Your data
Last updated 30 September 2026
This is the complete list of what Soltrack holds about you. If something isn't on it, we don't collect it. The privacy policy explains the legal side and your rights.
What we hold
| Data | Where it comes from | What it's for | How long | Who else sees it |
|---|---|---|---|---|
| Discord user ID, username, display name | Discord, when you sign in | Knowing who you are and which membership is yours | In your sign-in cookie for 7 days. Kept with your membership and payments while those are kept. | Discord already has it |
| Login: username and password hash | Made by us when you first pay | Logging in without Discord | While you're a member, then until you ask us to delete it. The password itself is never stored: only an scrypt hash we can check it against | Discord carries the DM with your login |
| Wrong-password count per username | The login page | Locking a username for 15 minutes after 5 wrong tries | 15 minutes | Nobody |
| Server membership and role | Our Discord bot asks Discord | Letting members in, and taking access away when a membership ends | Re-checked about every 15 minutes, held in memory | Discord |
| Paying wallet's public address | Phantom, when you pay | Building the payment and checking it came from you | With the payment record | Public on the Solana blockchain, permanently |
| Invoice, amount, times, transaction signature | Our checkout and the blockchain | Proving you paid, and extending your membership exactly once per payment | As long as you're a member, then as long as accounting law requires | The transaction is public on Solana. Our RPC provider sees the lookup. |
| Membership end date | Our checkout | Knowing when access ends | While you're a member, then deleted on request unless the law requires us to keep it | Nobody |
| Checkout agreement: policy version and time | The checkboxes at checkout | Showing what you agreed to, including giving up the 14-day withdrawal right when access starts | With the payment record | Nobody |
| Pending payment: invoice number and signature | Your browser, during checkout | Recovering a payment if the page closes | On your device only, until verified | Nobody |
| Support questions and answers | You, in the site chat or Discord /ask | Answering you | Not stored by us. They live only in your open page or Discord's private reply. | OpenRouter and the AI model provider |
| IP address | Your connection | Limiting how often sign-in, checkout and support can be called | A few minutes, in memory, never logged | Nobody |
| Telegram connection (the session Telegram creates when you scan our QR code), and your Telegram first name | Telegram, when you connect | Reading the groups and channels you choose, and nothing else. It can't post or message. Stored encrypted, with a key of your own. | Until you press Disconnect, end "Soltrack" in Telegram → Settings → Devices, or your membership ends. Deleted on request. | Telegram |
| Names of the Telegram groups and channels your account is in | Telegram, after you connect | Showing you what you can choose to watch | While you're connected | Nobody |
| The X accounts you track | You, on the X page | Reading those accounts' posts for you. We also see them in our admin panel, and may follow the same accounts ourselves. | While you track them | X sees that our accounts read them, not that you asked. Other members never see your list. |
| App settings and the messages you track | You, and the channels you choose | Running the app for you. In our admin panel we also see which channels you watch and the coins they posted, and may follow the same channels ourselves. | While you use the app. Deleted on request. | Nobody. Profile pictures load from X, which sees your IP address. |
| How often you use the app: requests per hour, and each sign-in's time and method (Discord or password) | Your use of the app | Seeing, in our admin panel, how many members use the service and when | While you're a member. Deleted on request. | Nobody |
| Your trading platform: Axiom or Padre | You, in Settings | Opening a coin in the platform you use | Until you change it or ask us to delete it | Nobody. Opening a coin sends its address to the platform you chose, from your own browser |
What we never collect
- Your seed phrase, private key or passwords. We'll never ask for them, and the support chat refuses them. If your Telegram account has a two-step password, you type it once while connecting and it goes straight to Telegram; we don't store it.
- Your phone number or a Telegram login code. Connecting is by QR code only.
- Your X login or cookies.
- Your email address, your Discord messages, or the list of servers you're in.
- Third-party analytics, advertising identifiers, or your browsing on other sites. We count your use of the app ourselves, as listed above, and nothing more.
See, correct or delete your data
Write to lickhitter67@gmail.com from the email or Discord account the request is about, and we'll answer within one month. Payment records that accounting law requires us to keep can't be deleted early, and blockchain transactions can't be deleted by anyone.