Privacy Policy

AnyScan analyzes tokens, not people. Scans work without an account, we don’t run advertising trackers, and we never sell personal information. The little personal data we do handle exists to run sign-in, billing, and alerts — and most of it is a wallet address you chose to connect.

• Scans. The token addresses and tickers you look up, plus your IP address for rate limiting and abuse prevention. Scan queries are not linked to an identity; cached results are keyed by the token, not by you.
• Account (optional). Signing in uses a message signed by your Solana wallet. We store the wallet’s public address and a signed session cookie. We never receive private keys or seed phrases, and we cannot move your funds. No email is required.
• Billing (Pro). Payments are processed by Stripe; your card details go to Stripe, not to us. We store the link between your Stripe customer ID and your wallet address so renewals and cancellation work. Stripe’s handling is described in its own privacy policy.
• Alerts (optional). If you connect Telegram alerts, we store your chat ID and the tokens you watch, solely to deliver those alerts.
• Site analytics. We use Vercel Analytics, a cookieless, aggregate measurement tool. It does not build cross-site profiles.
• Logs. Standard server logs (request metadata, IPs) kept briefly for security and debugging.

The browser extension is stricter still — the only page-derived data it ever transmits is the matched ticker/address pair. Its dedicated policy is at /extension/privacy.

• No sale or renting of personal information — to anyone, ever.
• No advertising trackers, no cross-site profiling, no data brokers.
• No collection of names, emails, or identity documents for core use.
• No payment from token projects that could tie data or verdicts to money — verdicts are not for sale.

Our analysis reads public blockchains and public market APIs. Wallet addresses and transactions that appear in reports (for example, top holders or deployer history) are already public on-chain information; we aggregate and interpret it. If you believe a report misidentifies you personally, contact us.

Vercel (hosting and analytics), Stripe (payments), Upstash (data storage), blockchain RPC/indexing providers (they see which tokens are queried, not who asked), and Telegram (only if you connect alerts). Each processes data under its own terms; hosting and storage may occur in the United States.

Session cookies expire after 30 days. Rate-limit counters and logs are short-lived. Billing links persist for as long as you have a subscription and as required for tax and accounting. Token-level scan records (the outcome ledger) are retained indefinitely — they concern tokens, not people.

Depending on where you live (including the EU/UK under GDPR and California under the CCPA), you may have rights to access, correct, delete, or port personal data we hold about you, and to object to or restrict certain processing. Our legal bases are performing our contract with you and our legitimate interest in running a secure service. We do not “sell” or “share” personal information as the CCPA defines those terms. To exercise any right, email privacy@anyscan.io from a verifiable channel; we respond within the time the law requires. EU/UK residents may also lodge a complaint with their supervisory authority.

The Service is not directed to anyone under 18, and we do not knowingly collect their data.

Material changes will be announced on the site and dated at the top of this page. See also our Terms of Service.