Legal

Privacy Policy

Last updated: 20 September 2026

We identify you by your wallet address, not your name. We never ask for identity documents, never see your keys and never hold your money. This policy explains exactly what we do keep, who else receives it, and what you can ask us to do about it.

1.Who is responsible for your data

Yield Sniper, Inc. is the data controller for the personal data described in this policy. We decide what is collected and why. Lotvs is our product.

The company is incorporated in Delaware, United States, and is operated from Poland. Our establishment is in the European Union and we offer Lotvs in the European Economic Area, so the General Data Protection Regulation (GDPR) governs how we handle your data. This policy is written around the GDPR.

If we open Lotvs to other markets in future, equivalent data protection laws will apply there too — for example Brazil’s LGPD. We will update this policy before that happens.

Controller
Yield Sniper, Inc.
Address
131 Continental Dr, Suite 305, Newark, DE 19713, USA
Privacy contact
legal@ysniper.com
Representative
Marcus Gomes

We have not appointed a Data Protection Officer. Our processing does not currently meet the thresholds that require one. Privacy requests go to the address above and are handled by the company’s representative.

2.The short version

Lotvs is designed to know as little about you as possible. We identify you by your wallet address, not by your name. We never ask for identity documents, we never see your private keys, and we never hold your money.

What we do keep on our servers is your wallet address and a record of what you did with it in the app: your trades, your recurring orders, your messages to the AI assistant, and technical error logs. There are two things worth knowing up front, and both are explained in detail below: your messages to the AI assistant and a summary of your holdings are sent to Google to generate a reply (see the AI assistant and Google), and everything you do on the blockchain is public forever, by design (see blockchain data is public and permanent).

We do not sell your data. We do not share it for advertising. Lotvs contains no analytics, no advertising and no session-recording code of any kind.

3.What we collect

Your wallet address. A public Solana address such as 7xKX…9fQm. This is how we recognise you. It is pseudonymous: on its own it does not name you, but it is permanently linked to everything that address has ever done on the blockchain.

Your trade history. For every trade you make through Lotvs we store the wallet address, the transaction signature, which tokens went in and out, the amounts, the fee applied, the status, and the time. We use this to show you your activity and to keep our own records.

Your recurring orders. If you set up a recurring buy, we store its configuration: the tokens, the amount per order, how many orders, how often, how many have run, the status and the timestamps. We need this to keep the schedule running.

Your AI assistant messages. Your messages and the assistant’s replies are stored against your wallet address, so your conversation is still there when you come back.

Technical error logs. When something breaks — a failed recurring order, a network error — we log what happened: the error message and stack trace, and where relevant the wallet address and transaction signature involved.

Ordinary server logs. Our hosting provider records standard request information, including IP addresses, for security and reliability. We do not use it to build a profile of you.

4.What we never collect

To be explicit about what does not exist on our servers:

  • No identity documents. No passport, ID card, driving licence, selfie, proof of address or tax number. We run no KYC process. Where identity checks happen at all, they happen inside our card top-up partner’s own flow when you top up with a card, and that provider keeps the data — we never see it.
  • No private keys, seed phrases or passwords. We cannot access your wallet. There is nothing on our side that could be stolen to move your funds.
  • No name, date of birth, postal address or phone number. We never ask for them.
  • No payment card details. Card top-ups happen entirely with our card top-up partner.
  • No advertising or behavioural tracking data. There is no analytics tool, advertising pixel or session recorder in the app.

About your email address. If you sign in with Google, your Google email address is saved in your own browser so the app can show you which account you are signed in with. It is never sent to our servers and we never store it. It stays on your device, and Web3Auth and Google handle the sign-in itself under their own privacy policies.

5.Why we use your data, and our legal basis

Under the GDPR we need a lawful reason to process your data. Here is each purpose and the basis we rely on.

