Privacy Policy

Effective date and contact

Effective date: 22 September 2026.

Contact moonshotalphabot@gmail.com for support, privacy questions, complaints, or account-deletion requests.

1. About this policy

Aethelix provides a website and tools for exploring Solana token and market information. This policy explains how Aethelix ("we", "us", or "our") handles personal information on aethelix.app and through the independent Aethelix web application, including its account and research features.

The independent web application uses Privy for sign-in and account linking. You can use Google or a supported external Solana wallet. Firebase Firestore stores Aethelix web account records.

The current release supports browser research, account linking, and user-approved swaps through an external Solana wallet. The information processed depends on the features you use.

This policy covers the independent web service. Web accounts are separate from legacy account services; creating a web account does not mean that historical records from a separate service have been deleted.

2. Information we collect

Account and sign-in information

When you use Google sign-in, Google provides basic identity information through Privy. This can include a Google account identifier, email address, display name, and profile image. Our Aethelix account record stores your Privy user identifier, Google email and name when linked, account status, and account creation and update times. Privy also processes authentication and linked-account information to provide its service.

We request only basic Google identity permissions for sign-in: OpenID, email, and profile. This sign-in flow does not request access to your Gmail messages, contacts, Drive files, or calendar. We do not receive your Google password.

If you sign in with a wallet, or link one after signing in with Google, we receive its public address, supported network, wallet-provider information, and the result of verifying your ownership. A wallet address can become identifiable personal information when associated with your account.

Linking Google and a wallet associates those sign-in methods with the same Privy identity and Aethelix profile. These associations are not published as part of your public wallet address.

Wallet and transaction information

For the external-wallet web release, your wallet software controls your private keys. We do not ask you to upload a private key, recovery phrase, or wallet password. A sign-in signature proves control of an address; it is separate from approving a blockchain transaction.

When wallet-data or trading features are available, we process the information needed for your request, such as public balances, token addresses, transaction history, quotes, amounts, transaction instructions, signatures, status, and fee records. Public blockchain information can come from Solana, blockchain infrastructure providers, and market-data services.

Usage, device, and shared-page information

Our website and infrastructure providers process technical information needed to deliver and protect the service. This can include IP addresses, browser and device information, requested pages, referring pages, timestamps, error information, and security events.

Shared token-report pages record page views and clicks on links that open Aethelix. The implementation uses a browser-session identifier and a visitor identifier derived from an IP address, browser information, and the report identifier. Event records can include the report identifier, event type, referring page, platform, and session identifier. These identifiers are pseudonymous; they are not guaranteed to be anonymous.

When you use account features that save research, preferences, or activity, we process the information you choose to save and the account identifier needed to retrieve it.

Communications

If you contact us, we receive the contact information, message, and attachments you provide, together with information needed to investigate and respond. Please do not send passwords, recovery phrases, private keys, or unnecessary sensitive information.

3. How we use information

We use information to:

• Authenticate you, maintain sessions, link the sign-in methods you choose, and display your account and linked wallet.
• Provide requested token research and, when enabled, wallet and transaction features.
• Save your preferences and activity when you use features that provide this function.
• Understand shared-report usage and improve the reliability and usability of the service.
• Diagnose failures, prevent abuse, protect accounts, and investigate security incidents.
• Respond to support, privacy, and deletion requests.
• Maintain necessary records and meet applicable legal obligations.

Where a legal basis is required, the relevant basis depends on the purpose: providing a service you request, legitimate interests in protecting and operating that service where permitted, your consent where required, or a legal obligation. Where processing relies on consent, you may withdraw it for future processing.

Google information and model training

Google identity information is used for sign-in, account linking, account display, account security, and related support. It is not used to train token-listing models or general-purpose AI models, for advertising targeting, or to determine creditworthiness.

We do not sell personal information or provide Google identity information to data brokers. Our handling of Google information must follow the Google API Services User Data Policy, including its Limited Use rules where they apply.

Research involving public token and market data is distinct from Google account information. Any new processing of personal information would require appropriate disclosures and any required permission before it begins.

