Sol Oil Factory

Privacy policy

v3.2 · effective Mar 1 2026

Solana Oil Factory respects your privacy. We collect the minimum information needed to operate the service, never sell your data, and keep on-chain activity public-by-design.

Plain-language summary. Connecting a wallet shares only your public address with us — no email, no name, no KYC. We log requests for rate limiting and abuse prevention. Cookies are functional only, not for ad tracking.

What we collect

We collect (1) your wallet's public address when you connect, (2) anonymized request logs (IP truncated to /24, user-agent, timestamp) for security, and (3) optional contact details if you submit a support ticket or sign up for an API key.

What we don't collect

How we use what we collect

Wallet addresses are stored to render your dashboard, compute your reputation, and surface refineries you're eligible for. Request logs are used only for abuse mitigation and are auto-deleted after 30 days. Support tickets are deleted when the ticket is closed plus 90 days.

On-chain data is public

Every claim, snapshot, refinery launch, and reputation calculation is recorded on Solana. Anyone can read them — that's how the service works. We don't add new privacy guarantees on top of what's public, nor do we hide what's already on-chain.

Cookies

Three functional cookies: theme preference (light/dark), connected wallet hint (last-used wallet for autoconnect), and ToS acceptance version. Set with SameSite=Strict and Secure attributes. No analytics cookies.

Third-party services

We use Helius for Solana RPC (request data: pubkey + IP). We use Vercel for hosting (request logs: standard server access logs). Both are bound by their own privacy policies, which we've reviewed and consider acceptable for our use case.

Your rights

You can request export or deletion of any personal data tied to your wallet by emailing privacy@solanaoilfactory.com. We respond within 30 days. Note: on-chain data cannot be deleted — only your off-chain associations (e.g. support tickets, API keys).

Children

SOF is not intended for users under 18. We do not knowingly collect information from minors. If you believe a minor has connected, email privacy@solanaoilfactory.com and we will delete any associated records.

Jurisdiction

SOF operates from Delaware, USA. Regardless of your jurisdiction, these terms govern; you may have additional rights under your local privacy law (e.g. GDPR, CCPA), which we respect.

Changes to this policy

Material changes are announced 30 days in advance. Effective date updates here.

Contact

Privacy questions: privacy@solanaoilfactory.com. Data protection officer: dpo@solanaoilfactory.com.