Privacy Policy

Last updated: 29 September 2026

1. Introduction

This Privacy Policy explains how SolanaStake at solanastake.app ("we", "our", or "the Service") collects, uses, and protects information when you use our web application or mobile app (including the Solana dApp Store version for Seeker devices) to track your Solana staking portfolio.

2. Information We Collect

2.1 Wallet Addresses

When you use the Service, you provide Solana wallet addresses to calculate staking rewards. These addresses are public blockchain data and are used solely to fetch your staking reward information from the Solana blockchain.

2.2 Wallet Connection

You may optionally connect your Solana wallet (e.g., Phantom, Solflare, Coinbase Wallet, Ledger, or Seed Vault on Seeker) to the Service. When you connect your wallet:

  • We receive only your public wallet address
  • We use this to verify your identity, for example to save wallets to your profile
  • We store your wallet address in our database, with the status of any subscription bought before the Service became free
  • We keep payment transaction signatures for those past purchases as purchase records
  • For lifetime members, we store that status permanently

2.3 Mobile Wallet Adapter (Seeker Devices)

When using the Service on Solana Seeker devices or other Mobile Wallet Adapter (MWA) compatible devices:

  • Connection uses the Solana Mobile Wallet Adapter protocol
  • Your wallet address is requested via the Seed Vault or compatible wallet app
  • Authorization is cached locally on your device for convenience
  • You can revoke authorization at any time through your wallet settings

2.4 Caching

To improve performance, we may temporarily cache blockchain and price data using Redis or in-memory caching. This cached data does not contain personal information and is automatically cleared after a short period.

2.5 Analytics and Cookies

We use the following to understand how the site is used and how our ads perform:

  • Google Analytics, which sets cookies to measure visits and page views
  • Google Ads conversion tracking, which sets cookies to tell us whether a visit came from one of our ads
  • Vercel Web Analytics, which counts page views without cookies
  • Vercel Speed Insights, which measures how quickly pages load, without cookies

These cookies do not receive your wallet address. You can block them in your browser settings, opt out of Google Analytics with Google's opt-out browser add-on, and manage ad personalisation in your Google ad settings.

2.6 Anonymous Visit Counting

To learn whether people come back to the dashboard, your browser keeps a random identifier in local storage (not a cookie) and sends it to us when a dashboard view loads at least one wallet. With it we store only the time of the visit and how many wallets were loaded, never which wallets, your IP address or your device details.

  • If you sign in with your wallet, the identifier is linked to that wallet address so visits from your other devices count once
  • Clearing your browser's site data creates a new identifier
  • Nothing is sent if your browser sends a Global Privacy Control or Do Not Track signal, or if you opt out below

2.7 Error Monitoring and Session Replay

We use Sentry to find and fix errors. When something goes wrong, Sentry receives technical details such as the page, your browser and device type, and the error itself.

  • For about one visit in ten, and for visits where an error occurs, Sentry also records a replay of how the page changed during the visit
  • Replays mask all text and block images, so they do not show wallet addresses, balances or other values on the screen

2.8 Emails You Send Us

If you email us, for example with a question or a deletion request, we receive your email address and your message. We use them only to reply and to handle your request, and we delete the correspondence once it is no longer needed for that.

2.9 Data We Do NOT Collect

  • You do not need to give us any personal identification information (such as your name or email address) to use the Service
  • We do not have access to your private keys
  • We cannot access or move your funds
  • We do not sell your data

3. Non-Custodial Service

Important: We Never Have Access to Your Funds

The Service is completely non-custodial. This means:

  • Your private keys never leave your wallet application
  • We can only view your public address and request you to sign transactions
  • Any payment transaction requires your explicit approval in your wallet
  • All your SOL, tokens, and staked assets remain 100% under your control
  • Disconnecting your wallet immediately revokes our ability to see your address

4. How We Use Information

The wallet addresses you provide are used exclusively to:

  • Query the Solana blockchain for staking reward transactions
  • Fetch Liquid Staking Token (LST) balances
  • Compute and store mark-to-market LST reward records (when you opt in via the "Include liquid staking rewards" option). These records are derived from public on-chain events and historical exchange rate snapshots, and are keyed to the wallet address you queried so they can be returned to you on subsequent requests without re-computation.
  • Fetch historical SOL/USD price data for tax calculations
  • Generate reports and CSV exports for your records

We also run periodic background jobs that record public network data: current LST/SOL exchange rates (once per UTC day, from public market data), and validator metadata, validator health and liquid staking pool exchange rates (read from the Solana blockchain and Stakewiz). These jobs do not use the wallet or stake account addresses you submit. Historical staking rewards are fetched only while serving your request. If you record a pending stake move, a separate job re-reads the stake accounts in that move from the blockchain once per epoch until it completes.

5. Third-Party Services

We use the following third-party services to provide our functionality:

  • Helius - Solana RPC provider for blockchain data, token balances and historical staking rewards
  • Jupiter - Liquid staking token exchange rates
  • Stakewiz - Public validator information (names, commission, performance)
  • CoinGecko / DefiLlama - Historical price data and liquid staking token exchange rate history
  • Google Analytics and Google Ads - Site usage and ad conversion measurement (see 2.5)
  • Vercel Web Analytics and Speed Insights - Cookie-free page view counts and page load performance
  • Sentry - Error monitoring and session replay (see 2.7)

These services may have their own privacy policies. We recommend reviewing their policies for more information.

6. Data Security & What We Persist

The Service operates without traditional account registration: it does not ask for names, email addresses, passwords, or other personally identifying information (emails you choose to send us are covered in 2.8). The data we do persist is limited to what is needed to deliver the Service's features and to avoid re-computing the same on-chain data on every request:

  • Wallet addresses you have queried and any aliases you have set for them
  • Status, plan, and expiry dates of subscriptions bought before the Service became free, linked to your wallet address
  • Payment transaction signatures for those past purchases
  • Cached on-chain data: stake account histories, native staking rewards, liquid staking token events, and (when you opt in) computed mark-to-market LST reward records
  • Daily LST/SOL exchange rate snapshots (public market data, not user-specific)

All traffic to the Service is encrypted in transit using TLS. Persistent storage uses a managed PostgreSQL instance with encryption at rest. Short-lived caches (Redis, in-process) hold only derivative computation results and expire automatically.

7. Your Rights & Data Deletion

You can stop providing wallet addresses to the Service at any time by disconnecting your wallet and ceasing to enter addresses manually. Disconnecting immediately revokes the Service's ability to read your address from your wallet.

For any wallet address you have used with the Service, you can request deletion of the stored records associated with that address (the profile record created when you sign in with your wallet, saved wallets and aliases, recorded stake moves, subscription and payment records, cached on-chain data, MTM reward records) by emailing contact@solanastake.app with a message signed by the wallet to prove ownership. If the law requires us to keep a payment record for longer, we keep only that record and tell you so. Public on-chain data itself cannot be removed because it lives on the Solana blockchain, but we will purge our local cached copy keyed to your address. The data deletion page explains what we store and how to ask for it to be deleted.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date.

9. Contact

If you have questions about this Privacy Policy, email contact@solanastake.app or open an issue on our GitHub repository.