Cinder has no accounts, no sign-up, and no cookies. The interface runs in your browser and your history stays in your browser. One thing exists server-side: an append-only activity log powering the leaderboard and site statistics, holding your public wallet address, the action type, and the transaction hash. All three are already public on the blockchain; the log stores nothing the chain does not.
When you complete an action through the interface, your browser sends a few fields to Cinder's statistics service: your public wallet address, the kind of action (burn, sell, swap, send, or revoke), the transaction hash, and the token symbol and amount. This powers the leaderboard and the site's aggregate statistics. Three properties bound its privacy impact: every field is already public on the blockchain the moment your transaction confirms; the log is append-only, so the credentials shipped in the site cannot edit or erase entries; and it contains no IP addresses, no timestamps beyond the entry's own, and no other data. To have your entries removed from the log, email security@cindereth.com from a message signed by the wallet in question.
Your browser keeps a cache of your activity so the Profile draws instantly, and a note of which wallet you last connected so a refresh does not disconnect you. The cache is only a copy: your real history is rebuilt from public sources every time you connect, which is why it follows you to any browser or device. Clear in the Profile tab empties the local copy, disconnecting forgets the wallet choice, and clearing site data removes both.
Your Profile shows the actions you performed through Cinder, and only those. It is read from the activity log described below, keyed to your wallet address, which is why it is identical on any browser or device and why it does not include transactions you made elsewhere. Cinder deliberately does not scan your wallet to guess at history: an outgoing transfer looks the same whether it came from Cinder or any other app, so guessing would put unrelated activity in your Profile. Rows are checked against the chain in the background: a row claiming a burn must match a real transfer from your wallet to the burn address in that very transaction, and every other row must have been sent by your wallet, or the row is removed. Cinder does not accept uploaded history files.
When you connect, your wallet shares your public address with the page, in your browser. The interface uses it to read balances and build transactions you sign. Blockchain data, including every transaction you make, is public, permanent, and outside anyone's ability to edit or delete. The leaderboard and statistics shown in the interface are computed from this public data.
Using the interface, your browser makes requests to: your wallet extension, Robinhood Chain RPC endpoints, the Blockscout block explorer, the site's activity log (a Supabase database holding only wallet addresses, action types, and transaction hashes the chain already publishes), and Vercel, which hosts the site and keeps standard, short-lived server logs. Opening the connect modal additionally reaches Reown's services (its wallet directory, and the WalletConnect relay if you pair a mobile or remote wallet); Reown's analytics is turned off in Cinder's configuration. Fonts are self-hosted, so no font network exists to call. If the site's privacy-friendly analytics is active, Vercel Web Analytics counts visits without cookies and without tracking individuals across sites. Each of these operates under its own privacy policy, and requests to them necessarily carry your IP address, as all internet traffic does.
Aggregate visit counts tell the operator whether anyone uses the tool. Public chain data powers the product's features. That is the entire list. There is nothing to sell, rent, or share, and Cinder sells, rents, and shares nothing.
Local storage persists on your device until you clear it. The activity log persists to keep the leaderboard's history meaningful, and entries are removable on request as described above. Hosting logs are retained by Vercel per its policy.
Rights of access, deletion, and portability under GDPR, CCPA, and similar laws are honored trivially: everything Cinder "holds" about you is in your own browser, where you already control it. For anything else, write to security@cindereth.com.
The interface is for adults 18 and over. Cinder does not knowingly collect anything from anyone, including children, but the service is not directed at children under 13.
Changes to this policy appear on this page with an updated effective date. A change that starts collecting something new would be called out plainly, not slipped in.