Privacy Policy

Last updated: April 9, 2026

xick.tools ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What We Do Not Collect

We want to be clear about what we never do:

  • We do not collect your name, email, or any personal identification
  • We do not store your wallet private keys or seed phrases
  • We do not use tracking cookies or advertising pixels
  • We do not sell, share, or trade any data with third parties
  • We do not require account creation or login

2. What We Do Collect

When you use xick.tools, the following data is processed:

  • Wallet public address: Sent to our server when you use features like token creation, liquidity management, or bundle trading. This is a public blockchain address, not personal data. It is used only to build transactions and is not stored after the request completes.
  • Token metadata: Token names, symbols, descriptions, and images you upload during token creation are stored on IPFS via Pinata. This data is public and permanent by design.
  • Bundle wallet private keys: When using the Bundle Buy/Sell feature, you import private keys for your bundle wallets. These are transmitted to our server over HTTPS, used in-memory to build and sign bundle transactions, and are not stored permanently. We strongly recommend using dedicated wallets with limited funds for this feature.
  • Server logs: Our web server records IP addresses, request paths, and timestamps for security and debugging purposes. Logs are retained for up to 30 days and then deleted. Since we use Cloudflare, your actual IP is masked in most cases.

3. Blockchain Data

All transactions you execute through xick.tools are recorded permanently on the Solana blockchain. This includes wallet addresses, token transfers, pool interactions, and other on-chain activity. Blockchain data is public and immutable — we have no ability to delete or modify it. This is a fundamental property of blockchain technology, not a choice we make.

4. Third-Party Services

xick.tools relies on the following third-party services, each with their own privacy policies:

  • Helius (RPC provider): Processes our blockchain requests. See helius.dev
  • Pinata (IPFS): Stores token images and metadata permanently. See pinata.cloud
  • Phantom (wallet): Signs transactions locally in your browser. See phantom.app
  • Jito (block engine): Processes bundle transactions. See jito.wtf
  • Cloudflare (CDN/security): Routes and protects web traffic. See cloudflare.com
  • Hetzner (hosting): Hosts our server in Nuremberg, Germany. See hetzner.com

5. Cookies

xick.tools itself does not set any cookies. Cloudflare may set a security cookie (__cf_bm) to distinguish humans from bots. This is a functional cookie required for DDoS protection and does not track you across websites.

6. Data Security

We protect your data through:

  • HTTPS encryption on all connections (via Cloudflare + Let's Encrypt)
  • Server-side secrets stored in environment variables, never exposed to the frontend
  • Cloudflare WAF and DDoS protection
  • Firewall (UFW) restricting server access
  • Non-root application execution with restricted permissions

7. GDPR Compliance

Our server is hosted in Germany (Hetzner, Nuremberg) and we operate under EU data protection law. Since we collect minimal data and do not process personal information beyond server logs, we believe our processing is covered by our legitimate interest in security and service operation (Art. 6(1)(f) GDPR). If you believe we hold data about you and want it deleted, contact us and we will address your request within 30 days.

8. Children

xick.tools is not intended for anyone under 18 years of age. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision.

10. Contact

Questions about privacy? Reach us at [email protected].