Privacy Notice

#One site, two different answers

The quick version, before the detail:

• The parody pages. No accounts, no login, no email signup, no newsletter, and no wallet connect of ours. What they do load is analytics and live market data, and both get their own section below.
• The launchpad. You sign in with a wallet, and from that moment there is a record on our server with your wallet address on it.
• Neither half asks for a private key, a seed phrase, government identification, or a payment card. There is no field anywhere to type one into.

#What the public site collects

The parody half of the site is a set of static pages. There is no account system, so there is nothing for you to fill in and nothing for us to store about you. We do not keep a visitor database and could not build one out of what those pages do.

Three things still happen when a page loads, and all three involve someone other than us:

• Google Analytics runs, which sets cookies and reports your visit back to Google.
• Your browser calls public market data APIs directly, so those providers see your request arrive.
• Some pages embed a swap widget and a price chart owned by other companies, which load their own code into the page.

Each of those is covered below. Between them, they are the entire privacy footprint of the public site.

#Cookies and analytics

The public site loads Google Analytics 4, measurement ID G-Q29F1672N0. It sets cookies in your browser, the ones named _ga and _ga_ followed by the measurement ID, and it sends Google a record of the visit. What that record contains includes:

• your IP address, which Google uses to estimate a rough location, usually no finer than a city or a region
• your device type, operating system and browser
• which pages you looked at, in what order, and roughly how long you stayed
• the link or site that referred you here

We read this in aggregate: how many people showed up, which creator pages get opened, whether a link worked. We do not try to identify individuals from it, and the reports we see are not organized in a way that would let us.

If you would rather not be counted, any of these work and none of them break the site:

• Install Google's own opt out browser add on from tools.google.com/dlpage/gaoptout, which stops Analytics everywhere, not only here.
• Block cookies for memesly.io in your browser settings, or use a private window.
• Use a content blocker, or a browser that blocks analytics by default. Most of them do now.

#Market data and embedded widgets

Prices, market caps and charts are not ours. The site asks public APIs run by DexScreener, GeckoTerminal and CoinGecko for them, and it asks from your browser rather than from our server.

That distinction is the whole point of this section. Because the request leaves your machine, those providers see it the way any website sees a visitor: your IP address, your browser's user agent, and which token you were looking at. We never receive any of that from them and we do not store it. Prices come back, and nothing else does.

Some pages also embed a third party swap widget and a chart iframe. Those are other companies' code running inside our page. They can set their own cookies and log their own traffic, and what they do with it is governed by their policies, not by this one.

We do not control these providers and cannot answer for them. If their handling matters to you, read their notices, or block third party requests in your browser and accept that the numbers on the page will not load.

#What the launchpad stores

memesly.io keeps records in a server side database. This is the whole list:

• The wallet address you sign in with. That address is the account. There is no username and no password behind it.
• A profile, if you choose to make one: a handle, a display name, a short bio, and an avatar image. All of it optional, all of it typed or chosen by you.
• Comments you post, and the time you posted them.
• Tokens you launched through the site.
• A salted SHA-256 hash of your IP address, used only for rate limiting. It gets its own section below, because the shape of it matters.
• Server logs, the ordinary kind any web server writes while it is running.

Two things worth noticing about that list. Everything on it either identifies a wallet or was typed in by the person holding the wallet. And there is no email address anywhere on it, because we never ask for one.

Avatar and token logo images are re-encoded before they are stored. Re-encoding rebuilds the picture from its pixels, which drops EXIF and every other embedded block that came with the file, including camera model, timestamps and GPS coordinates. We do not read that metadata on the way past; the encoder simply does not carry it forward.

A WALLET ADDRESS IS A PUBLIC IDENTIFIER, AND EVERYTHING YOU ATTACH TO IT HERE IS ATTACHED IN PUBLIC. IF YOU WOULD RATHER YOUR COMMENTS AND YOUR LAUNCHES WERE NOT TIED TO EACH OTHER, USE A DIFFERENT WALLET.

#How signing in works

Signing in is a message signature, not a transaction. Your wallet shows you a short block of text, you sign it, and the signature proves you control the address. It moves nothing, approves nothing, and cannot spend anything. If a page ever asks you to approve a transaction in order to log in, it is not us.

Once the signature checks out, the server issues a session token and your browser keeps it in localStorage. That token is what says you are still signed in on the next page. Clearing site data for memesly.io removes it and signs you out.

There is no password, so there is no password to leak. There is no email address, so there is nothing to sell and no way for us to contact you. That last part cuts both ways: if you lose access to the wallet, we have no other way to recognize you and no recovery process to offer.

