Privacy Policy

Account identifiers. When you sign in, our authentication provider (Privy) gives us an account ID and the public wallet address linked to your account.

Your Stack Rule. The percentage and destination asset you choose to stack.

Trade activity. For each Sell + Stack you start: the token sold, amounts, the asset received, transaction hashes, the chain, status, and (if a trade fails) the error message. This powers your Activity and Portfolio pages. This information is also publicly visible on the blockchain.

Extension pairing. When you pair the extension, we store a one-way hash of its session token, when it was created, last used, expires, and whether it was revoked.

Basic request data. Our hosting provider processes IP addresses to serve requests, and we use them briefly in memory for rate limiting. We do not store them in our database.

The extension stores three things locally in your browser: its session token, your paired wallet address, and a cached copy of your Stack Rule. You can clear them at any time with “Unpair” in the side panel or by removing the extension.

The extension only runs on supported token launchpad sites (Pons and NOXA). On those pages it reads the page address and a small set of page metadata to find the token contract address you are viewing. It does not read your browsing history, does not run on other websites, and does not record page content.

When you click Sell + Stack, the extension asks the wallet already connected on that page to show you each transaction for approval. It cannot sign anything without your confirmation in your wallet.

We do not sell your data and do not use it for advertising. We share the minimum needed to run the service with:

• Privy — sign-in and wallet authentication.
• Supabase — database hosting for the data described above.
• Vercel — web hosting.
• Uniswap Labs Trading API — receives your wallet address, the tokens, and amounts to build swap quotes and transactions.
• Robinhood Chain RPC providers — your wallet address and token addresses are sent in blockchain read requests (balances, token details, transaction receipts).

We do not use analytics or tracking cookies.

We keep your data while your account is active. Pairing codes expire after 10 minutes and extension sessions expire after 90 days. You can revoke paired extensions at any time from Settings. To delete your account and all associated records, email us at the address below. Records already written to the blockchain are public and cannot be deleted by anyone.

Data is encrypted in transit (HTTPS). Database access is restricted with row-level security, and extension tokens and pairing codes are stored only as hashes.

Questions or deletion requests: support@profitstack.tech. If this policy changes, we will update the date above.