PRIVACY POLICY

1. Information Collection (Extension)

The FlashScreener browser extension does not collect, store, or share personally identifiable information such as your name, email, IP address, or browsing history. The extension does not track your activity across websites.

To enable wallet and swap functionality, the extension generates and stores the following operational data locally on your device via chrome.storage.local:

• User ID — an anonymous, randomly generated identifier (not linked to any personal information)
• Authentication token (JWT) — used to validate your interactions with the FlashScreener backend
• Public wallet address — your Solana wallet address (which is already public on-chain by design)

The FlashScreener backend stores minimal operational records required for the extension to function:

• Your anonymous User ID and associated wallet reference (Privy wallet ID)
• Public wallet address
• Swap transaction records (transaction hash, token, amount, and timestamp)
• Consent acknowledgment status

We do not store private keys on our servers. Private keys are managed exclusively by Privy's encrypted infrastructure (see "Embedded Wallets & Key Management" below). All locally stored data is removed when you log out of the extension or uninstall it. Backend records are deleted when you disconnect your wallet.

Note: For additional data handling related to Token Swap features, see the dedicated "Token Swaps & Trading" section below.

2. Permissions

Content scripts (specific domains only): the Extension injects a lightweight UI overlay on x.com, twitter.com, mobile.twitter.com, and tweetdeck.twitter.com to detect Base58 strings that match Solana contract addresses and verified $TICKERs. Detection happens entirely in your browser; page content is never collected or sent to our servers.

Host permissions: the Extension communicates with the following endpoints directly from your browser:

• api.dexscreener.com — to retrieve public token data (name, ticker, icon, market cap, 24h change)
• api.geckoterminal.com — to retrieve OHLCV chart data and token images as a fallback source
• flash-screener.github.io and raw.githubusercontent.com/flash-screener — to fetch the verified token registry (badge data, official links, banners)
• FlashScreener backend servers (hosted on Render) — to facilitate wallet operations (creation, import, export, disconnect), swap quote requests, and transaction building via DFlow
• Privy (api.privy.io) — third-party wallet infrastructure provider used to securely create, import, and manage embedded Solana wallets (see "Embedded Wallets & Key Management" section)

All requests are made directly from your browser or routed through the FlashScreener backend as needed for wallet and swap operations. FlashScreener does not log or store any data beyond what is described in Section 1.

Storage & Alarms: chrome.storage.local is used to save your local settings/preferences, your anonymous User ID, authentication token (JWT), and wallet address. Alarms are used to schedule periodic cache refreshes. chrome.storage.local is isolated per-extension by Chrome's security model — no other extension, website, or content script can access FlashScreener's stored data.

3. Data Sharing

We do not share, sell, or transfer user data to third parties under any circumstances.

4. Extension Third-Party Services

DexScreener API (api.dexscreener.com): when the popup opens, the Extension makes public requests with the clicked contract address to retrieve public token data (name, ticker, icon, market cap or FDV, 24h change) and to resolve the most liquid trading pair. The request is sent directly from your browser to DexScreener; FlashScreener does not proxy or store server-side data. A short-lived local cache (~5 minutes) is used only to reduce duplicate requests.

GeckoTerminal API (api.geckoterminal.com): the Extension may request OHLCV candlestick chart data and token images from GeckoTerminal's free public API as a fallback data source. These requests are sent directly from your browser.

Quick Links to External Platforms

FlashScreener is fundamentally a discovery and redirect tool. The Extension provides convenience links to third-party trading platforms and data services including DexScreener, Axiom, Photon, GMGN, Pump.fun, and Padre. These are simple redirect links only — clicking them opens the respective platform in a new browser tab with the token's contract address pre-filled. Users can enable or disable which platform icons appear in the Extension's settings.

FlashScreener is a discovery and redirect tool only. It has no affiliation, partnership, sponsorship, or endorsement relationship with DexScreener, Axiom, Photon, GMGN, Pump.fun, Padre, GeckoTerminal, or any other third-party platform linked from the Extension.

These links are provided solely for user convenience. FlashScreener does not control, operate, or take responsibility for the content, services, fees, or actions of these platforms. Your use of any linked platform is governed entirely by that platform's own terms of service and privacy policy.

Note: For third-party services related to Token Swaps (DFlow, Helius), see the dedicated "Token Swaps & Trading" section below.