#The IP hash, and why it is built that way

Rate limiting needs to tell one visitor from another for a few minutes at a time. Storing IP addresses is the normal way to do that, and it is more than the job needs, so we do not.

What the server stores is a SHA-256 hash of the address, salted with a random value generated fresh every time the server starts. The raw address is never written down. A hash is a fixed length string with no route back to the number that produced it, and because the salt is new after every restart, the same visitor produces a different hash tomorrow than today. Records from either side of a restart cannot be lined up with each other, including by us.

The trade is that we cannot use it to investigate anything, build any kind of profile, or answer a question like which addresses visited last week. That seems a fair price for not holding a list of everybody's IP address.

#What we never collect

Some of this repeats what is above, on purpose, because it is the part people are right to worry about.

• Private keys and seed phrases. We never ask, there is no field for one anywhere on the site, and anybody who asks you for one while claiming to be Memesly is stealing from you.
• Government identification. No passport, no driver's license, no photograph of you holding a document.
• Payment cards or bank details. The site takes no card payments at all.
• Email addresses and phone numbers. No signup form, no newsletter, no notifications.
• Precise location. Analytics infers an approximate region from an IP address, and that is the finest resolution anything here has.

MEMESLY WILL NEVER MESSAGE YOU FIRST ASKING YOU TO CONNECT A WALLET, VERIFY AN ACCOUNT, OR ENTER A RECOVERY PHRASE. EVERY MESSAGE THAT DOES IS A SCAM, WITHOUT EXCEPTION, HOWEVER CONVINCING THE ACCOUNT LOOKS.

#The blockchain part, which nobody can undo

A launchpad writes to a public ledger. That is what it is for, and it is also the one place in this notice where the honest answer is that your data has left everybody's hands, ours included.

When you launch a token or make a trade, the transaction is recorded on Solana. It carries your wallet address, the amounts, the time, and whatever name, symbol and image the token was created with. Anyone can read it. Anyone can copy it. Block explorers index it within seconds and third parties archive it permanently.

We cannot edit it and we cannot delete it. This is not a refusal, it is an absence of any mechanism. Tokens launched through Memesly have their mint and metadata authority revoked at creation, which is a safety feature: it is what stops anyone printing more supply or swapping the artwork after people have bought in. The unavoidable cost is that no key exists afterward that could rewrite those fields, not the creator's and not ours.

ASSUME ANYTHING YOU PUT ON CHAIN IS PERMANENT AND PUBLIC, AND DECIDE BEFORE YOU SIGN RATHER THAN AFTER. A RIGHT TO ERASURE HAS NO EFFECT ON A LEDGER THAT NOBODY CAN REWRITE.

What we can delete is our own copy: your profile, your comments, your account on our site. The section below on deleting your data sets out exactly where that line falls.

#How long things are kept

• Profile details stay until you change them or ask us to remove them.
• Comments stay until you delete them or ask us to.
• Rate limiting hashes expire on their own, and in any case stop meaning anything the moment the server restarts and the salt changes.
• Server logs are kept while they are useful for debugging and handling abuse, then they age out.
• Analytics data lives in Google's systems on Google's retention schedule, set from the controls Google exposes and enforced on their side rather than ours.
• Anything on the Solana blockchain is permanent, and no decision of ours affects that.

We do not keep records on the theory that they might come in useful one day. If something on that list stops earning its place, the intention is to stop collecting it rather than to find a new use for it.

#Who else sees any of this

We do not sell personal data. We never have, there is no arrangement under which we would, and there is no advertising network anywhere on the site beyond the analytics already described.

Data reaches other parties in exactly three ways:

• Service providers who run parts of the site: Google for analytics, the hosting and infrastructure providers that keep the servers up, and the storage that holds uploaded images. They handle data to do that job and for nothing else.
• Third parties you interact with directly, meaning the market data APIs, the swap widget and the chart iframe. That is your browser talking to them, and their notices govern what follows.
• Legal requests. Given a valid, properly scoped legal demand, we will respond to it. We will push back on demands that are overbroad or that ask for things we do not hold, and the second category is larger than people expect.

If Memesly were ever sold or merged, records would move with the site, and this notice would keep applying to them until it was replaced by one you were told about.

#Deleting your data

This is the section most people actually come here for, so it is written as directly as we can manage.

What we can delete, on request:

• Your profile: handle, display name, bio, avatar image.
• Your comments, individually or all at once.
• Your launchpad account, which takes the profile and the comments with it and unlinks the wallet from them.

