Privacy Policy

stonkme.fun is a static page. It has no sign-in, sets no cookies, and runs no analytics. Our host keeps routine server logs, including IP addresses.

When you sign in to the app, we store:

• an account identifier from our sign-in provider, so we recognise you next time;
• your email address, or your X handle if you sign in with X;
• the Solana wallet address created for you at sign-in;
• whether you are approved, and how: the invite code you used and whose it was, your place on the waitlist, or your SKR check;
• the invite codes we give you, and who used them;
• if you link a Seeker wallet: its address, a signed message proving it is yours, and its SKR balance, which we read from Solana mainnet.

If you sign in with X, our sign-in provider confirms who you are. We do not post for you, read your timeline, or see your followers or messages.

When you ask the agent to pick stocks, the text you typed (or the news story) is sent to our agent provider to get an answer. Do not put personal information in it.

The app runs on public blockchains. Your wallet address, your stake, your trades, the markets you open and join, and your predictions are visible to anyone, and we cannot edit or delete them. Inside the app, other people see your X handle (or a shortened wallet address) next to your markets and trades.

To sign you in, to check invite codes and run the waitlist fairly, to give you test funds, to show names next to markets, to spot abuse, and to keep StonkMe secure. When someone new signs in, gets in with a code or joins the waitlist, our team gets an alert with their email or X handle, so we can let people in and watch for abuse.

These providers handle data for us, each under its own privacy policy:

• Privy for sign-in and the wallet created for you. Your credentials and private keys stay with Privy; we never see them.
• Supabase for our database, in the United States.
• Vercel for hosting, with routine logs including IP addresses.
• Helius for access to Solana, which sees your wallet's requests.
• cruq for the stock-picking agent, which receives the text you send it and passes it to the AI model behind it.
• Telegram, where our team's sign-in alerts arrive.

We use public market data from Hyperliquid, Jupiter and Yahoo Finance, and send them nothing about you. We do not sell your information, and we share it with no one else unless the law requires it or we need it to establish or defend a legal claim. Because these providers are in the United States, your information is stored there; for the UK and EEA, transfers rely on the providers' standard contractual clauses.

The sign-in provider keeps a session token so you stay signed in. The app remembers a few preferences, such as whether your Seeker wallet signs. No advertising or tracking cookies.

For as long as your account exists, or until you ask us to delete it. On deletion we remove your account details; we may keep a record that an invite code was used so it cannot be used again. Anything on a blockchain stays there.

You can ask for a copy of what we hold about you, or ask us to correct it, delete it, restrict how we use it, or send it to you in a portable form. Email legal@stonkme.fun from the address you signed in with, or tell us your X handle, and we will reply within 30 days at no charge. In the UK or EEA you can also complain to your data protection authority.

Traffic is encrypted, the database is not publicly reachable, and only people who need it have access. No system is perfectly secure; if a breach puts your information at risk, we will tell you without undue delay.

StonkMe is not for anyone under 18, and we do not knowingly collect their information. If you believe a child has signed up, email us and we will remove the account.

If we change this policy we update the date at the top. If a change materially affects how we use your information, we will tell signed-in users in the app.

Blinks Labs, at legal@stonkme.fun. Our Terms of Use also apply.