Privacy Policy

1. Who We Are

TokenSearch is operated by Bullie Labs ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use the Service at tokensearch.fun ("the Service"). By using the Service, you agree to the practices described in this Policy.

2. Information We Collect

Account Information (if you sign in): When you authenticate via a supported third-party provider (Google, X/Twitter, or email one-time password via Privy), we receive and store:

• Your provider-assigned user identifier
• Your display name and username (as provided by the authentication provider)
• Your email address (if made available by the authentication provider)
• Your profile picture URL

We do not store passwords or payment information. Sign-in is not required to use the Service.

Search and Usage Data: When you use the Service, we log:

• Search queries you submit (ticker symbols, contract addresses, keywords)
• Search types (Pump.fun search, CA lookup, Reeree finder, ETH search, etc.)
• Search results returned (counts and identifiers)
• Timestamps and response times
• Your account identifier (if signed in) or session identifier (if anonymous)

A unique search identifier is assigned to each query. This allows us to investigate specific searches if you report an issue.

Technical and Session Data:

• IP address (collected at login and on search requests for rate limiting and fraud prevention)
• Browser user-agent string (collected at login for consent records and security logging)
• Session cookies (used to maintain your logged-in state for up to 30 days)
• Favorites and watchlist items you explicitly save within the Service

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate and maintain the Service and your account
• To improve the quality, relevance, and performance of search results
• To identify and resolve bugs and data quality issues (using search IDs you may provide when reporting problems)
• To analyze aggregate usage patterns and improve platform features
• To enforce rate limits and prevent abuse of the Service
• To maintain records of your agreement to our Terms of Service
• To sync your favorites and preferences across devices and sessions

4. Data Sharing and Third Parties

We do not sell, rent, or trade your personal information to third parties. Data may be shared with or processed by the following third-party infrastructure providers in the course of operating the Service:

• Railway — cloud hosting provider for our server and database infrastructure
• Cloudflare — CDN and DDoS protection (processes IP addresses and request metadata)
• Privy (privy.io) — authentication infrastructure for email OTP, Google OAuth, and X/Twitter OAuth
• Google — OAuth sign-in provider
• X/Twitter — OAuth sign-in provider

Each of these providers has their own privacy policies governing their use of data. We recommend reviewing those policies if you have concerns.

We may disclose information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Bullie Labs, our users, or the public.

5. Data Storage and Security

Your account data and search logs are stored in a PostgreSQL database hosted on Railway's infrastructure, which uses industry-standard security practices. Data in transit is encrypted via HTTPS/TLS.

While we take reasonable measures to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

Account information is retained for as long as your account remains active or until you request deletion. Search logs are retained indefinitely for service improvement purposes, but are not linked to you personally beyond the search identifier. Session records older than 30 days are automatically deleted.

You may request deletion of your account and associated data at any time by contacting us. See Section 10 for contact details.

7. Cookies and Local Storage

We use a session cookie to maintain your authenticated state. This cookie is set upon sign-in and expires after 30 days of inactivity. No advertising or tracking cookies are used.

We also use browser localStorage to store your preferences (such as column settings and UI state) locally on your device. This data never leaves your browser.

8. Children's Privacy

The Service is not directed at or intended for use by children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

9. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete the data we hold about you. To exercise any of these rights, contact us using the details in Section 10. We will respond to all requests within a reasonable timeframe.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Authenticated users may be prompted to review updated terms on their next login. Continued use of the Service after any update constitutes your acceptance of the revised Policy.

11. Contact

For privacy-related questions, data deletion requests, or concerns about how your information is handled, contact us via @bulliebot on X/Twitter or email [email protected].