Privacy Policy

Draft for review — not yet in force.

This policy lists what dex-tokens.io collects and stores about you, and why. Browsing needs no account. Signing in, trading and paying store what those features need to work. Each item below is something the site actually keeps today.

What is collected when I only browse?

• Google Analytics. dex-tokens.io loads Google Analytics 4 only after you accept analytics cookies by ticking "Allow Google Analytics" in the popup shown on your first visit. You can decline, and declining does not limit anything on the site. If you accept, Google receives the pages you visit and information about your browser and device, and sets its own cookies to count visits. We use it to see how much traffic the site gets. It is not loaded on this docs site. Your answer is kept in a cookie named dex_consent for 12 months, and you can change it at any time with "Privacy choices" at the bottom of every page.
• Live viewer counts. While a token page is open, your browser tab sends a short signal so the page can show how many people are viewing. The signal carries a random id your tab makes for itself. Our server holds it in memory for about 45 seconds and does not write it down. To stop abuse, the server also keeps a scrambled form of your IP address in memory for up to a minute. It cannot be turned back into the address and is never stored.
• Search counts. When you open a token from search, we add one to a count for that token for that hour. The count holds no name, account or IP address.
• Ad counts. When an ad is shown or clicked, we add one to that ad's count for the day. Nothing about you is stored with it.
• Server logs. Our web server keeps standard access logs: your IP address, the page you asked for, the time, and your browser's description of itself.
• Rate limiting. To limit how often one client can call the site, the server keeps your IP address in its memory, in short counters (the search, trade, voting, listing, boost and Solana RPC endpoints each have one, with a window of one minute). It is not written to the database.
• Your own browser. Some things are kept in your browser's own storage rather than on our server: recent searches while you are signed out, trade presets and your choice for the ticker strip.

What is stored when I sign in?

You can sign in with a Solana wallet, Google or Telegram. We store:

• Your account: an account number and the one identifier from the method you used — your wallet address, your Google account ID, or your Telegram user ID. Google also sends us your email address and name when you sign in. We do not store them. Telegram sends your name, username and photo when you sign in; we do not store those either.
• Your session: a cookie named dex_session that keeps you signed in for up to 30 days, and a matching record on our server. Google sign-in also sets a short-lived cookie for about 10 minutes to protect the sign-in itself.
• Linked wallets: each wallet address you link, the label you give it, and when you linked it.
• Your lists: your Favourites, your Watchlist and your last 100 recently viewed tokens, with the time each was added. You can clear Recently viewed and unlink a wallet yourself.

What does a public profile show?

A public profile is optional. You do not have one unless you create it on your Profile page, and you can delete it there.

If you create one, anyone can open it at dex-tokens.io/u/<your handle>, signed in or not, and search engines can list it. It shows:

• What you enter: your handle, display name, bio and picture.
• Your X account, if you connect it: your X username, as a link. Connecting sends you to X to approve it. We store your X account ID, your X username and when you connected, and nothing else. We do not store the access X gives us; it is used once to read who you are and then discarded. Two short-lived cookies (about 10 minutes each) are used: one protects the connection itself, and one keeps your X name and the address of your X picture in your browser so that you can choose to use them. If you choose "Use my X picture and name", we copy that picture and name to your profile; nothing is copied to your profile without that click.
• Who you follow and who follows you, and the counts of each.
• The trades you make on dex-tokens.io, past and future: the tokens, the amounts, the price each trade was made at and the time.
• Your realised profit and loss on those trades, in SOL and where we recorded a price in dollars: the total for the last 7 days, 30 days and all time, a chart of that total over time, your win rate, how many trades you closed, your best and worst trade, your most profitable trades, the result for each token, and how long on average you hold a token before selling it. It counts only tokens you bought and sold on dex-tokens.io.
• Your place on the leaderboard: the leaderboard ranks public profiles by that realised profit and loss, for the last 7 days, 30 days and all time. If you have closed at least 3 trades in a period, your profile, those figures and your follower count can appear there. Deleting your profile takes you off it, and a hidden profile or suspended account is not ranked.
• When your account was made, and how many promoted listings you have live.

It does not show your wallet addresses, balances or holdings, and it shows no transaction signature. The tokens you still hold from trades here (your open positions) are shown to you alone, on your own Profile page. Trades are recorded on the Solana blockchain, so someone determined could match a public trade to a wallet.

Deleting your profile removes the page, your picture, your X link and every follow in both directions. Your handle is then kept aside for you for 30 days so no one else can take it straight away; if you create a profile again within those 30 days, it has to use that handle. Your account, and your trades in your own account, are not affected.

We may hide a profile that breaks the Terms & Conditions. A hidden profile is not shown to anyone, and you are told on your Profile page. A profile we have hidden cannot be deleted from the page; email us instead. If your account is suspended, your profile is not shown either. Actions our staff take on a profile are recorded: the account number, the handle, and the X username when an X link was removed.

What is stored when I trade or pay?

• Trades made with the trade panel: the wallet used, the tokens and amounts, the fee, the route, the result, the transaction signature and the times.
• Promoted listings: the details you submit (for example the name, symbol, description, website, X, Telegram, contact email, audit and KYC links and logo), when you accepted the terms, and the payment: its transaction signature, the amount, the paying wallet, and any refund record.
• Boosts: the pack, the payment's transaction signature, the paying wallet and the times.
• Votes: which listing you voted for, and on which day.

Payments and trades happen on the Solana blockchain. Anything recorded there — wallet addresses, amounts and signatures — is public and permanent. We cannot change or delete it.

Who else receives information?

• Google — when you use Google sign-in, and for Google Analytics if you accept it.
• Telegram — when you use Telegram sign-in, through Telegram's own login widget.
• X — only if you connect your X account to a public profile. X learns that you approved the connection.
• Jupiter — when you trade, your wallet address and the trade are sent to Jupiter so it can build the order.
• The Solana network — transactions you sign, and balance reads for your linked wallets, go through a Solana network provider.
• DexScreener — the chart on a token page is loaded from DexScreener in your browser.
• Your wallet app — such as Phantom, which works under its own terms.

We do not sell personal data.

How long is it kept, and how do I ask about it?

Account data is kept while your account exists. Payment records are kept so a refund can always be traced (see the Refund Policy). You can delete your public profile yourself on your Profile page, unless we have hidden it. There is no delete-account button yet. To ask what we hold about you, or to ask for it to be deleted, email support@dex-tokens.io and tell us how you sign in, so we can find your account. We delete your account data within 14 days of your request. Four things are not deleted: payment records, which we keep so a refund can always be traced; server access logs, described above; the record of actions our staff took on a profile; and anything recorded on the Solana blockchain, which no one can delete.

Will this policy change?

It may. The date at the top of the page says when it last changed.