Last updated: October 19, 2026

Privacy

Curvetap has no accounts, no analytics and no ads. It does not sell or share personal data. This page explains what the website, the web app and the Curvetap browser extension do with data.

1. What we never get

2. Stored on your device only

Preferences stay in your own browser: recently viewed tokens, slippage, your watchlist, alert settings and your curve orders; in the extension, also the network you picked, your quick-buy amounts, an optional custom RPC address and, if you create one, the automation wallet (encrypted with your passphrase; once unlocked, its key is held in browser memory until the browser closes). We cannot see them. Clearing your browser data or removing the extension deletes them.

3. The browser extension

The extension runs only on x.com (including X Pro at pro.x.com) and twitter.com. On those pages it reads the text of the posts you are viewing, on your device, to find Solana token addresses and $cashtags. Only the token addresses and cashtag symbols it finds are sent to the services in section 4, to look up token data. It does not read or send anything else from the page.

When you trade, it asks your wallet for your public address, builds the transaction, and passes it to your wallet to approve. When you watch a token, it checks that token's curve about once a minute and shows browser notifications. When you have curve orders, it checks their pools every 30 seconds (every few seconds near a trigger); orders that run with the automation wallet are signed in the extension and sent to the Solana network directly. Its permissions are limited to storage, notifications and alarms, plus access to the Solana RPC and Jupiter addresses it calls.

4. Services Curvetap talks to

To show prices and curves and to send your trades, your browser or the extension connects directly to these services. Like any website, they can see your IP address and the public addresses being looked up. Their own privacy policies apply.

5. Our server

The website is served by our own web server, which keeps standard access logs (IP address, page requested, time and browser type) to keep the site running and secure. We do not combine these logs with any other data or use them for tracking.

When you launch a token and upload its image, your browser sends our server your wallet address, a short message signed by your wallet, and the token's name, ticker, description, links and image. The server checks the signature and uploads the image and the metadata to IPFS through Pinata, where they are public and permanent, tagged with your wallet address. To limit abuse it keeps your wallet address and IP address in memory for up to one hour (the counters reset when the server restarts), and logs the wallet address and the IPFS address of each upload. Pinata's own privacy policy applies to the upload.

6. Blockchain data is public

Trades on Solana are public and permanent. Anyone can see the wallet address, tokens and amounts of a transaction. Curvetap cannot hide or remove that.

7. Changes and contact

If this page changes, the date at the top changes too. Questions: reach the Curvetap team through the official X account linked on curvetap.app.

← Back to Curvetap · Terms and risks