privacy policy

there is no email field, no password, no phone number, no legal name, and no identity verification anywhere in trendy. we do not run advertising or cross-site tracking pixels, and we do not sell or rent data to anyone.

• ·your public solana wallet address, which doubles as your account identifier.
• ·a display username derived from or chosen for that wallet.
• ·a session token stored in a cookie so you stay signed in after signing the login message.
• ·the tiktok handle you verify, plus a timestamp confirming the bio code was found. we do not store the code itself.
• ·videos you launch: title, ticker, image, tiktok url, and the token mint address.
• ·bounties you create: category, reward amount, slot count, and deadline.
• ·submissions you make: the public proof url, status, and payout transaction signature.
• ·comments you post and the time you posted them.
• ·the timestamp of the last time you opened your notifications, used only to show an unread dot.

every video gets its own escrow wallet. the public address is stored in plain text so balances can be displayed, and the secret key is encrypted at rest with aes-256-gcm before it ever touches the database. it is decrypted only in memory, on our server, at the moment an approved payout is sent.

this is still a hosted hot wallet. fund escrows with working capital, not savings.

we use one essential cookie to keep your session alive. it is not used for advertising or profiling. clearing it signs you out. if you block it, you can still browse the board but cannot launch, claim, review, or comment.

launching a token, funding an escrow, and receiving a payout are all public solana transactions. your wallet address, amounts, and timestamps are permanently visible to anyone on any block explorer. we cannot edit, hide, or delete blockchain records — no one can. assume any wallet you connect is publicly linkable to your activity here.

• ·pump.fun — token creation and metadata hosting when you launch. your launch settles through their protocol.
• ·solana rpc providers — used to read balances and broadcast transactions.
• ·dexscreener — supplies the live price and market cap figures shown on cards.
• ·tiktok — we fetch public profile pages and oembed data to resolve your handle and check for your verification code. we never receive your tiktok login.
• ·neon — our postgres database host.
• ·vercel — hosting and privacy-friendly aggregate analytics.

each of these operates under its own privacy policy, which we do not control.

strictly to run the product: authenticating your wallet, gating launches behind tiktok ownership, matching clippers to bounties, sending approved payouts, showing leaderboards and activity, and preventing spam, phishing, and fraud. that is the entire list.

account, video, bounty, and submission records are kept while trendy operates, since they form the public payout history other users rely on. you can ask us to remove your comments, username, or verified tiktok handle by reaching out on x. payout records tied to on-chain transactions and anything already published to the blockchain cannot be erased.

we encrypt escrow secrets, scope every database query to the signed-in wallet, use parameterized queries, and rate-limit posting. no system is perfectly secure, though, and you use trendy at your own risk.

trendy is not for anyone under 18 and we do not knowingly collect data from minors. if you believe a minor is using the site, tell us and we will remove the account.

if this policy changes materially, we will update the date at the top of the page. see the terms of service for the rules that govern using trendy.