Privacy

• Your public wallet address. The app sends it to our server to read balances, build order transactions, relay the transactions you sign, and run the faucet.
• Transactions you sign. The server forwards them to Solana devnet. It accepts only Holdfill order and token transactions.
• Faucet requests. The server keeps your wallet address and last request time in memory to apply the faucet limits. It isn't written to disk and clears when the server restarts.
• Review links. If you open Holdfill through a link we shared with hackathon reviewers, a cookie marks that visit so we can see which pages were reviewed and whether the faucet and orders worked. Visitors who arrive any other way get no cookie.
• Request logs. The web server that hosts Holdfill may log your IP address, browser, and the pages or endpoints you request, for security and debugging.

Holdfill never asks for your name, email, or private keys.

Everything you do on chain, including orders, fills, and revokes, is public and permanent on Solana. Anyone can link those transactions to your wallet address. We can't delete them.

• The last market snapshot, so prices appear instantly on your next visit.
• The name of the wallet you last connected, so it can reconnect automatically.

Both stay in your browser's local storage. Clear your site data to remove them.

• Helius (Solana RPC). Our server sends your wallet address with balance and transaction queries.
• Solana devnet. Receives the transactions you sign.
• Jupiter and PreStocks. Our server fetches prices from them. Your address isn't sent.
• Your wallet. Phantom, Solflare, Backpack, and others have their own privacy policies.
• Solana Explorer. Opens only when you follow a transaction link.

We don't sell or share data for advertising.

We may update this notice. The date at the top shows the latest version. See also the terms of use.