Last updated: 29 October 2026. These pages explain how the app works in plain language. They are not legal advice.

Privacy Policy

Lamport is built to need as little of your data as possible. There is no account database, no analytics, no tracking cookies, and no ads. We don't keep a profile of you anywhere.

Signing in

Signing in uses Sign In With Solana. Your wallet shows you a text message to sign — not a transaction. Signing it is free and cannot move funds.

Signing in sets two cookies in your browser, both readable only by our server:

A short-lived nonce cookie, used only to complete sign-in. It expires after 2 minutes.
A signed session cookie holding your wallet address, the token mint it was checked against, your tier, your token balance, when we last checked it, and when it expires (7 days by default). It is httpOnly (not readable by page scripts), Secure in production, and SameSite=Lax.

That cookie lives in your browser. We don't store a copy of it anywhere on our side.

What leaves your browser

To sign you in or check what you hold, your wallet address is sent to our server, which reads your token balance from the Solana blockchain through a Solana RPC provider (the public Solana RPC, or a provider such as Helius). Your address reaches that provider too — that is how a balance lookup works.

The free check on the home page runs entirely in your own browser against the public Solana RPC. Your address never reaches our server for that check.

Hosting and server logs

The app runs on Vercel. Vercel keeps its own standard request logs (IP address, time, path, browser user agent) under Vercel's own retention policy, not ours. If something fails in your browser, the app sends the error text and your browser name to the same logs so we can fix it. See Vercel's privacy policy.

On-chain activity

Any transaction you approve in your wallet is recorded on the Solana blockchain. That record is public and permanent — nobody, including us, can edit or delete it.

No affiliation