Privacy policy

You sign in with a wallet or a Google account. We store the wallet address you sign in with or, with Google, your Google account ID and email address, plus your plan and payments, and your sessions (when each started and the browser it came from). Watchlists stay in your browser. Signing in with a wallet signs a message; we never see or store private keys.

Signing in with Google runs Google's own script, loaded on the sign-in pages only. Google's privacy policy covers what it collects.

QRIS payments are made on the page of our payment provider Mayar. We send Mayar the amount, your account ID and, with a Google account, your email address; Mayar's privacy policy covers what it collects.

There are no product analytics or tracking scripts, and we keep no access logs. When a page breaks in your browser, it sends our server the error message and the page's path, nothing that names you. Server error logs can contain an IP address; they are kept for at most 90 days.

You can ask for a copy of your data or for your account to be deleted, through the channel your beta invitation came from. Doing this yourself from Settings is not available yet.

This policy follows the Indonesian Personal Data Protection Law (UU PDP). Reportable incidents are disclosed to affected users within 72 hours.