What we doWhyLegal basis
Show your portfolio and activitySo you can see what you hold and what you have donePerformance of a contract (GDPR Art. 6(1)(b))
Prepare and record your tradesTo route a trade, apply the fee and keep a record of itPerformance of a contract (GDPR Art. 6(1)(b))
Run your recurring ordersTo keep the schedule you set up and execute it on timePerformance of a contract (GDPR Art. 6(1)(b))
Answer you in the AI assistantTo generate a reply and keep your conversation historyYour request, as part of an optional feature you choose to use (GDPR Art. 6(1)(b), and Art. 6(1)(a) consent where required)
Keep error logsTo find and fix faults, and keep the service workingOur legitimate interest in a reliable, secure service (GDPR Art. 6(1)(f))
Prevent abuse and protect the serviceTo stop attacks, fraud and misuseOur legitimate interest in security (GDPR Art. 6(1)(f))
Comply with the lawTo answer a lawful order or meet a legal dutyLegal obligation (GDPR Art. 6(1)(c))

Where we rely on legitimate interests, we have considered your rights and interests and concluded that this processing is limited and expected. You can object at any time — see your rights.

6.The AI assistant and Google

When you send a message to the AI assistant, we send that message to Google, together with a summary of your portfolio — its total value and each holding’s symbol, quantity and value — and the earlier messages in the conversation. Google’s Gemini model generates the reply.

We do this so the assistant can answer questions about what you actually hold. Without the portfolio summary, it could only give generic answers.

What you should know before you use it:

  • The request is sent from our server, not from your browser, so Google does not receive your IP address through this feature. We do not send your wallet address to Google.
  • Google processes the content under its own terms and privacy policy for the Gemini API. We do not control how long Google keeps it or what it does with it.
  • Your messages and the replies are also stored in our own database, linked to your wallet address, so your history persists between sessions.
  • The assistant is optional. If you would rather not share this, simply do not use it. No other part of Lotvs sends anything to Google.
  • Please do not type anything into the assistant that you would not want a third party to process.

7.Who else receives your data

We do not sell your data and we never share it for advertising. We do share it with the providers below, because the product cannot work without them. Each acts under its own privacy policy, and several are independent controllers rather than our processors.

WhoWhat they do for usWhat they receive
GoogleAI assistant (Gemini), and Google sign-in via Web3AuthYour assistant messages and portfolio summary; separately, your Google identity when you sign in
Web3AuthCreates and manages the keys for the embedded walletYour sign-in identity from Google, and its own session data
MongoDB AtlasHosts our databaseEverything we store: wallet address, trades, recurring orders, assistant messages, error logs
VercelHosts the website and the appStandard request logs, including your IP address
AnkrSolana node service used to read balances and broadcast transactionsYour wallet address and transaction data, via our server
JupiterFinds trade routes and builds trade and recurring-order transactionsYour wallet address, the tokens and the amounts involved
Our card top-up partner (currently MoonPay)Card top-upsYour wallet address, plus whatever you give that provider directly, including identity and payment details. The provider is an independent controller for that.
Solana networkSettles every transactionYour wallet address, amounts and token details — publicly and permanently (see blockchain data)
DexScreener, CoinGeckoPrice dataToken identifiers only. We do not send them anything about you.
Phantom, Solflare, BackpackExternal wallets, if you connect one instead of signing in with GoogleWhatever their own software collects. We do not send them your data.

We may also disclose data if the law requires it, if we need to respond to a valid legal order, or to establish or defend a legal claim. If our business is ever sold or merged, data may transfer to the buyer, and this policy would continue to apply until the buyer gives you notice of any change.

8.Blockchain data is public and permanent

This one is important and it is different from everything else in this policy. Every transaction you make — every trade, every transfer, the amounts, the timing and the addresses involved — is written to the Solana public ledger. Anyone in the world can read it, copy it and keep it.

This cannot be undone. No one, including us, can edit, hide or delete a confirmed blockchain transaction. That is how the network works, and it is the same property that makes self-custody possible.

This has a real consequence for your privacy rights: we can delete what is in our database, but we cannot delete anything from the blockchain. If your wallet address ever becomes linked to your identity — for example through an exchange, a card top-up provider, or because you shared it — your whole on-chain history can be linked to you as well.

9.Sending data across borders

We are a Delaware company operated from Poland, and our providers are in several countries, mainly the United States. So your data will be transferred outside the European Economic Area.

For those transfers we rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision where one covers the provider, and we assess whether additional safeguards are needed. If we later serve markets outside the EEA, we will rely on the equivalent mechanism under the law of that country.

You can ask us for details of the safeguards that apply to a particular transfer by writing to legal@ysniper.com.