4. Who receives information

We share information only as needed for the purposes described here:

• Google: Handles Google account authentication when you choose it.
• Privy: Provides authentication, session management, and account linking, and processes identity and wallet information involved in those functions.
• Google Firebase / Firestore: Stores Aethelix web account records and related application data.
• Vercel and Railway: Provide website and application hosting and associated operational processing.
• Supabase: Supports existing market/report infrastructure and shared-report event storage. Fresh web account profiles use Firestore; this does not mean all Aethelix information is stored only in Firestore.
• Wallet, blockchain, RPC, and trading infrastructure: Receive public addresses, queries, and transaction information necessary for features you request. Your Google email and name are not needed to submit a Solana transaction.
• Other recipients when necessary: Authorities where disclosure is legally required, or professional advisers and service providers needed to address a security incident, legal claim, or support request, subject to appropriate restrictions.

We do not give every provider all account information. Providers process information according to their role and applicable terms. Some also process information for their own purposes, as described in their policies. Relevant information is available from Privy, Google, and Firebase.

A transaction submitted to Solana is shared with a public network. Its wallet addresses and transaction details can be copied, indexed, and retained by others. We cannot make that public record private or delete it.

If ownership or operation of Aethelix changes, any transfer of personal information must respect applicable law and the commitments in this policy. Google information remains subject to Google's applicable restrictions, including any required consent.

5. Cookies, browser storage, and external resources

Aethelix and its authentication providers use browser storage and similar technologies for functions such as sign-in, session continuity, security, and preferences. Shared-report pages use session storage for the measurement described above. Referral and campaign information may be retained in browser storage and associated with your account after sign-in so we can understand how people find Aethelix.

Some pages also load resources, such as fonts or token images, from external providers. Your browser sends those providers technical information needed to load the resource, which can include your IP address and browser information.

You can control cookies and site storage through your browser. Blocking or clearing them may sign you out, reset preferences, or prevent account linking from working. Where optional tracking requires consent, we will obtain that consent before using it. Authentication storage and shared-report measurement should not be assumed to have identical consent requirements.

6. Storage, retention, and security

We retain personal information for as long as needed for the purposes described in this policy, unless a longer period is required or permitted by applicable law. Retention depends on the type of information and why it is needed.

Account information is generally needed while your account is active. Support records, transaction records, and security logs may need to be kept to resolve a request, investigate abuse, meet a legal obligation, or address a dispute. Records no longer needed for these purposes should be deleted or, where appropriate, made genuinely anonymous. Backup copies may remain until the relevant backup cycle expires and should not be used for ordinary operations.

Information can be processed in countries other than your own through our infrastructure providers. Where applicable law requires safeguards for a transfer, those safeguards must be in place. You may contact us for information about the processing locations and protections relevant to your information.

We use measures intended to protect information, including authenticated access and restricted access to backend systems. No website, provider, or blockchain system can guarantee complete security. Protect your Google account, wallet, and device, and contact us if you suspect unauthorized access.

7. Your choices, requests, and account deletion

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or a portable copy of certain information; to object to certain processing; or to withdraw consent. You may also have the right to complain to a relevant data-protection authority.

Send requests to moonshotalphabot@gmail.com. We may ask for proportionate evidence that you control the account before disclosing or changing its information. We will not ask for your private key, recovery phrase, or Google password. We will explain any information we must retain and respond within applicable legal time limits.

For account deletion, identify the Aethelix account or linked wallet concerned. After verifying your request, we will arrange deletion of the Aethelix profile and associated account data that we are not required or otherwise lawfully entitled to retain, including relevant authentication-provider records under our control. This is a request process, not a claim that an automatic deletion button is currently available.

Deleting an Aethelix account does not delete your Google account, external wallet, or public blockchain history. Signing out, disconnecting a wallet, or revoking Google access is also not the same as requesting account deletion. You can manage Google's authorization separately through your Google account settings.

If you remove a sign-in method, ensure that another working method remains available before doing so. Access to an external wallet still depends on that wallet's own credentials and recovery options.

8. Age limits

The independent Aethelix service is intended for adults aged at least 18 and old enough to enter a binding agreement where they live. We do not knowingly offer accounts to children. If you believe a child has provided account information, contact us so that we can investigate and take appropriate action.

9. Changes and contact

We will update the effective date when this policy changes and provide additional notice for material changes where appropriate or legally required. If a new use of Google information or other personal information requires permission, we will obtain that permission before starting that use.

Privacy questions, complaints, and account-deletion requests: moonshotalphabot@gmail.com.