Privacy contact
This policy describes how SolBrisk handles information for solbrisk.com. For privacy questions, account access, corrections, closure or deletion requests, contact [email protected]. Send your request from your registered email where possible. We verify account ownership before disclosing or changing account information.
Information we store
We store your name, email address, a salted password hash, session records, account balance, billing ledger, payment orders, public transaction signatures, subscriptions, and configured destination IP addresses and UDP ports. Passwords are hashed using scrypt; plaintext passwords are not stored. Email verification codes are stored as keyed hashes with a ten-minute expiry and are deleted after use. We also store verification timestamps and attempt counters.
How the information is used
We use these records to authenticate accounts, verify payments and endpoint ownership, deliver subscribed data, enforce plan limits, detect abuse and maintain an auditable service-credit ledger. Public blockchain transactions are independently visible on Solana.
Cookies and external services
The application uses a first-party HttpOnly session cookie and browser storage for your language preference. It does not include advertising or analytics trackers. Cloudflare handles website traffic and receives connection information such as IP addresses. Requested verification emails are sent through the configured email provider, which receives your email address and message content. Payment verification sends public address and transaction queries to the configured Solana RPC provider. These providers may process information in different countries. Wallet extensions and blockchain explorers follow their own privacy policies.
Security checks
We use Cloudflare Turnstile to protect verification emails and unusual sign-in attempts. Cloudflare processes security signals such as your IP address and browser information to assess automated traffic. We validate its single-use tokens on the server and keep temporary hashed identifiers and failure counters for abuse prevention. Cloudflare’s privacy policy applies to its processing.
Wallet security
We do not request or store the seed phrase or private key of your paying wallet. Your wallet signs payments locally. The platform creates separate receiving wallets for deposit orders and stores their encrypted keys on the server for collection. Deposit amounts, receiving accounts, transaction signatures and chain times are retained as financial records. The optional wallet connection for historical orders is initiated only when selected.
Retention and access
Account and destination records are retained to provide the service while your account remains open. There is no automatic deletion of an account after inactivity. Account closure and deletion requests are reviewed through the privacy contact above, including any remaining balance, active services and records that must be retained.
- Authentication: email codes are valid for ten minutes and deleted after successful use; expired codes are cleaned up during later code requests. Account sessions expire after seven days, and expired session records are cleaned up on subsequent sign-ins. Expiry invalidates credentials even if a record has not yet been removed.
- Billing and recovery: deposit orders, receipts, transaction signatures, service-credit entries, subscriptions and encrypted receiving-wallet keys are not automatically deleted when an address or subscription expires. They support reconciliation, late-payment recovery and dispute handling. Retention is reviewed when you request deletion, subject to outstanding obligations and applicable law.
- Regional metrics: minute-level traffic samples are kept for a rolling 24-hour period and pruned as new samples arrive. The latest regional status is retained for service monitoring.
- Backups: daily database backups rotate after 14 days following a successful backup. Separate release and incident-recovery snapshots may be retained for recovery. Removing a live record does not immediately rewrite existing backups; access to them is restricted, and retained records remain subject to this policy.
Your requests
You can remove configured destinations through the console. You may request access to your account information, correction of inaccurate information, or account closure and deletion by email. We explain any records that need to remain for billing, security, recovery, disputes or legal obligations. Blockchain records are public and cannot be edited or deleted by SolBrisk. We never need your paying wallet’s private key or seed phrase to handle a request.