10.How long we keep it

We keep data only as long as we need it. Unless the law requires otherwise, these are the periods we apply:

DataKept forWhy
Trade records5 years from the tradeOur own accounting and tax records, and defending legal claims
Recurring orders5 years after the order ends or is cancelledSame as above
AI assistant messages12 months from the message, or until you ask us to delete themTo keep your conversation available to you
Error logs12 monthsTo diagnose faults and spot patterns
Hosting request logsAs set by our hosting provider, typically a short rolling windowSecurity and reliability

After these periods we delete the data or strip the wallet address from it so it can no longer be linked to you. As explained under blockchain data, none of this affects the blockchain, which keeps its own permanent record.

11.Cookies and what is stored in your browser

Lotvs does not use cookies, and it sets no advertising or analytics trackers. That is why you do not see a cookie banner. What the app does use is your browser’s local storage, which stays on your device and is never sent to us as a tracking signal. Here is exactly what goes in it.

What is storedWhyHow long
web3auth_pubkeyYour wallet address, so the app knows you are signed in and can load your portfolioUntil you sign out or clear your browser data
web3auth_emailThe Google email you signed in with, shown in the account menu. Stays on your device and is never sent to usUntil you sign out or clear your browser data
portfolio_… (one per wallet)A copy of your last known total value and holdings, so the app shows something instantly instead of a blank screen while it loadsUntil you clear your browser data. Note that signing out does not currently remove it, so clear your browser data if you are on a shared device
walletNameWhich external wallet you last connected, so it can reconnect automaticallyUntil you clear your browser data. Set by the Solana wallet adapter
Web3Auth session entriesKeeps you signed in with Google without logging in again on every visit. Set and managed by Web3AuthUp to 7 days, then the session expires

If you install Lotvs as an app on your phone, a service worker also stores the pages and images you have visited so it can load quickly and work on a poor connection. It never stores balances, transactions or anything from our API.

You can remove all of this at any time by clearing your browser’s site data. Doing so signs you out of the app, but it does not affect your wallet or your funds.

12.Your rights

You have rights over your personal data, and we will not charge you or treat you differently for using them.

Under the GDPR (Europe) you can ask for access to your data; correction of it; deletion of it; restriction of how we use it; a copy in a portable format; and you can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You also have the right to complain to your national data protection authority. In Poland, where we operate, that is the President of the Personal Data Protection Office (UODO).

We do not sell your personal data and we do not share it for advertising, so there is nothing of that kind for you to opt out of.

If you are outside the EEA and your country’s law gives you similar rights, we will honour them in the same way and within the same timescale. Write to us at the address below.

How to exercise any of these rights: email legal@ysniper.com from the address you use, and tell us your wallet address and what you want. Your wallet address is how we find your data, so we cannot act without it. We may ask you to prove you control that wallet — usually by signing a short message with it — because otherwise anyone could request someone else’s data. We will reply within 30 days, and we will tell you if we need longer.

Two honest limits. First, we cannot delete anything from the blockchain. Second, we may need to keep some records to meet a legal obligation or to defend a legal claim, and we will tell you if that is the case.

13.Children

Lotvs is for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has used Lotvs and given us data, write to legal@ysniper.com and we will delete what we hold. Please note that we cannot remove anything already recorded on the blockchain, and we cannot recover or return assets held in a wallet we do not control.

14.How we protect your data

The strongest protection here is structural: we never hold your private keys or your funds, and we never collect identity documents. There is simply very little on our side worth stealing.

On top of that, traffic to Lotvs is encrypted in transit with HTTPS, our database is hosted on managed infrastructure with access restricted to the people who need it, and the keys we use to reach third-party services are held on our servers and never exposed in the app.

We will not pretend to more than that. We are a small team, we hold no security certification, and we have not had an independent security audit. No service on the internet is perfectly secure. The most important part of your security is in your hands: protect the account you sign in with, keep your device and any seed phrase safe, and check every transaction before you approve it.

15.Changes to this policy

We will update this policy as the product changes and as the law develops. The “Last updated” date at the top always shows the current version. If we make a change that materially affects your rights — for example a new category of data or a new recipient — we will give you notice in the app or by other reasonable means before it takes effect.

16.Contact us

For any privacy question or request, or to exercise your rights, contact us. You can also read our Terms of Service.

Email
legal@ysniper.com
Controller
Yield Sniper, Inc.
Address
131 Continental Dr, Suite 305, Newark, DE 19713, USA
Phone
(302) 601-7229