Privacy policy

Two entries in this site's local storage, both readable only from this browser:

Nothing else is persisted. There is no database behind the app, no session, and no cookie set by WHYUS? itself. Clearing your browser's site data — or pressing Disconnect in the wallet dialog — removes both entries.

Boosting a token is the one thing that sends data to the app's own server. If you submit a boost request from the Boost page, exactly what you type into the form is stored on the server:

• the chain and the token contract address you want boosted;
• the contact handle you give us, so payment can be confirmed with you;
• your optional note, and the time the request was made.

The request is shown in the public boost queue and in the boosted strip once it is running, so treat the note as public. The request is not linked to a wallet, to your address or to any other visitor data — it is not stored with your IP address, and nothing else about you is collected. Ask the operator on either channel below to delete a request you submitted.

• Connecting uses the wallet you already have installed. The app sees the address and network you authorise and nothing else — never your seed phrase, private key or funds.
• The signature you are asked for is a plain-text ownership challenge. It cannot move funds, approve tokens or authorise a transaction, and it is not a login: it grants no access to anything.
• The address and signature are not transmitted anywhere by this app. They stay in local storage so the dialog can show your verified state, and they are erased when you disconnect or clear site data.

Market data has to come from somewhere, so loading the app means your browser talks to these services directly. Each of them sees your IP address and user agent under its own privacy policy, and each may set its own cookies or similar storage:

Two more providers are deliberately absent from that list: api.geckoterminal.com and gateway.thegraph.com (where a Uniswap pool's candles come from) are contacted by the app's own server, not by your browser, because the first of them throttles by caller. Your IP address is therefore never shared with either, and the only thing that leaves the server is a request for public market data — no address, no signature, nothing that identifies you.

If you open a token's website, social profile or a trading link, you leave WHYUS? and that destination's own policies apply.

• No account, email address or password is ever requested or stored.
• No analytics, advertising, fingerprinting or cross-site tracking.
• No selling, sharing or profiling of personal data — there is none to sell.
• No server-side logging of your address, holdings or searches by this app.

The app's error boundary can forward a crash report to the Lovable editor preview, but only when the app is running inside that editor (the reporting hook exists only there). In a normal deployment nothing is sent.

The app is a trading-data tool for adults and is not directed at children. It does not knowingly collect information from anyone, including children.

This policy describes the app as it works today; if the app's data sources or stored preferences change, this page is updated and the date at the top of the page moves. Privacy questions, objections and deletion requests go to @whyusdotfun on X or @whyusdotfun on Telegram, the operator's published channels. The operator is whyus.fun (https://whyus.fun); the legal entity behind it and its registered jurisdiction have not been published yet and must be added here before this policy is relied on commercially.

See also the terms of service and docs.