Privacy policy
What Piconero stores, what passes through its servers, which third parties see what, and what stays in your browser.
Last updated 2026-11-13. This policy covers Piconero at monero-terminal.vercel.app.
In short
- No account, no email, no name — Piconero doesn't ask for personal details.
- Your secret key and 12-word backup are created and kept in your browser. They are never sent to our servers.
- No cookies, no analytics, no ad trackers.
- Our servers relay requests to market data, swap and exchange providers. They don't write request logs; rate limits use salted, short-lived hashes of IP addresses kept in memory.
- Solana is a public blockchain: your trades, balances and bridge requests are visible to anyone.
Stored in your browser
The wallet vault (encrypted with your passkey or password) lives in your browser's IndexedDB. Settings, your watchlist, open orders, deposit and withdrawal records and similar preferences live in local storage. You can delete all of it by clearing this site's data — without your 12-word backup the wallet is then gone.
What our servers handle
The server is a set of thin proxies (see Wallet & security). Requests pass through it so that API keys stay secret and your browser talks to fewer third parties. Depending on what you do, a request can contain a token address, an amount, your public Solana address, a signed transaction (already public once sent) or a Monero payout address when you create an exchange order. None of it is written to a log.
What we store
Only for features you opt into, in a Redis database (Upstash):
| Feature | Stored | How long |
|---|---|---|
| Referrals | Your public address, referral code, the signature that binds them, earnings | While the program runs |
| Leaderboard | Your public address and the nickname you chose | Until you leave the leaderboard |
| Roadmap votes | Your public address and your vote | Until the vote closes |
| Push notifications | The browser's push subscription and the addresses to watch | Until you turn them off |
| Sponsored deposit | Your public address and a random device id (one sponsorship each) | Until repaid |
| Usage metrics | Counts, and a keyed hash of active addresses per day — no raw addresses | Days to weeks |
| Duplicate-request guard | A hash of a random request id and the response | 24 hours |
Third parties
| Provider | Purpose | What it sees |
|---|---|---|
| Vercel | Hosting | Requests to this site; may keep short-lived infrastructure logs under its own policy |
| Jupiter | Swap quotes and execution, prices | Token addresses, amounts, your public address, signed swaps |
| Helius | Solana RPC, private balance | Public addresses and transactions |
| GeckoTerminal, DexScreener | Charts and market data | Token and pool addresses (from our server, not your browser) |
| ChangeNOW, SideShift, StealthEX | XMR exchange routes | Amounts, your Solana address and Monero payout or refund address; their own AML checks apply |
| wxmr.io | The XMR ↔ wXMR bridge (custodial) | Bridge deposits and withdrawals, including the XMR address you withdraw to |
| Browser push services | Notifications you enable | The notification text |
| Pinata (IPFS) | Launchpad uploads (when enabled) | The image and token details you upload |
Public blockchain data
Everything on Solana is public and permanent: balances, trades, transfers and bridge withdrawal requests. Monero transactions are private on the Monero network, but an exchange or the bridge knows the amounts and addresses of the swaps you make with it. See Privacy for what the private balance hides and what it doesn't.
Your choices
- Use the terminal without any opt-in feature — nothing about you is stored then.
- Leave the leaderboard, turn off push notifications, or clear this site's data at any time.
- To ask about or remove stored data linked to your public address, contact the operator through the links on this site; we can act only on data we hold, not on public blockchain records or third-party systems.
Changes
Changes to this policy are listed in the changelog and dated at the top of this page.