Privacy Policy

Last updated: 2026-11-13. This page covers memepump.org, the REST API, the Telegram bot and the MCP server.

1. What we collect

• Token and wallet addresses you look up. Mint and wallet addresses are public blockchain data. We use them to fetch a report and may cache the report for a few hours to reduce load. The checker keeps a running count of checks served, not a per-person history.
• Account data (developer dashboard). If you sign up for an API key: your email, a password hash (or the Google account identifier if you use Google sign-in), your API key, your plan and your call counts.
• Technical data. Request logs (IP address, path, user agent, status) and short-lived rate-limit counters keyed by IP address or API key, kept to keep the service available and to limit abuse.
• Product analytics and session replay (PostHog, US). We use PostHog, through a first-party proxy at /ingest, to see pages visited and clicks, and to replay sessions on public marketing and safety-check pages. We collect a pseudonymous id (your account id once you sign in), your plan, pages, device and browser data. Form inputs are masked and the signed-in dashboard (API key, usage) is not recorded. Retention is as set in our PostHog project. We honour Do Not Track. Visitors in Europe and the UK are asked for consent first; no analytics events, recordings or analytics cookies are stored until you accept (PostHog configuration requests may still reach it through our proxy). Separately, our servers send a few account events keyed by your account id regardless of this choice (sign-up, API key creation, checkout and payment); they contain no email or name. Analytics settings lets you change your choice.
• Google Analytics and support chat. The website also loads Google Analytics and a chat widget. Their cookies and identifiers are handled by those providers under their own policies.
• Billing. Paid plans are processed by LemonSqueezy. We receive plan and subscription status, not your card number.

2. MCP server (AI assistants)

The MCP server at https://memepump.org/api/mcp exposes read-only lookups. It does not ask for, receive or store wallet keys or seed phrases, and it cannot sign or send transactions. Without an API key, requests are handled anonymously and limited by IP address. With an API key, requests count against that key's quota. The assistant you use may store the conversation under its own provider's policy; we do not control that.

3. How we use it

To answer your lookups, operate and secure the service, enforce quotas and rate limits, bill paid plans, and fix problems. We do not sell personal data.

4. Third parties

Lookups are answered with data from RugCheck and Solana RPC providers; a lookup sends the address you asked about to them. Other processors include hosting, analytics, chat, email and billing providers.

5. Retention and your choices

Account data is kept while the account exists. You can rotate your API key at any time in the dashboard. To ask for access to or deletion of your account data, email support@memepump.org.

6. Contact

support@memepump.org