Privacy Policy
Effective date: 2026-05-01. The short version: we collect almost nothing.
1. Summary
Pump.fun Volume Bot is built to operate on the smallest possible footprint of personal data. We do not collect names, government IDs, addresses, payment cards or device fingerprints. Our entire user identity model is built on two pieces of information: your Telegram account ID (assigned by Telegram itself) and the Solana wallet address from which you send the commission deposit.
2. What we collect
From you, directly:
- Telegram account ID — used to associate your sessions with your account and persist settings.
- Solana wallet address — derived from the deposit transaction; used as the refund destination and to associate sessions with your wallet.
- Session configuration — the parameters you choose for each session (target volume, curve preset, persona mix, language mix, etc.).
- Optional email — only if you contact support; used solely to reply to you.
Generated by the Service:
- Session execution metadata — trades fired, comments deployed, favorites placed, timing data.
- Sub-wallet keys — generated server-side, encrypted at rest, discarded after session.
- Server logs — limited to operational telemetry (errors, latency, request counts). IP addresses are not deliberately stored beyond short-lived rate-limiting buffers.
3. What we do not collect
- Real names, dates of birth, government-ID numbers
- Postal addresses
- Payment cards or bank credentials
- Device fingerprints or browser identifiers beyond standard request headers
- Location data beyond the country level inferred from request origin (used only for anti-abuse rate-limiting)
4. Cookies and analytics
The website uses essential cookies only (session, language preference, consent state). We may use privacy-respecting analytics that do not rely on individual user identifiers (such as Plausible or Umami). We do not use Google Analytics, Facebook Pixel, or any cross-site tracking technology.
5. How we use the data
- To run your sessions and execute the trades you configure
- To process and deliver refunds to the originating wallet
- To respond to support requests
- To detect and prevent abuse, fraud and security incidents
- To improve the Service (aggregate, non-identifying performance metrics only)
6. Sharing
We do not sell, rent or share your personal data with advertisers, data brokers or marketing partners. Limited operational sharing occurs with:
- Telegram — required to deliver bot messages. Telegram has its own privacy policy governing what they retain about your Telegram account.
- Solana validators / Jito relays — required to execute trades. These are public infrastructure; transaction data on Solana is, by design, public.
- Legal compliance — if compelled by valid legal process in our operating jurisdiction (Germany / EU).
7. Retention
- Sub-wallet private keys: cryptographically wiped at session end.
- Session execution metadata: retained for 180 days, then aggregated and the per-session details deleted.
- Support emails: retained for 24 months, then deleted.
- Server logs: retained for 30 days.
8. Your rights (GDPR)
If you are in the European Economic Area, you have the right to access, correct, delete or export the personal data we hold about you, and to object to or restrict its processing. To exercise these rights, email [email protected] from the email address tied to your support history, or contact us via your Telegram account.
You also have the right to lodge a complaint with a supervisory authority — for German residents, this is typically the data-protection authority of your federal state.
9. Security
We use authenticated encryption for all sensitive data at rest, TLS for all data in transit, and the principle of least privilege for backend access. Sub-wallet keys never leave the encrypted execution environment. See the Security page for more detail.
10. International transfers
Our infrastructure is operated primarily in the EU, with regional execution endpoints in the US, APAC and SA for low-latency Solana validator routing. Personal data transfers outside the EEA, where they occur, are protected under standard contractual clauses where applicable.
11. Changes
We may update this Privacy Policy. Material changes will be reflected in the "Effective date" at the top of this page.
12. Contact
For privacy questions or data requests: [email protected] · Weberstrasse 19, 55130 Mainz, Germany.