Privacy policy
Last updated 19 October 2026
We collect as little as the service needs to work. There are no ads, no third-party analytics and no tracking across other sites, and we don't sell data. We do count how often members use the app, and we can see what each member watches; both are explained below. This page says what we collect and what you can do about it.
Who is responsible
Soltrack is run by DonFerlo, the controller of your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to lickhitter67@gmail.com. You can also ask in our Discord's #help channel, but don't post personal details there.
What we collect
The full list, with how long each item is kept, is on Your data. In short:
- Your Discord identity, when you sign in: your Discord user ID, username and display name. We ask Discord for nothing else: no email address, no server list, no messages. We don't keep Discord's sign-in token.
- Your login: the username the owner gives you and a scrambled form of your password (an scrypt hash), so we can check it when you log in. We don't keep the password itself and can't read it back. The owner gives you a temporary password privately; you must replace it on first use. Our Discord bot can also post it in a private thread under #get-your-login that only you can see.
- Your membership: whether you're in our Discord server and hold the member role, which we check with our Discord bot, to grant access. For now there is no subscription: access depends only on holding the ◆ Premium Member role in our Discord. Later, membership will be a paid subscription on this site that gives you the role automatically when you pay; we'll announce it before that changes. This policy will be updated first to cover the payment records that requires.
- Your dedicated trading wallet and trades: the server holds its key encrypted and uses it to sign trades you authorize, including automatic trading while your browser is closed. The operator controls the server and its encryption key. We retain wallet addresses, orders, positions, transaction signatures and the 2% fees on successful buys and sells. Use a dedicated wallet, not your main savings wallet.
- Image generation: when enabled and requested, your prompt and supplied images go to OpenRouter and its model provider. We retain a monthly cost ledger to enforce your $0.50 allowance. Paid text/support AI is disabled.
- Your IP address, held in memory for a few minutes to limit how often sign-in and app requests can be called. It isn't written to disk or logged.
- Your Telegram connection, if you connect: the session Telegram creates when you authorize a QR or number-and-code login, your Telegram first name, and the names of the groups and channels your account is in, so you can pick which to watch. Telegram sessions technically grant broader account access; it's used only for the ones you choose, and never to post or message. It is stored encrypted, with a separate workspace key controlled by the operator, and never written to disk unencrypted. Number-and-code login asks for your account number and Telegram verification code. Codes and two-step passwords are passed to Telegram and are not logged or stored. A two-step password, if you have one, goes straight to Telegram and isn't stored.
- The X accounts you track. You don't sign in to X. Our own X accounts read the posts, so X doesn't learn who asked. Other members never see your list; we can (see who else sees it).
- Inside the app: the sources, rules and limits you set, and the messages the app reads from the channels you choose, kept so the app can do its job.
- How often you use the app: a count of your requests to the app for each hour, and the time of each sign-in and whether it was with Discord or a password. Nothing about which screens you look at, your browser or your IP address.
- Your trading platform: whether the app's Open buttons take a coin to Axiom or Padre, which you choose in Settings.
Why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Signing you in and checking your membership | Discord ID, name, membership, username and password hash | Contract, 6(1)(b) |
| Executing your trading instructions and collecting trading fees | Dedicated wallet key, address, orders, positions and transaction records | Contract, 6(1)(b) |
| Reading the Telegram chats and X accounts you choose | Telegram session and name, your chats' names, tracked X accounts, the messages read | Contract, 6(1)(b) |
| Keeping accounting records | Trades and trading fees | Legal obligation, 6(1)(c) |
| Keeping the service secure and preventing abuse | IP address (in memory), session | Legitimate interest, 6(1)(f) |
| Running and improving the service: how many members use it and when, which channels members watch, which coins those channels post and how those coins do | Membership, trades, usage counts, the channels and X accounts you watch and the messages read from them | Legitimate interest, 6(1)(f) |
| Finding good channels: we may follow a channel a member watches, for our own use. We never tell anyone which member watches it. | The channels and X accounts you watch and the messages read from them | Legitimate interest, 6(1)(f). You can object: write to us and we'll leave your list out. |
| Generating images you request | Prompt, supplied images and cost ledger | Contract, 6(1)(b) |
We make no decisions about you by automated means that have legal or similarly significant effects.
Who else sees it
- Us, the operator. Our admin panel, which only we can open, shows each member's membership, trades, positions and fees, how often and when they use the app, the Telegram channels and X accounts they watch, and the coins those channels posted. We use it to run the service, and we may follow channels our members watch for our own use. Other members never see any of it.
- Discord handles sign-in and holds the member role. Discord's own privacy policy covers what it does.
- The Solana blockchain. Trades and fee transfers are public transactions. Anyone can see their addresses and amounts permanently. The service does not deliberately publish your Discord identity on-chain. We can't delete anything from the blockchain.
- Our Solana RPC provider receives wallet addresses, transaction lookups and signed trades to submit.
- OpenRouter and the AI model provider it routes to receive prompts and images when you request image generation. We request providers with no retention or training; their own policies also apply.
- Telegram knows that your account is connected to "Soltrack" and which chats the app reads. It lists the connection under Settings → Devices, where you can end it.
- X (Twitter). Profile pictures in the app load from X's image server, which sees your IP address when your browser fetches them. The posts of the accounts you track are read by our own X accounts.
- Hosting. The service runs on a Hostinger virtual server in Düsseldorf, Germany (EU). It does not connect to the owner's personal computer.
Some of these companies are in the United States. When your data goes outside the EU, it goes under the safeguards the GDPR requires: an adequacy decision such as the EU-US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.
Support
Contact the operator at lickhitter67@gmail.com. Paid AI support is disabled. Never send a wallet key, recovery phrase, password or verification code in a support message.
How long we keep it
- Sign-in cookie: 7 days, or until you sign out.
- Username and password hash: while you're a member, and then until you ask us to delete them. Wrong-password counts: 15 minutes.
- Trade and fee records: for as long as you're a member, and then for as long as accounting law requires.
- Membership record: while you're a member. After that, we delete it on request unless the law requires us to keep it.
- Telegram connection: until you disconnect or request deletion. Losing the member role stops the workspace but does not erase its stored data. Backups may retain earlier encrypted records.
- Tracked X accounts and chosen sources: while you keep them in the app.
- IP addresses for rate limiting: a few minutes, in memory only.
- Image cost ledger and trading wallet records: while you use the service, then subject to deletion requests and applicable record-keeping obligations.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to receive it in a machine-readable form. You can also object to processing that relies on our legitimate interest. Write to lickhitter67@gmail.com. We answer within one month, and it's free.
If you think we've mishandled your data, you can complain to the Slovenian data protection authority, the Information Commissioner (Informacijski pooblaščenec), or to the authority where you live.
Age
Soltrack is for adults only. Don't use it if you're under 18.
Changes
When this policy changes, we update the date at the top. If the change matters, we also announce it in our Discord's #announcements before it takes effect.