# Privacy

Last updated 25 September 2026.

This says what rangebound collects, why, who else sees it, and how to get rid of it. It describes what the
software actually does rather than what a template says it might, so where it is specific, that specificity is
deliberate.

rangebound is operated by the rangebound team ("we"). Contact: **privacy@rangebound.xyz**.

## The short version

You can read most of rangebound without an account. If you make one, we hold your email address and the settings
you choose. We have no analytics, no advertising, and no tracking of any kind. We never see a password, because
there are none, and we never see a private key, because we never ask for one.

## What we collect, and why

**Your email address.** Required to have an account, because it is how you sign in — we email you a link rather
than keeping a password. Basis: performing the service you asked for.

**Your name and profile picture, if you sign in with Google.** Google tells us your Google account identifier,
your email address, your name and your picture URL. We keep them to show you who you are signed in as. If you
sign in by email instead, we have none of this.

**Session records.** When you sign in we store a record of the session: when it started, when it expires, when
it was last used, the first 200 characters of your browser's user-agent string, and the IP address it started
from. The user-agent and IP exist so you can recognise your own devices and sign out ones you do not. They are
never used to decide whether you may do something.

**Sign-in link records.** The address a link was sent to, when it was issued, when it was used, and the IP
address that asked for it — kept until the link expires, so that a link cannot be used twice and so we can rate
limit someone hammering the form.

**What you save.** The pools on your watchlist, the wallet addresses you follow, any labels you give them, your
display preferences, and any alert rules you set. Settings are stored in your browser, and when you are signed in
they may also be stored on your account so they follow you between devices.

**Wallet addresses are public identifiers.** Everything you label is already public on the Solana blockchain, and
labelling one is a private note to yourself. It proves nothing about ownership, we never check it, and it grants
no access to anything.

## What we never collect

- **Passwords.** rangebound has none. There is nothing to leak, reuse, or reset.
- **Private keys or seed phrases.** rangebound never connects to a wallet, never asks for a signature, and never
  executes a transaction.
- **Payment details.** We take no payments.
- **Analytics, advertising, or tracking.** There is no analytics script, no tracking pixel, no advertising
  network, and no third-party session recorder on any rangebound page. We do not build profiles and we do not
  sell or share personal data with anyone for their own purposes.

## Cookies

Exactly one, and only once you sign in:

| Cookie | What it is | How long |
|---|---|---|
| `rb_session` | A random session identifier. Marked `HttpOnly`, `Secure` and `SameSite=Lax`, so page scripts cannot read it and other sites cannot make your browser send it. | 30 days, refreshed while you use it. Deleted when you sign out. |

It is strictly necessary — it is the thing that signs you in — so there is no consent banner to click. We set no
other cookies for any purpose.

Your browser also keeps some settings locally (your watchlist, chosen columns, and similar) using browser
storage. That data stays on your device unless you are signed in, in which case it may also be saved to your
account.

## Who else sees your data

We use a small number of services to run rangebound. They act on our instructions and for no other purpose.

| Who | What they get | Why |
|---|---|---|
| **Railway** | Everything the service stores, since they host it and the database | Hosting |
| **Resend** | Your email address and the sign-in email itself | Delivering sign-in links |
| **Google** | Only if you choose Google sign-in: the fact that you signed in to rangebound | Sign-in |
| **Google Fonts** | **Your IP address and the fact that you loaded a rangebound page**, because both sites load a webfont from `fonts.googleapis.com` and `fonts.gstatic.com` | Typography |

That last row is worth stating plainly rather than leaving in a footnote: loading a font from Google means Google
sees a request from your IP address, on every page, whether or not you have an account or are signed in.

The market-data providers rangebound uses to build its figures — Helius and Jupiter — receive nothing about you.
They are asked about public blockchain data by our servers, never by your browser.

Links to block explorers such as Solscan are ordinary links. Nothing is sent to them unless you click.

## How long we keep it

- **Sessions**: 30 days, or until you sign out, whichever is first. Expired sessions are deleted automatically.
- **Sign-in links**: 15 minutes. Spent and expired records are deleted automatically.
- **Your account and its settings**: until you ask us to delete them.
- **Server logs**: our hosting platform keeps operational logs for a short period. We do not keep our own record
  of which pages you viewed — request logging is switched off.

## Security

Session identifiers and sign-in links are stored only as SHA-256 hashes, so a copy of our database contains
nothing that can be presented to the service as you. Everything travels over TLS. There are no passwords to
protect, which removes the most common cause of account compromise entirely.

No system is perfectly secure, and rangebound is a beta. If you find a problem, please write to
**security@rangebound.xyz** before disclosing it publicly.

## Your rights

You can ask us to show you what we hold, correct it, delete it, or send you a copy. Write to
**privacy@rangebound.xyz** and we will act within 30 days. There is no charge.

If you are in the UK or the EU, the UK GDPR and GDPR give you these rights, and you may complain to your national
data protection authority. Our legal bases are performing the service you asked for (your account and its
settings), and our legitimate interest in keeping the service secure and available (rate limiting, session
records).

rangebound is hosted in the United States, so your data is processed there.

## Children

rangebound is not intended for anyone under 18 and we do not knowingly collect their data.

## Changes

If this changes in a way that matters, we will say so on this page and change the date at the top. The history of
this document is public in the rangebound repository.

---

**This is a plain-language policy written to be accurate about the software, not legal advice.** If you are
relying on rangebound in a regulated context, have your own counsel review it.