Privacy Policy

Account information (app). When you sign up in the app we collect the identifier your chosen sign-in method gives us — for example an email address, or an ID and basic profile from Apple, Google, or X — plus the username, display name, profile picture, and banner you choose. If you sign in with an external wallet, we collect its public address.

Wallet addresses. The public address of the wallet you connect (website) or the embedded wallet created for you (app). Public addresses are, by design, public. We never collect, store, or have access to private keys, seed phrases, or key shares; those are generated and secured on your device and by our wallet infrastructure provider.

On-chain activity. Transactions you sign — coin launches, trades, theses, paid messages, profile updates — are recorded on Robinhood Chain and are permanently public. We read that public data to show prices, holdings, profit and loss, rewards ("keys"), and leaderboards for every wallet, including yours.

Content you post. Usernames, profile images, banners, coin names and images, descriptions, links, theses, and messages.

Device and usage data. IP address, browser or device type, operating system, app version, language, time zone, pages and screens viewed, referring URLs, crash and error reports, and approximate location derived from IP. We use standard server logs and may use privacy-respecting analytics.

Support communications. Anything you send us when you contact support.

We do not knowingly collect information from anyone under 18, and we do not collect government IDs, bank details, or card numbers. If you use a third-party on-ramp to buy crypto, that provider collects what it needs under its own policy.

• to operate the Service: sign you in, create and link your wallet, display your profile, holdings, PnL, and rewards;
• to show public market data — prices, charts, holders, leaderboards — which necessarily includes wallet addresses and on-chain activity;
• to send you service messages (for example about your account, security, or changes to our terms) and, if you opt in, push notifications about trades, prices, and rewards;
• to keep the Service secure: detect abuse, fraud, bots, and attacks, and enforce our Terms;
• to understand how the Service is used and improve it;
• to comply with law, respond to lawful requests, and protect our rights and the rights of others.

We do not sell your personal information, and we do not use it for third-party behavioral advertising.

Anything written to a blockchain — your wallet address, every trade, every coin launch, every thesis — is visible to anyone in the world and cannot be edited or deleted by Burst or by you. Do not put information in an on-chain transaction, coin description, or thesis that you would not want to be public forever. Deleting your Burst account does not remove on-chain data, and other websites and services may display it independently of us.

Service providers who help us run the Service under contract and only for that purpose: hosting and infrastructure (for example Railway and our app backend host), our embedded wallet provider (Privy — which receives an opaque user identifier from us to create and manage your wallet and never receives your password), analytics and error reporting, image storage, email or push delivery, and crypto on-ramps you choose to use.

Blockchain networks and data providers, which by nature receive and publish the transactions you sign.

Other users and the public. Your username, profile image, banner, wallet address, holdings, trades, rewards, and leaderboard position are visible in the Service to everyone.

Legal and safety. When required by law, subpoena, or government request; to enforce our Terms; or to protect the rights, property, or safety of Burst, our users, or others.

Business transfers. As part of a merger, acquisition, financing, or sale of assets, in which case this policy continues to apply to the transferred information.

The website uses local storage and, where needed, cookies to remember your wallet connection, theme, and similar preferences. The app stores your session token, preferences, cached images, and your chosen profile picture and banner on your device. We do not use third-party advertising cookies. You can clear this data through your browser or by deleting the app; you will need to sign in again.

You can update your username, display name, profile picture, and banner in the app at any time. You can turn push notifications off in your device settings. You can export your embedded wallet's private key from Settings and use it in any other wallet. You can delete your Burst account from Settings, which removes your account record, username, and uploaded images from our systems within 30 days (backups may persist a little longer); on-chain data cannot be deleted.

Depending on where you live (for example the EU/UK, California, or other U.S. states) you may have rights to access, correct, delete, port, or restrict the use of your personal information, to object to certain processing, and to not be discriminated against for exercising those rights. To exercise a right, contact us using the details below; we will verify your request and respond within the time the law requires. If you are in the EU or UK, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations, and you may lodge a complaint with your local supervisory authority.

We keep account information for as long as your account exists and for a reasonable period afterward to resolve disputes and meet legal obligations. Server logs and analytics are kept for a limited period (typically under 12 months) unless needed for security investigations. Public blockchain data is retained indefinitely by the network, not by us.

We use reasonable technical and organizational measures — encrypted connections, access controls, secrets kept off the client, and a design in which we never hold private keys — to protect information. No system is perfectly secure, and you are responsible for keeping your device, sign-in method, and exported keys safe. If we learn of a breach affecting your information we will notify you as the law requires.

We are based in the United States and our providers may process information in the U.S. and other countries whose laws differ from yours. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

The Service is not directed to children and may not be used by anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will change the effective date above and, for material changes, give notice in the Service. Continued use after a change means you accept the updated policy.

Privacy questions and requests: BURSTCHAIN LLC, via @buyburst on X or the support links at burst.family.