Privacy Policy

Windy ("we", "us") operates this application. If you have questions about this policy or your data, contact us at info@aircoinhaven.app.

• Wallet address. Your Solana wallet's public address. This is a public on-chain identifier and is used as your account identity on Windy.
• Sign-in signatures. When you connect, your wallet signs a short message ("Sign in to Windy"). The signature and message are stored in your browser's session storage and sent with requests so we can verify it's really you.
• Profile information you provide. Handle, display name, bio, avatar, banner image, links to your other social profiles, and content preferences (e.g. NSFW visibility, chart provider).
• Content you create. Bubbles (posts), replies, polls, votes, follows, likes, tags and mentions, tips, reports, and uploaded images.
• On-chain data tied to your wallet. Cached token holdings, tipping activity, and (where applicable) flagged "whale" movements derived from public blockchain data.
• Technical data. IP address, user agent, request timestamps, and error reference IDs are processed by our hosting provider for security, abuse-prevention, and debugging.
• Cookies and local storage. See "Cookies" below.

• To operate the app: authenticate you, render your feed, deliver notifications.
• To moderate content, prevent abuse, and enforce our rules.
• To compute aggregate analytics (e.g. trending tokens, leaderboards).
• To debug issues using error reference IDs we generate per failed request.
• To comply with legal obligations and respond to lawful requests.

For users in the EEA, UK, or Switzerland, we rely on the following legal bases:

• Performance of a contract — to provide the features you request.
• Legitimate interests — security, abuse-prevention, and improving the service. You can object at any time (see "Your rights").
• Consent — for any non-essential cookies or analytics. You can withdraw consent at any time using the cookie banner.
• Legal obligation — when required to retain or disclose data.

We do not sell your personal data. We share information with:

• Service providers who process data on our behalf — e.g. our backend host (Lovable Cloud / Supabase), Solana RPC providers (Helius), and price data providers (Birdeye). Each is bound by their own confidentiality and security obligations.
• The public. Anything you post publicly (Bubbles, profile, follows, likes, tips) is visible to anyone using the app and may be indexed by search engines.
• Authorities when required by law or to protect rights, safety, and integrity of the service.

Windy uses your browser's sessionStorage and localStorage to store essential information so the app works:

• Your wallet sign-in signature (so you don't have to re-sign on every action). This is strictly necessary and is not shared.
• UI preferences such as your selected wallet and viewer preferences.
• Your cookie-banner choice (so we don't ask again).

Windy does not currently load third-party advertising or cross-site tracking cookies. If that ever changes, we'll update this page and ask for your consent through the cookie banner first.

We keep your content and profile for as long as your account is active. You can delete individual Bubbles at any time. To delete your account and associated data, contact us at the email above; we'll remove personal data within 30 days, except where retention is required by law or to resolve disputes.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Receive a portable copy of data you provided.
• Withdraw consent at any time (without affecting prior processing).
• Lodge a complaint with your local data protection authority.

California (CCPA / CPRA): California residents have the right to know, delete, correct, and limit use of sensitive personal information. We do not "sell" or "share" personal information as those terms are defined under California law. To exercise any right, email us at the address above.

Windy is not directed to children under 16 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we'll delete it.

Our service providers may process data in the United States, the European Union, or other regions. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers out of the EEA/UK.

We protect your account using cryptographic wallet signatures (no passwords), row-level security on the database, encrypted transport (HTTPS), and administrative access controls. We mask internal errors in client responses and log full details server-side with a reference ID so we can investigate without leaking sensitive information. No system is perfectly secure; please report any concerns to the email above.

We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be highlighted in-app.

Questions, requests, or complaints? Email info@aircoinhaven.app.