Privacy Policy
upvoted is built to know as little about you as possible: no accounts, no names, no e-mail addresses, no advertising or analytics trackers. This policy explains the little we do process, why, and what you can do about it. The controller is the operator of upvoted.fun, reachable at legal@upvoted.fun.
1.What we process
- Your IP address, at the network edge, to find the country you connect from and block restricted regions. We keep the country only for that request; we do not store your IP address.
- A random visitor id in a cookie (uv_voter), created the first time you vote, so each visitor gets one vote per coin. It is not linked to your name, wallet or any account.
- Your votes: the coin, up or down, and when.
- A salted, one-way hash of your IP address stored with each vote and with a short-lived rate counter, so one network cannot cast unlimited votes. The raw address is never stored, and the hash cannot be turned back into it.
- Your wallet public key, when you connect a wallet: your browser uses it to build transactions, and sends it to our sanctions-screening endpoint before a trade or a launch. We do not store it.
- What you upload when you launch a coin: the image, name, ticker, description and links go through our relay to pump.fun's IPFS service, and become public and permanent.
- Reports you send about a coin (the coin, the reason, your text, your browser's user agent).
- Technical logs kept by our hosting provider (Cloudflare) for security and operations, such as request times, paths, status codes and error messages.
2.What stays in your browser
Some things are kept only in your browser's local storage, on your device, and are never sent to us: your acceptance of the entrance disclaimer (the date, the version and the boxes ticked), a copy of your votes so the arrows show instantly, your sort and view preferences, an RPC endpoint you may paste, and a cache of recently seen coins. Clearing your browser's site data removes them.
3.Cookies
We use only cookies that the site needs to work: uv_voter (your anonymous voting id, up to 400 days) and vt_region (the result of the region check, for the session). Our hosting provider may set its own strictly necessary security cookies to protect the site from bots. We use no advertising, analytics or tracking cookies, so there is no cookie banner to accept.
4.Why, and on what basis
- to provide the features you use (voting, launching, trading): performance of our agreement with you (the Terms of Service);
- to keep the site secure, stop vote manipulation and abuse, and keep it working: our legitimate interests;
- to block restricted regions and screen sanctioned wallets: our legal obligations and legitimate interests.
We never sell your data, never use it for advertising, and never build profiles of you.
5.How long we keep it
- votes, visitor ids and their network hashes: for as long as the voting feature exists, and at most 24 months after your last vote;
- rate counters: about an hour;
- reports: up to 12 months after they are handled;
- hosting logs: as set by Cloudflare, usually days to a few weeks.
6.Who else sees data
Your browser talks directly to some services to show live data and to send your transactions. They see your IP address and the requests you make, under their own privacy policies:
- Cloudflare (our host and network edge);
- Solana RPC providers (PublicNode by default, or the endpoint you choose) and the Solana network;
- PumpPortal (the live launch feed) and pump.fun (the IPFS upload of a coin you launch);
- IPFS gateways (Pinata, Filebase) and an image resizing service (wsrv.nl) that load coin images;
- price services (CoinGecko, Coinbase, Jupiter) for the SOL price;
- your wallet provider;
- a sanctions-screening provider, when one is configured, which receives wallet addresses.
Anything you do on the blockchain (your wallet address, transactions, the coins you launch and their content) is public by nature, visible to anyone forever, and outside our control. We may disclose data when the law requires it.
7.The $DOOT coin
$DOOT is not tied to upvoted and has no use on this website. We do not read, collect or use your $DOOT holdings or transactions for anything, and holding $DOOT gives no access to any feature and no rights over any data, on upvoted or elsewhere.
8.International transfers
The services above may process data outside your country, including in the United States. Where the law requires it, transfers rely on appropriate safeguards such as standard contractual clauses.
9.Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to complain to a data protection authority. Write to legal@upvoted.fun. Because we do not know who you are, we may need your visitor id (from your browser's cookies) to find your votes. We cannot change or delete anything recorded on a public blockchain.
10.Children
upvoted is only for people aged 18 and over. We do not knowingly process data of anyone under 18. If you believe a minor has used the site, contact us.
11.Security
We keep what we store to a minimum, hash network addresses, never handle private keys, and serve the site only over HTTPS. No system is perfectly secure; if we learn of a breach affecting your data, we will act as the law requires.
12.Changes
We may update this policy. The date above shows the latest version. Significant changes will be shown at the entrance of the site.
questions about this page: legal@upvoted.fun