Privacy

Orbit Launchpad is a non-custodial interface to a public blockchain. We do not ask for your name, email address or phone number, and there is no account to create. Your wallet address is your identity here, and it is already public on-chain.

• Private keys.
• Seed phrases or recovery phrases.
• Wallet passwords or PINs.
• Your funds — Orbit is non-custodial and takes no custody of assets at any point.

• Wallet addresses. Public blockchain identifiers, recorded against content you create in the app (chat messages, reports, limit-order intents, notifications).
• Content you submit. Chat messages, reports you file and order intents you create, with a timestamp.
• Sign-in sessions. When you sign a message to use a private feature we store a short-lived, opaque session token bound to your address. The token is what authenticates the request; an address supplied by a client authenticates nothing.
• Moderation records. Hide/flag/ban actions and the moderation audit trail.

The app uses your browser's storage for two narrow purposes: caching interface preferences, and keeping a wallet-connection hint plus a session token so a page reload does not force you to reconnect and re-sign.

Browser storage is never treated as proof that a wallet is connected. Connection state comes only from the live wallet provider, and the server re-validates every session token on every request.

Transactions, balances and contract deployments are public and permanent on the network by design. Orbit cannot edit or delete them, and neither can anyone else. Hiding a token in this interface changes only how Orbit indexes and displays it.

• Your wallet provider (for example a browser extension or WalletConnect) handles signing and sees the requests you approve.
• A public RPC endpoint serves chain reads and receives your requests, including your IP address, as any HTTP endpoint would.
• A block explorer, when you follow an explorer link.
• The hosting platform, which keeps ordinary server request logs.

We do not sell data and we do not run advertising trackers.

Sessions expire on their own. Content you posted in the app can be removed on request — contact us with a signature from the address that created it, since that is the only way to prove ownership without an account. On-chain data cannot be removed by anyone, including us.

Server secrets and database credentials are held server-side only and are never exposed to the browser. Only public configuration — the chain ID, the public RPC URL, the explorer URL and public contract addresses — is shipped to the client. Variables prefixed with NEXT_PUBLIC_ are public by definition and never contain a key.