Privacy Policy
Last updated: 24 October 2026
This policy explains what Papero (“Papero”, “we”) collects when you use papero.fun, why, who processes it and how to have it removed. Papero is a paper-trading platform: you trade virtual SOL on live Solana market data. We collect as little as the product needs to work.
1. Reading without an account
You can browse the landing page, the terminal, token pages, trader profiles, the leaderboard and Trade Replay without signing in. In that case we do not create an account for you. Your requests still reach our servers through Cloudflare (see section 4), and we use your IP address for rate limiting (section 2.7).
2. What we collect when you use Papero
2.1 How you sign in, through Privy
Sign-in is handled by Privy, with an X account or a Solana wallet. With a wallet (such as Phantom, Solflare or Backpack) you sign a sign-in message that proves you control the address; Papero never asks your wallet to approve a transaction or move funds. We store the wallet's public address and the Privy user ID, and a wallet-only account is shown under its shortened address.
With X, we receive and store your X user ID, your X handle and the URL of your X profile picture, together with the Privy user ID that links them. You can link X to a wallet account later; X is required for rewards. We do not receive your X password, your email, your direct messages or your followers list, and Papero never posts on your behalf. Your handle and picture are refreshed at each sign-in.
2.2 Wallet addresses
If you sign in without a wallet, Privy creates an embedded Solana wallet for you. We store the public address of your sign-in wallet or of that embedded wallet as the default address for reward payouts. The payout address must be one of the Solana wallets linked to your account. We never see or hold private keys.
2.3 Public X data used for reward eligibility
To check reward eligibility we fetch your X account's creation date and follower count from public X data, through a public X mirror service, and store both with the date of the check.
2.4 Paper trading activity (public)
We store your virtual balance, your paper orders and fills, your open positions, resets and realized profit and loss. This activity is public by design: with X linked, it appears under your X handle and picture on the leaderboard, on your trader profile and in the live feed of paper trades. A wallet-only account appears under its shortened wallet address on the 24H, 7D, 30D and ALL boards and in the live feed.
2.5 Wallet Tracker lists
The wallets you track (address, the name you give it, an optional emoji, alert setting) are kept in your browser's local storage. When you are signed in, the list is also stored on our server with your account so it follows you to other devices.
2.6 Trade Replay sessions
For each replay we store a session ID, the coin replayed, your virtual fills, the result, the XP earned if you are signed in, and the IP address that started the session (used to limit how many replays one connection can keep open, and deleted when the session ends). Signed-in sessions are linked to your account and count toward the practice board.
2.7 IP address and security
We use your IP address to rate-limit requests and prevent abuse. Rate-limit counters are kept in memory for short windows (seconds to minutes) and are not written to our database. The only place we store an IP address is with a Trade Replay session, until that session ends (section 2.6).
2.8 Session and rewards records
When you sign in we issue a random session token, kept in your browser and stored on our side only as a hash. It expires after 30 days. If you receive a reward, we keep the payout record: round, rank, amount, payout address, status and the Solana transaction signature. Transactions on Solana are public and permanent.
3. Browser storage and cookies
Papero uses your browser's local storage, not advertising cookies, for: your session token, display and trading preferences (presets, filters, quick-buy amount), your Wallet Tracker list, recently viewed and starred coins, and your current Trade Replay session. Clearing your browser data removes them. When you sign in, Privy stores its own session data in your browser to keep you signed in.
4. Who processes data for us
- Privy runs sign-in with X and the embedded Solana wallet.
- Cloudflare carries all traffic to papero.fun (network, TLS and protection against attacks) and therefore processes request data such as IP addresses.
- A public X mirror service is queried with public X handles and post IDs to read public account data (creation date, followers) and the public posts shown in Trade Replay. No personal data of yours is sent to it other than your public handle.
- X's image servers. Profile pictures of traders and media in replayed posts load directly from X, so X can see the request from your browser.
- Blockchain data and RPC providers (an indexer and a Solana RPC provider) receive the wallet addresses you track or look up, so we can fetch their trade history and balances.
- Solana. Reward payouts are Solana transactions and are public by nature.
Market data comes from the Solana blockchain and public price feeds; reading it involves none of your personal data.
5. What we don't do
- We don't sell or rent personal data.
- We don't run advertising, ad trackers or third-party analytics on papero.fun.
- We don't ask for or store seed phrases or private keys.
6. How long we keep data
Account data, paper trading history, Wallet Tracker lists, Trade Replay sessions (without their IP address once they end) and payout records are kept while your account exists, because the leaderboards and reward reviews depend on them. Sessions expire after 30 days. Rate-limit counters last minutes.
7. Your choices and deletion
You can ask for a copy of the data tied to your account, or for its deletion, by writing to [email protected] from, or mentioning, the X handle you signed in with. On deletion we remove your account, X identifiers, wallet and payout addresses, Wallet Tracker list and sessions, and remove you from the leaderboards. Rewards already paid keep their payout record (round, amount, payout address and transaction) for accounting and abuse prevention; everything else is deleted. Payout transactions already on Solana can't be removed by anyone.
8. Age
Papero is not intended for anyone under 18.
9. Changes
When this policy changes we update the date at the top of this page. Material changes are also announced on Papero's official channels.
10. Contact
Questions about this policy: [email protected]. See also the Terms of Use.