What we cannot delete, however much anyone would like us to:

• Any transaction on Solana. Tokens you launched, trades you made, transfers you signed. Permanent, public, and not ours to touch.
• A token's name, symbol or image once it has been minted, because the metadata authority is revoked at creation and no key remains that could change it.
• Copies other people already have. Block explorers, indexers, archives and screenshots are beyond anyone's reach once the data is public.

How to ask: email from any address, say what you want removed, and be ready to prove you control the wallet. The proof is a signed message, the same kind you use to sign in, because the wallet is the only identifier we hold. We cannot act on a request we cannot tie to an account, and we would rather refuse a stranger than delete the wrong person's history.

We will confirm when it is done. Where part of a request is something we cannot do, we will say which part and why, rather than quietly doing the rest and letting you assume.

#Security, and what it does not cover

The practical measures are unglamorous. Traffic is served over HTTPS. Uploaded images are validated and re-encoded rather than stored as they arrive. The launchpad database is not readable by other users of the machine it sits on. We hold no private keys, so there is no key material to steal from us in the first place.

No system is perfectly secure, and a privacy notice that promised otherwise would be lying to you. Two limits are worth naming. Your session token sits in your browser's localStorage, so anything with access to your browser or its stored data has access to your session; sign out on shared machines. And a wallet is only ever as safe as the device holding it, which is a problem no website can solve on your behalf.

#Where the data goes

Memesly is a small operation and its infrastructure is not arranged by geography. Servers and service providers may sit in the United States or elsewhere, so if you are reading this from the EEA or the UK, your data crosses a border to reach them.

Where a provider moves data out of the EEA or the UK, they generally rely on standard contractual clauses or an equivalent transfer mechanism, and the documentation for that is theirs to publish. We rely on their arrangements rather than running a separate one of our own, and we would rather say that than imply a compliance apparatus we do not have.

Solana is not in a country at all. Data on a public blockchain is replicated by nodes all over the world at once, and there is no meaningful sense in which it is stored in any particular place.

#Your rights, and how to use them

Where the law gives you rights over your data, we will honor them. We will also tell you honestly when a right has nothing here to bite on, which happens more often than you might expect, because most of what we hold about you is a wallet address you chose to hand us.

If you are in the EEA or the UK, the GDPR gives you the right to:

• ask what we hold about you and get a copy of it
• have inaccurate details corrected
• have data deleted, subject to the limits set out in the deletion section above
• restrict or object to processing, including our use of analytics
• receive your data in a portable format
• complain to your national supervisory authority, which you can do without coming to us first

The legal bases are short enough to state in a sentence. Legitimate interests, for analytics and for keeping the site working and free of abuse. And on the launchpad, doing the thing you signed in and asked us to do. We process no special category data, because we collect nothing that would qualify as any.

If you are in California, the CCPA as amended gives you the right to know what is collected and why, to have it deleted, to have it corrected, to opt out of the sale or sharing of personal information, and not to be treated worse for asking. We do not sell or share personal information as those terms are defined, so the opt out has nothing to switch off, and a Global Privacy Control signal reaching this site finds nothing to turn off either. Send the request anyway if you want it on the record, and we will confirm that in writing.

Other states and countries have their own versions of this. We do not maintain a separate procedure for each. Tell us what you want and where you are, and we will apply whichever framework gives you the most.

How to ask: email . For anything touching launchpad data, expect to prove control of the wallet with a signed message. For the public site there is usually nothing to return, because a static page with no login leaves us nothing tied to you; the analytics record sits with Google under a pseudonymous identifier that we cannot connect to a person.

#Age

Memesly is not directed to anyone under 18, and nothing on it is designed for children. The subject matter is memecoin speculation dressed up as a subscription site, which is not suitable for minors regardless of what any particular law requires.

We do not knowingly collect anything from anyone under 18. We also cannot verify anyone's age, because we collect no identification and have no plans to start. If you believe a minor has created a profile or posted on the launchpad, email and we will remove it.

#Changes to this notice

This gets updated when what we do changes. The date at the top is the date of the current version, and the current version is the one that applies.

If a change is material, meaning we start collecting something new or start using something for a purpose you would not have expected from reading this, we will say so on the page instead of editing quietly and letting the date do the work.

#Contact

One address handles all of this: . Privacy questions, deletion requests, rights requests, corrections, and anything in here you think is wrong.

There is no phone line and no contact form. That is not a stalling tactic; it is one inbox, read by the people who built the site.