Privacy Policy

We keep as little as we can. We don't sell data, build advertising profiles, or track you across other sites.

Cookies and browser storage

• Two security cookies, session-id and csrf-token, are set only when something is sent to our server: joining the chat, submitting a coin, or opening a listed project's page. They protect those requests from forgery and expire after 24 hours. Reading the site sets no cookies, and there are no tracking or advertising cookies.
• Once you open the chat, it keeps a random session id for that browser tab, and Google Firebase's library, which runs the chat, stores its own connection data. The price chart saves your display settings only when you change one, and keeps the market data it has loaded for the current tab, cleared when you close it. None of this is sent to us.

The TrollBox chat

• Joining takes a nickname only. Google Firebase creates an anonymous account for your browser: no email, no password. We store your nickname, the colour you pick, and whether you are muted or banned.
• Your messages are visible to everyone in the chat, which shows the latest 100. We can delete messages.
• Leaving the chat frees your nickname for someone else.

Abuse prevention

• Our code never reads, stores or passes on your IP address. Request limits are counted per browser session, using a keyed hash of the security cookie, and per feature for everyone together. These records are deleted within 48 hours.
• When you open or mention a listed project, we record the event with that session hash and, if you are in the chat, your anonymous chat id and nickname. These records are deleted after 30 days.

Hosting and statistics

• The site runs on Vercel, which processes every request, including your IP address, as our host.
• Vercel Web Analytics and Speed Insights give us aggregated page and performance statistics without cookies.

Services involved

• DexScreener and GeckoTerminal supply the live prices and charts on coin pages. Our server fetches that data, so they never see your browser or IP address.
• Coin pages link to Jupiter (jup.ag) for swaps. The link takes you to Jupiter's own site, under its terms: nothing about your wallet passes through our server, and we never hold funds or keys.
• Google Firebase runs the chat: opening it connects your browser to Google. Nothing else on the site does.
• Images, including those hosted on Cloudinary, CoinGecko or DexScreener, reach you through our own server.

Coin submissions

• Listing a coin is free. We store what you submit (name, ticker, description, project link and image; the image is hosted on Cloudinary) and review it before anything is published. Approved listings are public; the rest are never shown.
• To allow one submission a day, we keep a keyed hash of your browser session for 24 hours.
• The form runs Cloudflare Turnstile to keep bots out. Cloudflare sees your IP address during that check; we don't.

Payments

The site takes no payments. Paid listings and boosts are switched off, and this policy will be updated before they return.

Your choices

You can read everything here without joining the chat or submitting a coin; then nothing is kept beyond hosting logs and the hashes above. To have your chat data deleted, contact us.