Privacy

Automata stores as little about you as a custodial product can. Every claim below is checkable against the open-source schema ↗.

What we store
  • Your email address and a username — to identify your account.
  • If you sign up with a password: an scrypt hash of it. If you sign in with Google: no password exists at all, and Google only tells us your verified email.
  • Session tokens, stored hashed — a leaked database cannot impersonate you.
  • Your custodial wallet's key, encrypted with AES-256-GCM — this is the point of the product and the biggest thing you are trusting.
  • Your deposits, withdrawals, backings and backer notes — notes are public by design, shown with your username.
What we never collect
  • No analytics, no trackers, no advertising pixels, no fingerprinting.
  • No selling or sharing of your data with anyone.
  • One cookie exists: your session. That is the whole list.
What is public by nature

Wallet addresses and every transaction they make are public on the Solana blockchain — that is what makes Automata verifiable, and it cannot be undone. Your email is never linked publicly to your wallet by us. To close your account, withdraw your funds and email realdoomsalt@gmail.com from your account address — we delete the row; the chain keeps what the chain keeps.