5. User Control

You have full control over your data within FlashScreener:

• Export your private key — You can export your wallet's private key at any time through the extension's settings, giving you full portability and control over your funds
• Disconnect / Logout — When you log out or disconnect your wallet from the extension, all associated backend records (wallet reference, transaction history, and consent) are permanently deleted from our servers
• Local data removal — Logging out clears all locally stored data (JWT token, User ID, wallet address) from chrome.storage.local. Uninstalling the extension also removes all local data automatically
• Uninstall — You can remove the extension at any time through your browser settings

If you have any questions about your data, you can reach us through the contact information at the bottom of this page.

6. FlashScreener Telegram Bot

Privacy & Data Use — FlashScreenerBOT

FlashScreenerBOT only processes messages when it's invoked (mentions, commands, or messages in groups where it can read). We minimally handle: message content, chat/user IDs, and any contract address (CA) you provide to generate a reply.

We store only what's needed to run the bot: chat's filters (keyword → response) and the chat ID that owns them. We do not store conversation history, and we do not sell data. Admins can add, delete, or reset filters at any time with /flashsettings.

APIs & third-party services

This bot currently queries the following public API: GeckoTerminal (by CoinGecko) — prices, pairs, market cap.

By using the bot, you acknowledge that your use of data from this service is subject to the provider's terms and privacy policies. We are not affiliated with or endorsed by CoinGecko/GeckoTerminal, Solana Foundation, or Telegram. All trademarks are the property of their respective owners.

Permissions

The bot does not require admin privileges. In groups, it only works if it can read messages. It does not send unsolicited private messages.

Updates to this section

We may update these bot-related disclosures at any time to reflect legal, technical, or operational changes. The current version will always be published on this page.

7. Embedded Wallets & Key Management

How Wallets Work in FlashScreener

FlashScreener provides an embedded wallet experience powered by Privy, a third-party wallet infrastructure provider. When you use FlashScreener, a Solana wallet is either created for you automatically or imported by you using an existing private key. This wallet lives within Privy's secure infrastructure — FlashScreener does not store, access, or handle your private keys at any point.

Wallet Creation

When a wallet is created through FlashScreener, Privy generates and stores the private key using industry-standard encryption. FlashScreener only receives and stores the wallet's public address and a reference ID — never the private key itself.

Wallet Import

If you choose to import an existing private key, the key is encrypted in transit using HPKE (Hybrid Public Key Encryption) and sent directly to Privy's infrastructure. FlashScreener's backend facilitates this process but does not store, log, or have access to the private key at any point during or after the import.

Wallet Export

You can export your wallet's private key at any time through the extension. The key is retrieved from Privy's infrastructure, decrypted, and displayed to you within the extension interface. Once exported, you are solely and entirely responsible for the safe storage and security of your private key.

Your Responsibilities

FlashScreener cannot recover, restore, reset, or reissue private keys. If you lose access to your exported private key, your funds may be permanently inaccessible.

By using FlashScreener's wallet features, you acknowledge and agree that:

• You are solely responsible for securely storing any exported private keys
• You will not share your private key with anyone — FlashScreener will never ask for it
• Any loss of funds resulting from compromised, lost, or mishandled private keys is your sole responsibility
• You understand that blockchain transactions are irreversible and that FlashScreener cannot reverse, refund, or recover any transaction

Third-Party Wallet Provider (Privy)

Privy manages the wallet infrastructure, including key generation, encryption, storage, and signing operations. FlashScreener does not control Privy's internal security practices. By using FlashScreener's wallet features, you also acknowledge Privy's Privacy Policy. Privy may retain certain wallet data in accordance with their own data retention policies, even after you disconnect your wallet from FlashScreener.

8. Authentication & Local Storage

Authentication Token (JWT)

When you first use FlashScreener's wallet or swap features, the extension generates a secure authentication token (JWT — JSON Web Token) that is stored locally in your browser's chrome.storage.local. This token is used to validate your interactions with the FlashScreener backend and is automatically renewed as needed.

The JWT contains only your anonymous User ID — it does not contain any personal information, private keys, or wallet balances.

Anonymous User ID

FlashScreener generates a random, anonymous User ID for each installation. This ID is not linked to your identity, email, IP address, or any other personally identifiable information. It serves solely as an internal reference to associate your wallet with your extension instance.

Security of Local Storage

All data stored in chrome.storage.local is isolated by Chrome's extension security model. This means no other extension, website, or script running in your browser can access FlashScreener's stored data. Your authentication token and User ID are accessible only to the FlashScreener extension.

Data Lifecycle

All locally stored data (JWT, User ID, wallet address, preferences) is cleared when you log out or disconnect your wallet. Uninstalling the extension also removes all local data. No residual data is left on your device after logout or uninstallation.

