What we know about you

There is still no sign-up, no password, and no email address. We do not ask for your name or your phone number, and simply browsing or trading creates no record of you. We run no analytics script and embed no advertising pixel.

What changed is that you can now save a profile. It is keyed to your wallet address and holds only what you put in it: a name, a bio, a picture, and whether the page is private. Nothing is written until you press Save, and until then the name and face you see are derived from your address rather than stored.

Saving asks your wallet to sign a message. It is free, it never leaves as a transaction, and it exists because a signature is the only way a browser can prove which wallet is asking. That sign-in sets a cookie so you are not asked on every save.

Connecting X is optional. If you do it, we receive your handle, display name, picture URL and follower count from X, and we store the handle and the count. We never post, never read your timeline, and never see your X password. One X account can be connected to one profile.

You can clear any field and set the page private at any time. There is no delete button for the row itself yet; ask and we will remove it.

Three preferences, on your device and never sent to us: the acknowledgment from the notice you accept on your first visit, under a key beginning with ark:risk, whose value is the timestamp of the moment you pressed Continue; your theme, under ark:theme; and how you last chose to view the board, under ark:board-view. Clearing your site data deletes all three, and the notice comes back.

Two cookies, and only if you use a profile. Signing in sets argus_session for seven days: it carries your wallet address and an expiry, signed by us so it cannot be edited, and it is what lets you save without signing again. Connecting X sets argus_x_link for ten minutes to carry that one round trip, and it is cleared the moment the trip ends either way. Both are HttpOnly, so no script on the page can read them, and neither is used for tracking or shared with anyone.

Signing out clears argus_session immediately. So does clearing your site data.

The ordinary residue of serving a web page. Our hosting provider logs requests, including the IP address they came from, the page asked for, the time, and the browser user agent. We use that to keep the site up, not to build a profile, and it is not joined to any wallet address.

Token logos are the one place this gets interesting. A logo URL is whatever the token deployer wrote on-chain, so a handful of image hosts are allowlisted and fetched and resized by our server, which means those hosts see us rather than you. Every other host is loaded directly by your browser instead, unoptimised, which means that host sees your IP address and we never touch the file. The alternative was our server fetching arbitrary URLs typed by strangers, which is worse.

Arc is a public ledger. Your address, your balances, every trade you make, and every token you launch are permanent public records, readable by anyone, forever. We do not publish them and we cannot unpublish them. Neither can you.

Anything you type into a launch, including the creator funds wallet, the social links, and the image URL, is written on-chain along with the token. Treat that field as a billboard, not a form.

An address is pseudonymous, not anonymous. Anyone who learns which address is yours can read everything it has ever done, on this site and on every other.

Most chain data on this site is read by our server, so the RPC endpoint behind it sees us rather than you. The trade panel on a token page is the exception: it reads chain state from your own browser, including balances and approvals tied to the address you connected, straight to the Arc RPC endpoint this site is configured with. That endpoint sees your IP address next to whatever it is being asked about.

Signing and broadcasting a transaction goes somewhere else again. It leaves through your wallet, over whatever provider your wallet uses, which is a separate product with its own policy and usually its own default RPC.

Following a link to the block explorer, or loading a logo from an off-list host, is a request to that service under its terms, not ours.

We do not sell, rent, or trade personal data. There is also very little of it: the honest answer to “what do you have on me” is a server log line, and, if you made a profile, the fields you typed into it plus a connected X handle. What is on the chain is beyond anyone’s reach, ours included.

If this changes, in particular if analytics or any error reporting is ever added, it gets written here first, and a material change re-prompts that notice. The terms cover the rest of what using the site means.