Privacy Policy

Draft for review — not yet in force.

This policy lists what dex-tokens.io collects and stores about you, and why. Browsing needs no account. Signing in, trading and paying store what those features need to work. Each item below is something the site actually keeps today.

What is collected when I only browse?

• Google Analytics. Every page on dex-tokens.io loads Google Analytics 4. Google receives the pages you visit and information about your browser and device, and sets its own cookies to count visits. We use it to see how much traffic the site gets. It is not loaded on this docs site.
• Live viewer counts. While a token page is open, your browser tab sends a short signal so the page can show how many people are viewing. The signal carries a random id your tab makes for itself. Our server holds it in memory for about 45 seconds and does not write it down. To stop abuse, the server also keeps a scrambled form of your IP address in memory for up to a minute. It cannot be turned back into the address and is never stored.
• Search counts. When you open a token from search, we add one to a count for that token for that hour. The count holds no name, account or IP address.
• Ad counts. When an ad is shown or clicked, we add one to that ad's count for the day. Nothing about you is stored with it.
• Server logs. Our web server keeps standard access logs: your IP address, the page you asked for, the time, and your browser's description of itself.
• Rate limiting. To limit how often one client can call the site, the server keeps your IP address in its memory, in short counters (the search, trade, voting, listing, boost and Solana RPC endpoints each have one, with a window of one minute). It is not written to the database.
• Your own browser. Some things are kept in your browser's own storage rather than on our server: recent searches while you are signed out, trade presets and your choice for the ticker strip.

What is stored when I sign in?

You can sign in with a Solana wallet, Google or Telegram. We store:

• Your account: an account number and the one identifier from the method you used — your wallet address, your Google account ID, or your Telegram user ID. Google also sends us your email address and name when you sign in. We do not store them. Telegram sends your name, username and photo when you sign in; we do not store those either.
• Your session: a cookie named dex_session that keeps you signed in for up to 30 days, and a matching record on our server. Google sign-in also sets a short-lived cookie for about 10 minutes to protect the sign-in itself.
• Linked wallets: each wallet address you link, the label you give it, and when you linked it.
• Your lists: your Favourites, your Watchlist and your last 100 recently viewed tokens, with the time each was added. You can clear Recently viewed and unlink a wallet yourself.

What is stored when I trade or pay?

• Trades made with the trade panel: the wallet used, the tokens and amounts, the fee, the route, the result, the transaction signature and the times.
• Promoted listings: the details you submit (for example the name, symbol, description, website, X, Telegram, contact email, audit and KYC links and logo), when you accepted the terms, and the payment: its transaction signature, the amount, the paying wallet, and any refund record.
• Boosts: the pack, the payment's transaction signature, the paying wallet and the times.
• Votes: which listing you voted for, and on which day.

Payments and trades happen on the Solana blockchain. Anything recorded there — wallet addresses, amounts and signatures — is public and permanent. We cannot change or delete it.

Who else receives information?

• Google — when you use Google sign-in, and for Google Analytics.
• Telegram — when you use Telegram sign-in, through Telegram's own login widget.
• Jupiter — when you trade, your wallet address and the trade are sent to Jupiter so it can build the order.
• The Solana network — transactions you sign, and balance reads for your linked wallets, go through a Solana network provider.
• DexScreener — the chart on a token page is loaded from DexScreener in your browser.
• Your wallet app — such as Phantom, which works under its own terms.

How long is it kept, and how do I ask about it?

Account data is kept while your account exists. Payment records are kept so a refund can always be traced (see the Refund Policy). There is no delete-account button yet. To ask what we hold about you, or to ask for it to be deleted, email support@dex-tokens.io and tell us how you sign in, so we can find your account.

Will this policy change?

It may. The date at the top of the page says when it last changed.