9. $FLASH Token — Disclosures & Notices

Nature of $FLASH

$FLASH is a cryptoasset that reflects the tokenization of the FlashScreener community and brand around the tool/extension. It does not grant equity, dividends, governance, voting, or any rights equivalent to shares/quotas of the tool or of any operating entity. No backing/NAV. $FLASH is not backed by reserves or any asset basket, has no NAV per token, and there is no programmatic buyback/burn commitment. $FLASH is not a guaranteed investment, nor should it be interpreted as, an offer of securities.

No financial or legal advice

Any information about $FLASH provided on the website, extension, or official channels is informational/educational only and does not constitute financial, legal, tax, or investment advice. Acquiring, trading, or using $FLASH is solely the user's responsibility.

Volatility and risks

Cryptoassets are highly volatile. Don't spend money you are not willing or able to lose.

Users should assess their risk tolerance and seek independent professional advice if needed.

Community Staking Pool

FlashScreener may offer a staking pool where $FLASH holders can stake their tokens and receive community rewards. These rewards are funded by a portion (up to 69%) of the revenue generated from $FLASH-related platform fees and are distributed as a thank-you to the community for supporting and believing in the project.

Staking rewards are not guaranteed income, interest, yield, dividends, or any form of financial return. They are discretionary community rewards that may vary, decrease, or be discontinued at any time.

By participating in the staking pool, you acknowledge and agree that:

• Staking rewards do not represent equity, profit-sharing, dividends, or any financial obligation from FlashScreener to you
• Reward amounts are variable and depend on platform activity — there is no guaranteed rate or minimum payout
• FlashScreener reserves the right to modify, pause, or discontinue the staking pool and its reward structure at any time without prior notice
• Staked tokens remain subject to all risks inherent to cryptoassets, including price volatility and smart contract risk
• You are solely responsible for any tax obligations arising from receiving staking rewards in your jurisdiction
• The staking pool is powered by third-party infrastructure and FlashScreener is not liable for any issues, delays, or losses related to the staking mechanism

The staking pool exists solely as a way to give back to the community. It should not be interpreted as an investment opportunity, a promise of returns, or a financial product of any kind.

Asset Purchases

Purchases of assets from other communities are marketing actions. They do not constitute an investment;

$FLASH has no NAV/backing, and there is no objective of financial return. Acquired tokens/NFTs may be used for campaigns, giveaways, and integrations; any residual holdings are purely symbolic.

Extension remains free and independent of the token

The FlashScreener extension remains free and open to all users. No purchase or holding of $FLASH is required to install, access, or use the extension, now or in the future.

No affiliation or endorsement by Google

The extension may run in the Google Chrome browser, but $FLASH is not affiliated with, sponsored, endorsed, or associated with Google LLC or Google Chrome. "Google" and "Chrome" are trademarks of their respective owners. Any reference is descriptive only.

Data, privacy, and $FLASH

Interactions with $FLASH occur via the FlashScreener embedded wallet, third-party wallets (e.g., Phantom, Solflare), and external platforms (e.g., DEXs, Pump.fun). We do not collect seed phrases or private keys and will never ask for them.

Public addresses, balances, transactions, and other on-chain data are public by design on the Solana blockchain. We may read, display, or aggregate such data (e.g., holder counts, developer buybacks, liquidity status) for transparency, analytics, or informational purposes.

Third-party platforms

Buying, selling, swapping, staking, providing liquidity, or any other $FLASH operations (when available) occur on third-party platforms or smart contracts. We do not control listings, pairs, prices, fees, liquidity locks, staking mechanisms, or uptime of those platforms. Links or embeds (e.g., charts) are provided for convenience and do not constitute endorsement.

Updates to this section

We may update these token-related disclosures at any time to reflect legal, technical, or operational changes. The current version will always be published on this page.

10. Token Verification and Methodology

Eligibility

To request verification, you must have a valid SPL token on Solana with a public CA; provide official links (website, X/Twitter, Telegram etc) and a personal contact; accept the badge usage rules and revocation policy.

How to get your token verified?

Submit: create a post on X/Twitter tagging @0xkalashnikov or @0xRefined and @flashscreener with your CA, $TICKER, banner image (1500x500), and optionally your project's X, Telegram, and Website links. Review: we run the checks and may request extra information if needed. If approved, the badge will appear across FlashScreener. Verification is currently free.

Badge usage guidelines

The badge appears inside FlashScreener extension popup. Do not alter the badge, imitate FlashScreener branding deceptively, or use it to promise gains.

