports

When something breaks, Zoltrak sends an error report so it can be fixed. It contains a message, a trimmed stack trace, which page you were on, and your browser's user-agent string.

It deliberately does not contain your account, your wallet address, your email, your handle, anything you typed, anything from your journal, or anything from your browser storage. Anything shaped like a key, an address, a token or an email address is stripped before the report leaves your browser, and the report is sent without your login attached so it cannot be tied back to your account.

What is sent to other services

Using Zoltrak makes requests to:

• DexScreener and GeckoTerminal — for coin prices and pools;
• Jupiter — for swap quotes and to build a transaction;
• public Solana nodes — to read balances and confirm transactions;
• Supabase — accounts, the leaderboard, coin rooms and crash reports.

Those requests carry your IP address, as any web request does. When you look up a wallet, that wallet's public address is sent to the services above so they can answer. Zoltrak does not send them anything about you beyond what the request needs.

No tracking

No advertising networks. No third-party analytics. No tracking cookies. The only things kept in your browser are the app's own data and, if you sign in, a session token.

Deleting your data

Without an account: clear your browser storage for this site and it is gone.

With an account: email ZoltrakTrades@gmail.com and ask. Deletion is done by hand at the moment, not by a button in the app. Clearing your browser storage removes the local copy either way, but it does not remove the account itself.

Children

Zoltrak is not intended for anyone under 18.

Changes

This page may change. The date at the top says when it last did.

Contact

Questions about privacy, or to ask for your account and data to be deleted: ZoltrakTrades@gmail.com.

To do before launch: confirm which region your database is hosted in. If you will have users in the UK or EU, have someone check this against GDPR. Account deletion is by email for now, not automated. This is a careful draft, not legal advice.