Privacy

Your data on takeroo.com

Provisional version, 10 October 2026. It will be completed before any launch, with the publisher's identity.

In short

• No trackers, no audience measurement, no advertising.
• No third-party resources: fonts, images and scripts are served from takeroo.com. The only exception, if you choose it: signing in with WalletConnect (see below).
• A single cookie, and only if you sign in to an account: the session, strictly necessary.
• No identity data: the site asks for neither your name, email nor phone number.

What the server logs

Like any web server, takeroo.com's server records for each request the IP address, the date, the page requested, the response code and the declared browser. These logs are used only for security (spotting abuse and attacks) and are deleted automatically after 14 days.

If you have an account

You sign in by signing a message with your Solana wallet: no transaction, no access to your funds. The server keeps the wallet's public address, the account's role and share, and its creation date. For each session it keeps a fingerprint of the token (never the token itself), its expiry date, the IP address and the declared browser. A sign-in log (date, event, IP address) is used for security and is deleted after 90 days. The signature is checked once, then forgotten.

The takeroo_session cookie cannot be read by scripts, is sent over https only and only to the site's API; it expires after 7 days or when you sign out. A backup copy of this data is made every night and kept for 14 days on another server of the project (Contabo, United Kingdom).

Signing in with WalletConnect (optional). If you choose it, your browser and your wallet exchange end-to-end encrypted messages through the WalletConnect relay, run by Reown, Inc. (United States); an invisible frame from verify.walletconnect.org also confirms to your wallet that the request really comes from takeroo.com. Reown sees your IP address and Takeroo's project identifier, not the content of the messages. The WalletConnect session is closed as soon as sign-in is complete, and nothing from it is kept in your browser.

What stays in your browser

The app keeps your chosen theme and language and, if you signed in to an account, a simple “account opened on this device” flag, with no address or identifier: it lets the app offer to sign you in again when the session has ended, and is cleared when you sign out. It keeps no account data there: figures are read from the server on every visit.

Hosting

The site runs on a server rented from Contabo in the United States (New York). The domain name is registered with Hostinger. The site's scripts include a few open-source libraries (WalletConnect, QR code generation…): their licenses are listed in licences.txt.

Your rights

You may ask for access to your data, its correction or its deletion: account, sessions and sign-in log. A deleted account is erased together with all its sessions. From the app's “Account and settings” screen, you can also download everything the server keeps about your account yourself (JSON file) and delete your account, except the owner account.

Contact

For any request, including reporting a security issue: contact@takeroo.com. Security researchers will also find this address in security.txt.