Revocation and re‑review

The badge may be revoked at any time if we identify: Critical changes to contract, mint/freeze authority, fees, or lists that impact users. LP removal, strong manipulation signals, or deceptive materials. Phishing, fraud, or rules violations.

Periodic re‑reviews may occur.

How the badge shows up in FlashScreener

Verified tokens unlock the full panel on CA or $TICKER click. Allowing user to easily check the token's official X page and Telegram + quick links.

Unverified tokens show warnings such as "UNVERIFIED" or "Token not verified" (since they're not verified by our team), and do not have quick buttons to X or Telegram.

11. Token Verification FAQ

Does the badge guarantee it's not a scam?

No. It collects and analyse token data to reduce information asymmetry, but does not eliminate risk. Always dyor and be safe.

Does the badge expire?

We may re‑review at any time based on future requests from tickers with the same name, allegations of token copying, scams, or any other detail that does not comply with our policies.

Can I contest a decline?

Yes. Re-submit your request with new evidence addressing the raised points.

What about the other tokens with the same ticker as mine?

After the token is verified, even people looking for other tokens that have the same ticker as yours, will be presented with your token profile when they click on the ticker, because you claimed the verification first.

Is the verification permanent?

We understand that there are several tokens with the same name and ticker, for this reason, disputes may be opened and will go through a deep analysis process.

12. Token Swaps & Trading

FlashScreener as a Discovery & Swap Interface

FlashScreener is a discovery and redirect tool that also provides a user interface for executing token swaps on the Solana blockchain. We do not operate, manage, or control any exchange, liquidity pool, or trading infrastructure. All trading operations, market data, order execution, and settlement are provided entirely by independent third-party services — specifically DFlow, which serves as the infrastructure behind all swaps.

FlashScreener does not directly hold, custody, or have access to your funds. All risk is assumed entirely by the user.

Wallet & Transaction Architecture

FlashScreener uses an embedded wallet model powered by Privy (see Section 7 for full details). In this model:

• Private keys are managed by Privy — FlashScreener does not store, access, or handle your private keys directly. Privy holds them using industry-standard encryption.
• Swaps are user-initiated only — The FlashScreener backend executes swap transactions exclusively when you initiate a swap action in the extension interface. No transactions are ever executed automatically or without your action.
• Transaction signing occurs via Privy's infrastructure — When you initiate a swap, the backend requests Privy to sign the transaction using your wallet's authorization key. This enables a streamlined one-click swap experience.
• You can export your private key at any time — giving you full control and the ability to use your wallet independently outside of FlashScreener

We will never ask for your seed phrase or private keys. If anyone requests these, it is not from FlashScreener.

Third-Party Service Providers

The token swap features rely on the following third-party providers:

• DFlow — The decentralized exchange (DEX) aggregator that powers all swap infrastructure. DFlow routes and executes token swap transactions on the Solana blockchain, finding optimal routes across multiple liquidity sources. FlashScreener does not control swap rates, slippage, routing, or execution — all of this is handled by DFlow.
• Helius — A Solana RPC infrastructure provider that enables blockchain communication, transaction submission, and data retrieval. FlashScreener uses Helius to interact with the Solana network but does not control network fees, transaction confirmation times, or blockchain operations.
• Privy — Third-party wallet infrastructure provider that securely manages embedded wallets, private key storage, and transaction signing. FlashScreener communicates with Privy via secure server-to-server APIs (see Section 7).

By using these features, you acknowledge that your use is subject to each provider's respective terms of service and privacy policies. FlashScreener is not affiliated with, endorsed by, or partnered with any of these providers.

How Token Swaps Work

When you initiate a swap through FlashScreener:

1. Quote Request — FlashScreener requests a price quote from DFlow's aggregator for the token pair and amount you specified
2. Transaction Building — DFlow constructs the swap transaction with optimal routing across liquidity sources
3. User-Initiated Execution — When you tap the swap button, the FlashScreener backend requests Privy to sign the transaction using your wallet's key
4. Submission — The signed transaction is submitted to the Solana blockchain
5. Confirmation — The transaction result (success or failure) is displayed in the extension

Transactions are only executed when you explicitly initiate them. FlashScreener does not execute transactions automatically, in the background, or without your direct action.

Risks of Token Swaps & DeFi Trading

By swapping tokens on the Solana blockchain you are dealing with highly volatile digital assets. The risk is entirely yours.

