Legal
Privacy Policy
Last updated 14 September 2026.
This explains what Stocklet stores about you and why. The short version: we keep the minimum needed to run a tipping ledger keyed on X accounts, and we do not sell or share it.
On this page
What we store
- Your X account id and username, obtained when you sign in with X. We ask X only for permission to read your profile (the
users.readandtweet.readscopes). We do not store an X access token after sign-in and cannot post as you. - Your balances and a ledger of every deposit, tip, fee and withdrawal, with the related post id or transaction hash.
- Wallet addresses you link, and the addresses you withdraw to.
- Public posts that mention the bot account, so it can process tips. We record the post id, author id and text of the command.
- A session cookie so you stay signed in for up to 30 days. It contains a random id, nothing else.
- Token listing requests: the details you enter on the form and a hashed network address used only to limit abuse.
What we don't do
- No advertising, no tracking pixels, no analytics scripts on the site.
- No third-party requests from these pages at all: the typeface, images and scripts are all served from this site, so loading a page tells nobody but us.
- No selling or sharing of your data with third parties, except the service providers below.
- No storage of your X password or X access token.
Who else sees it
The site and database run on hosting providers (currently Railway). Chain reads and writes go through an RPC provider (currently Alchemy). Token prices are fetched by our server from GeckoTerminal, not by your browser. The bot's replies on X are public, as are the amounts it states.
What is public
Tips are settled in reply to public posts and the bot's confirmation is public. The leaderboard shows X usernames and amounts for settled tips. On-chain deposits and withdrawals are public on Robinhood Chain.
Retention
The ledger is kept for as long as the service runs, because balances depend on it. Sessions expire after 30 days. Sign-in state and wallet-link nonces are deleted within 15 minutes.
Your rights
You can ask us what we hold about you and, once your balance is withdrawn, ask us to unlink your wallet addresses and stop associating new activity with your account. Ledger entries themselves are retained as financial records. Message the bot account @Stockletme on X.
Changes
We may update this policy; the date above changes when we do.