Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Shrine ("Shrine", "we", "us" or "our") collects, uses, shares and protects personal data when you use the shrine.trade website, the Shrine trading terminal, Shrinemaps (maps.shrine.trade), the Shrine APIs and related services (the "Services"). Shrine is the controller of the personal data described in this policy.

1. Information we collect

Account information. When you sign in, we receive your Privy user identifier and the addresses of your wallets. We also store the handle and profile picture you choose, the public keys of the trading keys registered for your browsers, and when your account was last active.

Settings. Your trading presets, layouts and other preferences, so that they are available on all of your devices.

Transaction and fee records. For each trade made through the Services, the transaction signature, wallet, token, trade amount and fee charged.

Referral information. Your referral code, who referred you, the users you referred, and your referral earnings, claims and payouts.

Paper trading. Your simulated wallets, trades, orders and strategies. Paper trading API keys are stored only in hashed form.

Technical information. When you use the Services, our servers record your IP address, the date and time, and the path of each request.

Usage information. We keep a random identifier in your browser's local storage and, for each visit, record where it came from (the address of the site that linked to us, the campaign tags in the link, a referral code, and the page you arrived on), your browser's language, your type of device (from your browser's user agent), your country as determined by our network provider, Cloudflare, from your IP address, and how long each part of the Services is open and in front of you. When you sign in, this is linked to your account, including earlier visits from the same browser. We do not record for this purpose which tokens or wallets you look at.

2. Information we do not collect

Sign-in is handled by Privy. We do not store your email address, your Google account details or your passkeys. We never have access to the private keys of your wallet. We do not use advertising cookies or third-party analytics or tracking technologies, and we do not sell personal data.

3. How we use information

• to provide the Services, including your account, wallet connection, trading and settings;
• to calculate and record fees, and to administer the referral program;
• to secure the Services, enforce rate limits, and detect and prevent fraud and abuse;
• to understand how people find and use the Services, such as which sites and campaigns bring visitors and how long each part is used, and to improve them;
• to respond to your requests and communicate with you about the Services;
• to comply with legal obligations and enforce our Terms of Service.

4. Legal bases

Where the EU or UK General Data Protection Regulation applies, we process personal data on the following bases: the performance of our contract with you (to provide the Services); our legitimate interests (to secure the Services and prevent abuse, and to understand and improve how the Services are found and used, balanced against your rights); and compliance with legal obligations (for example, record-keeping for fees and payouts).

5. How we share information

We share personal data only with service providers that process it on our behalf to operate the Services:

• Privy, for authentication and wallet infrastructure;
• Cloudflare, for hosting, content delivery and network security;
• hosting and backup providers, which run our servers and store encrypted backups;
• Solana RPC and transaction providers, which relay your transactions to the Solana network.

We may also disclose personal data where required by law or legal process, to protect the rights, safety or property of Shrine, our users or others, or in connection with a merger, acquisition or transfer of the Services.

6. Public blockchain data

Transactions on the Solana blockchain, including wallet addresses, balances and trade history, are public and permanent. This information is not controlled by Shrine and cannot be modified or deleted by us.

7. International transfers

Some of our service providers process personal data outside your country, including in the United States. Where required, such transfers are protected by appropriate safeguards, such as the European Commission's standard contractual clauses.

8. Data retention

• account data and settings: for as long as your account exists;
• server request logs: 14 days; system logs: 30 days;
• usage information: 400 days after the visit;
• fee, referral and payout records: for the period required by applicable tax and accounting laws;
• encrypted backups: until they are deleted in the normal backup cycle.

When you ask us to delete your account, we delete its personal data from our active systems without undue delay, except for records we must keep by law.

9. Security

We use technical and organisational measures to protect personal data, including encryption in transit, encrypted backups, hashed session tokens and API keys, and restricted access to our systems. No system is completely secure, and we cannot guarantee the security of information transmitted over the internet.

10. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. You also have the right to lodge a complaint with your local data protection authority. To exercise your rights, contact us as described below. We may need to verify your identity, for example by asking you to confirm control of your account, before acting on a request.

11. Cookies and local storage

The Services use your browser's local storage to keep your settings and your trading key. Privy keeps you signed in only while you sign in or confirm an important account action. Your browser also remembers how you sign in, such as your email address, so it can offer the same way next time; this stays in your browser and is removed when you sign out. These are needed for the Services to work. The Services also keep a random visitor identifier in local storage to measure visits and time spent, as described in section 1; only we use it, it does not track you across other websites, and clearing your browser's site data removes it. Some images, such as token images and X profile pictures, load directly from the third-party sites that host them, which may receive your IP address.

12. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the date above, and we will give notice of material changes.

14. Contact

For questions about this policy or to exercise your rights, contact us on Telegram or X (@shrinetrade).