Privacy and cookies
PumpCrate keeps as little as it can. Browsing needs no account. Connecting a wallet shares only your public Solana address: never a seed phrase, a private key or a signature. Google Analytics cookies are set only with your consent where the law asks for it, and you can change that choice at any time.
What we collect
When you only browse
Our web server and Cloudflare, which sits in front of it, log each request: IP address, browser user agent, the page asked for, the referring page and the time. We use these logs to keep the site running and to block abuse, and our server deletes them after 14 days.
When you connect a wallet
- Your public Solana address. It is how the panel knows which balance is yours. Connecting asks for no signature and no approval.
- Orders: the pack you picked, its price in SOL, the deposit details, the on-chain transaction signature once paid, and the times.
- Your balance history: credits from packs and what each session used or refunded.
- Sessions: the token mints you add, the settings you choose and the schedule.
When you write to support
The contact you leave (a Telegram handle or an email) and your message are forwarded to our support team on Telegram so someone can answer. Messages sent to support@pumpcrate.com stay in that mailbox.
What we never ask for
No seed phrase, no private key, no signature, no name, no ID document and no card details. Payments are made in SOL from your own wallet.
The blockchain is public
Payments and trades happen on Solana. Anyone can see them in a block explorer, and neither we nor anyone else can delete them. What we can delete is the copy kept in our own records.
Cookies and storage
These are all the cookies and browser storage keys this site uses. There are no advertising cookies.
| Name | Type | Purpose | Kept for | Category |
|---|---|---|---|---|
pp_session | Cookie, first party | Keeps you signed in to the panel after you connect a wallet. Holds your public address, signed by our server. | 12 hours | Necessary |
_ga | Cookie, Google Analytics | Tells one visit from another so page views can be counted. | 2 years | Analytics, only with consent |
_ga_7P0XXHMNYV | Cookie, Google Analytics | Keeps the state of the current analytics session. | 2 years | Analytics, only with consent |
pc_consent | Local storage | Remembers whether you accepted or declined analytics, so the banner does not come back on every page. | Until you clear it | Necessary |
ga:* | Session storage | Stops the same order from being counted twice in analytics. | Until the tab closes | Analytics |
wc@2:*, @appkit/* | Local storage, Reown | Set by the WalletConnect / Reown wallet window, only if you open it to connect. | Until you disconnect or clear it | Necessary for that connection |
Change your analytics choice here:
Google Analytics
We use Google Analytics 4 to learn which pages people read, where visits come from (search engines, AI assistants, other sites) and where the panel is hard to use. It runs in Google Consent Mode.
- In the European Economic Area, the United Kingdom and Switzerland analytics cookies stay off until you press Accept. If you decline or ignore the banner, Google receives only cookieless signals with no identifier.
- Elsewhere analytics cookies are on by default, and you can turn them off with Decline or with Cookie settings in the footer.
- Advertising storage, ad personalisation and Google signals are off. We do not use Google Analytics data for ads.
- Google Analytics 4 does not log or store IP addresses. Analytics data is kept for 14 months.
- Events we count in the panel: wallet connected, pack picked, order opened, payment confirmed and session started, with the pack name and SOL amounts. Never your full balance history or the tokens you trade.
Google acts as our processor for this data. Its own terms are in the Google Privacy Policy and how Google uses data from sites that use its services.
Services we use
- Cloudflare: delivers the site and filters attacks. It sees the IP address and request of every visit.
- Our hosting server: runs the site and the panel and stores the records listed above.
- Reown (WalletConnect): powers the wallet window when you use it to connect. It sees your IP address and the wallet you pick.
- Solana RPC providers: our server asks them for token details and payment confirmations. They see the public addresses and mints in those requests, not who you are.
- Google Analytics: traffic statistics, as described above.
- Telegram: carries support messages to our team.
We do not sell personal data and we do not share it with advertisers.
Your rights
Why we process data
- Wallet address, orders, balance and sessions: needed to provide the packs you buy.
- Server and security logs: our legitimate interest in keeping the service safe.
- Analytics cookies: your consent where the law requires it.
How long we keep it
Account, order and session records are kept while the service runs so your balance stays correct, unless you ask us to delete them. Logs are deleted after 14 days. Analytics data is kept for 14 months.
What you can ask for
You can ask to see the records tied to your address, to correct or delete them, to object to their use, or to get a copy. Write to support@pumpcrate.com from the contact you want the answer sent to and include your public wallet address. Deleting records also deletes any unused balance on that address, so spend or ask about it first. You can withdraw analytics consent at any time with Cookie settings, and you can complain to your local data protection authority.
Changes to this page
When this policy changes, the date at the top changes with it.