Privacy

Short version: this site collects nothing, and the app collects only what it needs to let you in and to trade.

This site

The pages at xnum.xyz are static. They set no cookies, run no analytics or tracking scripts, and have no forms. Every asset is embedded in the page, so your browser makes no request to anyone but the host.

The host is Vercel. Like any web server it may keep standard request logs (IP address, browser user agent, requested URL, time) for operating the service, under Vercel's own privacy policy. We do not read them to identify visitors.

The app

The app is separate, and using it means a few things are handled:

• Your invite code, checked against our records when you enter it.
• Your wallet's public key, when you connect it and sign a sign-in message. The signature proves you hold the key; it moves no funds.
• A session cookie (HttpOnly, set by our API) so you are not asked to sign in on every visit. It expires after 30 days unused, and after 90 days at most. Your browser's local storage also remembers that your wallet passed the invite gate; clear site data to remove that.
• Your request's IP address, as a rate-limit key: an IPv6 address cut to its /64 prefix, an IPv4 address exactly as it is. Every API request is counted in memory, and a failed invite-code check is also counted in our database. We do not store the address with your wallet.
• Each token's picture and description come through our API, which fetches them from the host the token's creator chose. That host sees our server's request, not your IP address or browser.
• Everything you sign into a transaction is public on Solana forever, as on any chain. The app reads the chain and sends your transactions through an RPC provider, which sees the requests it serves. Once the app reads through it, our own RPC proxy sees each chain request, your IP address and wallet addresses included; it keeps the address, cut as above, in memory to rate-limit, and logs only refused method names and errors.

No ads, no analytics, no selling or sharing of any of this. We keep it as long as the invite and referral records need it.

Contact

Questions: @xnum_xyz on X.