Privacy policy

What we store

• When you sign in with X, Discord or GitHub: your numeric account ID, username, display name and profile picture link. They are kept in an encrypted login cookie in your browser, not on our servers.
• When you send while signed in: the same public profile, linked to that transfer, so the recipient sees who it's from. We keep it for about 400 days at most.
• When you send to an X, Discord or GitHub account: the recipient's public profile from our own lookup, matched to the account ID on the blockchain, so your history and the tracking page can show their name. We keep it for about 400 days at most and never use a name your browser sends us.
• If you tick "Show in public feed": the transfer appears in "Pigeons in flight" on the home page and on its tracking page, with your name (if you're signed in) and the recipient's. It's off by default. When it's off, the feed shows only "Someone sent" and the amount, and your name is never shown publicly.
• When you look someone up: their public X or GitHub profile (by @username) or Discord profile (by user ID): ID, username, name and picture. We cache it for 24 hours at most, so we don't look them up again.
• An index of transfers: a copy of what is already public on the blockchain (addresses, amounts, dates, the recipient's account ID), so /claim and /history load fast.
• To protect the service: counters per IP address, per signed-in account and per transfer that limit abuse and last a few minutes, a one-time code that links a send to your profile (15 minutes), and basic server logs from our hosting provider.

What we don't store or ask for

• No email, phone number or password. No DMs, followers, servers, messages or repositories.
• Discord: we only ask for "identify" (your ID, username and picture). GitHub: we ask for no permissions, so we see only your public profile, never your email, code or private repositories. X: its sign-in also asks for "read posts", because X won't give out a profile without it. We never read your posts.
• We can't post, message or act on X, Discord or GitHub on your behalf.
• No wallet private keys or seed phrases. Ever. Your wallet signs everything itself.
• Gift links: the secret part of the link stays in your browser. It never reaches our servers, so we don't know it and can't recover a lost link.

The blockchain is public

Transfers live on the Solana blockchain, which anyone can read. Wallet addresses, amounts, dates and the recipient's numeric X, Discord or GitHub account ID are public there, and nobody can delete them, including us.

Services we use

• X, Discord and GitHub (sign-in and profile lookup), Vercel (hosting), Upstash (data store), Helius (reading the blockchain), LI.FI (bridge widget), DexScreener (price chart).
• Each of them processes data under its own privacy policy.

Your choices

You can send without signing in (the recipient then sees "Someone sent you…"). You can sign out at any time and remove PigeonSend's access in your X, Discord or GitHub settings. To ask us to delete the profile data we keep, message @pigeonsend on X. See also our Terms of use.