Cinder has no accounts, no sign-up, and no cookies. The interface runs in your browser and your history stays in your browser. One thing exists server-side: an append-only activity log powering the leaderboard and site statistics, holding your public wallet address, the action type, and the transaction hash. All three are already public on the blockchain; the log stores nothing the chain does not.
When you complete an action through the interface, your browser sends a few fields to Cinder's statistics service: your public wallet address, the kind of action (burn, sell, swap, send, or revoke), the transaction hash, and the token symbol and amount. This powers the leaderboard and the site's aggregate statistics. Three properties bound its privacy impact: every field is already public on the blockchain the moment your transaction confirms; the log is append-only, so the credentials shipped in the site cannot edit or erase entries; and it contains no IP addresses, no timestamps beyond the entry's own, and no other data. To have your entries removed from the log, email security@cindereth.com from a message signed by the wallet in question.
Your browser keeps a cache of your activity so the Profile draws instantly, and a note of which wallet you last connected so a refresh does not disconnect you. The cache is only a copy: your real history is rebuilt from public sources every time you connect, which is why it follows you to any browser or device. Clear in the Profile tab empties the local copy, disconnecting forgets the wallet choice, and clearing site data removes both.
Burns, sells, and sends are read directly from the blockchain: a burn is a transfer from your address to the dead address, a sell is a transaction of yours whose target is one of the chain's public Uniswap routers, a send is any other outgoing transfer. Revokes come from the activity log described below, and any log row is accepted only after its transaction is verified on-chain to involve your wallet. Cinder does not accept uploaded history files, so nothing in your history can be fabricated by you or anyone else. Everything shown is verifiable by anyone on the block explorer.
When you connect, your wallet shares your public address with the page, in your browser. The interface uses it to read balances and build transactions you sign. Blockchain data, including every transaction you make, is public, permanent, and outside anyone's ability to edit or delete. The leaderboard and statistics shown in the interface are computed from this public data.
Using the interface, your browser makes requests to: your wallet extension, Robinhood Chain RPC endpoints, the Blockscout block explorer, Google Fonts, and Vercel, which hosts the site and keeps standard, short-lived server logs. If the site's privacy-friendly analytics is active, Vercel Web Analytics counts visits without cookies and without tracking individuals across sites. Each of these operates under its own privacy policy, and requests to them necessarily carry your IP address, as all internet traffic does.
Aggregate visit counts tell the operator whether anyone uses the tool. Public chain data powers the product's features. That is the entire list. There is nothing to sell, rent, or share, and Cinder sells, rents, and shares nothing.
Local storage persists on your device until you clear it. The activity log persists to keep the leaderboard's history meaningful, and entries are removable on request as described above. Hosting logs are retained by Vercel per its policy.
Rights of access, deletion, and portability under GDPR, CCPA, and similar laws are honored trivially: everything Cinder "holds" about you is in your own browser, where you already control it. For anything else, write to security@cindereth.com.
The interface is for adults 18 and over. Cinder does not knowingly collect anything from anyone, including children, but the service is not directed at children under 13.
Changes to this policy appear on this page with an updated effective date. A change that starts collecting something new would be called out plainly, not slipped in.