Privacy
Privacy Policy
What yieldoracle.fund collects when you read it, sign in with Phantom or stake, and what it does with it.
What we collect
- Reading the site. Our host, Vercel, processes standard request data (IP address, browser, pages requested) to serve and protect the site. IP addresses are also held briefly in memory to limit how often one address can call the site. There are no analytics, no ads and no tracking cookies.
- Signing in with Phantom. Your wallet's public address, a session cookie, a keyed hash of your IP address (not the address itself) and your browser's user agent. A session lasts seven days, and its record is deleted 30 days after it ends. It is stored under a hash of the cookie, so the database never holds a working cookie.
- Staking. Your wallet address, the coins you stake, the balances read from the chain every ten minutes, and what you earned and were paid. These figures are public on the chain; pool pages show stakers by shortened wallet address.
Cookies
One cookie: the session cookie set when you sign in. It cannot be read by scripts, lasts seven days and is removed when you log out.
Coin pictures
Coin pictures are fetched by our server and passed on to you, so your browser does not contact the hosts that store them.
Sharing
We do not sell data or share it, except with the services that run the site: Vercel (hosting), Supabase (the database) and the Solana nodes the site reads the chain from, which see the wallet addresses being read.
Keys
The site never asks for, receives or stores a private key or a seed phrase.
Contact
Questions go to @yieldoracle_fi on X.