• Price Volatility — Solana token prices can change rapidly and dramatically; you may lose part or all of your funds
• Slippage — Actual execution price may differ from quoted price, especially for large orders or illiquid tokens
• Smart Contract Risk — Smart contracts are code and may behave unexpectedly in certain conditions
• Token Risk — While FlashScreener offers a token verification service to support communities and provide basic information, verification is not a guarantee of safety, profitability, or endorsement of any project. We encourage you to always do your own research (DYOR) before making any trading decisions
• Network Fees — Solana network fees are required for all transactions and are non-refundable
• Transaction Finality — Blockchain transactions are irreversible once confirmed
• Technical Risk — Software bugs, API failures, network issues, or blockchain congestion may affect trading. Features in beta may have additional bugs or unexpected behavior.

Platform Fee Disclosure

FlashScreener charges a small platform fee of 0.69% on each swap transaction. This fee is included in the transaction amount. The fee helps support the development and maintenance of FlashScreener.

No Financial Advice

Nothing on FlashScreener constitutes financial, investment, legal, or tax advice. All information is provided for informational and educational purposes only. You are solely responsible for evaluating the merits and risks of any trade or investment decision.

FlashScreener does not recommend, endorse, or suggest any particular trade, token, or investment strategy. Past performance is not indicative of future results.

User Responsibility & Assumption of Risk

By using the token swap features on the FlashScreener browser extension, you acknowledge and agree that:

• You are solely responsible for evaluating the security, integrity, and suitability of any token swap or trade you execute
• You have the knowledge and experience to understand the risks associated with digital asset trading, including total loss of funds
• You accept full responsibility for all activities conducted through your wallet, including any authorized or unauthorized transactions
• Blockchain transactions are irreversible — once confirmed on-chain, they cannot be undone, refunded, or reversed by FlashScreener or any third party
• FlashScreener is not obligated to refund, reimburse, or compensate any user for losses arising from swap transactions, regardless of the cause
• Solana tokens are highly volatile assets — you may lose part or all of your investment, and all risk is assumed entirely by you
• You understand the embedded wallet model — transactions are signed via Privy's infrastructure when you initiate a swap, and you accept this architecture

This applies to all swap and trading functionality, including but not limited to: swaps initiated through the FlashScreener browser extension on any supported platform, and any future trading features added to FlashScreener.

Third-Party Terms (DFlow & Privy)

Token swaps on FlashScreener are powered entirely by DFlow. Wallet infrastructure is provided by Privy. By using FlashScreener's swap features, you also acknowledge and agree to DFlow's Terms of Service, DFlow's Privacy Policy, and Privy's Privacy Policy. In particular, DFlow's terms state that they do not custody or control user assets, do not guarantee any return, and are not liable for any losses arising from the use of their protocol. FlashScreener inherits these same limitations as an interface built on third-party infrastructure.

Limitation of Liability

To the fullest extent permitted by applicable law, FlashScreener, its operators, developers, and affiliates shall not be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from:

• Your use of or inability to use the token swap or wallet features
• Any errors, bugs, or inaccuracies in the interface or displayed data (including in beta features)
• Actions, omissions, or failures of third-party service providers (including DFlow, Helius, Privy, and the Solana blockchain)
• Issues with wallet creation, import, export, or transaction signing
• Loss of funds due to market conditions, failed transactions, slippage, price impact, or user error
• Loss of access to funds due to lost or compromised private keys
• Unauthorized access to your wallet or digital assets
• Any other matter relating to the trading or wallet features

You use these features entirely at your own risk. FlashScreener's total liability, if any, shall not exceed the platform fees paid by you in the 30 days preceding the claim.

Indemnification

You agree to indemnify, defend, and hold harmless FlashScreener and its operators, developers, and affiliates from any claims, damages, losses, liabilities, and expenses (including legal fees) arising from your use of the swap, wallet, and trading features, your violation of these terms, or your violation of any applicable laws.

Eligibility & Compliance

By using the token swap features, you represent and warrant that:

• You are of legal age in your jurisdiction to engage in trading activities
• You are not located in a jurisdiction where cryptocurrency trading is prohibited
• You are solely responsible for complying with all applicable laws and regulations in your jurisdiction
• You understand and accept the risks associated with cryptocurrency trading

Data Handling for Swap Features

When using token swap features:

• Public wallet addresses are used to display balances and enable transactions
• Transaction data is public on the Solana blockchain and cannot be deleted
• The FlashScreener backend stores swap transaction records (hash, token, amount, timestamp) linked to your anonymous User ID for operational purposes. These records are deleted when you disconnect your wallet.
• We may cache quote data temporarily to improve performance
• Third-party providers (DFlow, Helius, Privy) may collect additional data according to their own privacy policies

13. Updates

We may update this Privacy Policy from time to time. Any updates will be published at this URL with a new effective date.

14. Contact