Privacy policy
Last updated 30 September 2026
We collect as little as the service needs to work. There are no ads, no third-party analytics and no tracking across other sites, and we don't sell data. We do count how often members use the app, and we can see what each member watches; both are explained below. This page says what we collect and what you can do about it.
Who is responsible
Soltrack is run by [operator name: to be filled], the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to lickhitter67@gmail.com. You can also ask in our Discord's #help channel, but don't post personal details there.
What we collect
The full list, with how long each item is kept, is on Your data. In short:
- Your Discord identity, when you sign in: your Discord user ID, username and display name. We ask Discord for nothing else: no email address, no server list, no messages. We don't keep Discord's sign-in token.
- Your login: the username we give you (your Discord username) and a scrambled form of your password (an scrypt hash), so we can check it when you log in. We don't keep the password itself and can't read it back. It is shown to you once and sent to you in a Discord DM by our bot. The bot also DMs you when your membership is renewed, three days before it ends, and when it has ended.
- Your membership: whether you're in our Discord server and hold the member role, which we check with our Discord bot, and when your paid period ends.
- Your payments: the public address of the wallet you paid from, the amount, the transaction signature, the invoice and its times. We never see or hold your seed phrase or private key. Phantom signs in your browser.
- Your agreement at checkout: which version of this policy and the withdrawal notice you accepted, and when.
- Support questions you type into the chat on this site or send to our Discord bot. We don't store them. See support chat below.
- Your IP address, held in memory for a few minutes to limit how often sign-in, checkout and support can be called. It isn't written to disk or logged.
- Your Telegram connection, if you connect: the session Telegram creates when you scan our QR code, your Telegram first name, and the names of the groups and channels your account is in, so you can pick which to watch. The session lets the app read those chats; it's used only for the ones you choose, and never to post or message. It is stored encrypted, with a key of your own, and never written to disk unencrypted. We never ask for your phone number or a login code. A two-step password, if you have one, goes straight to Telegram and isn't stored.
- The X accounts you track. You don't sign in to X. Our own X accounts read the posts, so X doesn't learn who asked. Other members never see your list; we can (see who else sees it).
- Inside the app: the sources, rules and limits you set, and the messages the app reads from the channels you choose, kept so the app can do its job.
- How often you use the app: a count of your requests to the app for each hour, and the time of each sign-in and whether it was with Discord or a password. Nothing about which screens you look at, your browser or your IP address.
- Your trading platform: whether the app's Open buttons take a coin to Axiom or Padre, which you choose in Settings.
Why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Signing you in and checking your membership | Discord ID, name, membership, username and password hash | Contract, 6(1)(b) |
| Selling and verifying your membership | Wallet address, payment, invoice, consent record | Contract, 6(1)(b) |
| Reading the Telegram chats and X accounts you choose | Telegram session and name, your chats' names, tracked X accounts, the messages read | Contract, 6(1)(b) |
| Keeping accounting records | Payments and invoices | Legal obligation, 6(1)(c) |
| Keeping the service secure and preventing abuse | IP address (in memory), session | Legitimate interest, 6(1)(f) |
| Running and improving the service: how many members use it and when, which channels members watch, which coins those channels post and how those coins do | Membership, payments, usage counts, the channels and X accounts you watch and the messages read from them | Legitimate interest, 6(1)(f) |
| Finding good channels: we may follow a channel a member watches, for our own use. We never tell anyone which member watches it. | The channels and X accounts you watch and the messages read from them | Legitimate interest, 6(1)(f). You can object: write to us and we'll leave your list out. |
| Answering support questions | Your question and the conversation so far | Contract for members, 6(1)(b); legitimate interest for visitors, 6(1)(f) |
We make no decisions about you by automated means that have legal or similarly significant effects.
Who else sees it
- Us, the operator. Our admin panel, which only we can open, shows each member's membership and payments, how often and when they use the app, the Telegram channels and X accounts they watch, and the coins those channels posted. We use it to run the service, and we may follow channels our members watch for our own use. Other members never see any of it.
- Discord handles sign-in and holds the member role. Discord's own privacy policy covers what it does.
- The Solana blockchain. A payment is a public transaction. Anyone can see, permanently, that your wallet sent the membership amount to our address, with a random invoice number in its memo. The memo doesn't contain your Discord identity. We can't delete anything from the blockchain.
- Our Solana RPC provider receives the transaction details we look up to verify your payment.
- OpenRouter and the AI model provider it routes to receive your support questions to write the answer. We ask OpenRouter to use only providers that don't store or train on them.
- Telegram knows that your account is connected to "Soltrack" and which chats the app reads. It lists the connection under Settings → Devices, where you can end it.
- X (Twitter). Profile pictures in the app load from X's image server, which sees your IP address when your browser fetches them. The posts of the accounts you track are read by our own X accounts.
- Hosting. Today the service runs on a computer we operate ourselves. Before it moves to a hosting provider, we'll name the provider here.
Some of these companies are in the United States. When your data goes outside the EU, it goes under the safeguards the GDPR requires: an adequacy decision such as the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
Support chat
The chat on this site and our Discord bot's /ask command are answered by an AI model. What you type goes to OpenRouter and the model provider, and the answer comes back to you. The conversation lives only in your open page, or in Discord's private reply to you. We don't save it or log it. The model can be wrong, so check anything important with us. Never type a seed phrase, private key or password. The chat refuses them before they're sent anywhere.
How long we keep it
- Sign-in cookie: 7 days, or until you sign out.
- Username and password hash: while you're a member, and then until you ask us to delete them. Wrong-password counts: 15 minutes.
- Payment, invoice and consent records: for as long as you're a member, and then for as long as accounting law requires.
- Membership record: while you're a member. After that, we delete it on request unless the law requires us to keep it.
- Telegram connection: until you disconnect (in the app or in Telegram), or your membership ends. We delete it on request.
- Tracked X accounts and chosen sources: while you keep them in the app.
- IP addresses for rate limiting: a few minutes, in memory only.
- Support questions: not kept.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to receive it in a machine-readable form. You can also object to processing that relies on our legitimate interest. Write to lickhitter67@gmail.com. We answer within one month, and it's free.
If you think we've mishandled your data, you can complain to the Slovenian data protection authority, the Information Commissioner (Informacijski pooblaščenec), or to the authority where you live.
Age
Soltrack is for adults only. Don't use it if you're under 18.
Changes
When this policy changes, we update the date at the top. If the change matters, we also announce it in our Discord's #announcements before it takes effect.