Privacy Policy

1. Our Commitment to Privacy

SOLink is built with privacy at its core. We believe your communications should remain private, and we've designed our system to ensure that even we cannot access the content of your messages.

2. Information We Collect

2.1 Wallet Information (Public)

• Your public wallet address (used as your identity)
• Optional: Your chosen nickname (@username)

2.2 Encrypted Messages

• Messages are encrypted client-side using NaCl (XSalsa20-Poly1305) before transmission
• We store only encrypted ciphertext — we cannot decrypt or read your messages
• Message metadata: sender address, recipient address, timestamp

2.3 Push Notification Data

• If enabled: Your browser's push subscription endpoint
• This is required to deliver notifications when you receive new messages
• You can disable push notifications at any time in Settings

2.4 Automatically Collected

• IP address (processed by Cloudflare for security and delivery)
• Browser type and version (for compatibility)
• We do not use tracking cookies or analytics that identify you

3. Information We Do NOT Collect

• Private keys or seed phrases — these never leave your device
• Plaintext message content — we only see encrypted data
• Personal information (name, email, phone number)
• Location data beyond IP-based country (for compliance)

4. How We Use Your Information

• Message Delivery: Route encrypted messages between wallets
• Notifications: Send push notifications for new messages (if enabled)
• Service Operation: Maintain and improve the Service
• Security: Detect and prevent abuse, spam, and fraud

5. Data Storage and Security

Your data is stored on Cloudflare's global edge network, which provides:

• Enterprise-grade security and DDoS protection
• Data encryption at rest and in transit
• SOC 2 Type II, ISO 27001, and other security certifications

Encrypted messages are stored temporarily for delivery. Once delivered, messages are removed from our servers. Your local message history is stored only on your device.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties.

We may share data only in the following circumstances:

• Service Providers: Cloudflare for infrastructure (subject to their privacy policy)
• Legal Requirements: When required by law or valid legal process
• Safety: To protect the rights, property, or safety of users or the public

7. Third-Party Services

SOLink integrates with third-party services that have their own privacy policies:

• Phantom Wallet — for authentication
• DFN Patrol — for token security scanning (no personal data shared)
• Cloudflare — for infrastructure and delivery

8. Your Rights and Choices

You have control over your data:

• Access: Your messages are stored locally on your device
• Export: Use the Backup feature to export your data (AES-256 encrypted)
• Delete: Clear chat history at any time; disconnect wallet to remove association
• Notifications: Enable/disable push notifications in Settings

9. Data Retention

• Undelivered Messages: Stored until delivered, then removed
• Push Subscriptions: Retained while active; removed when disabled
• Nicknames: Retained until you change or remove them

10. Children's Privacy

SOLink is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe a child has provided us with data, please contact us immediately.

11. International Users

SOLink is operated globally through Cloudflare's network. By using the Service, you consent to the transfer and processing of your data in various locations worldwide.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or concerns, please reach out through our Twitter/X or GitHub.