Privacy policy

1. Who we are

Menfiso is run by TOO DEMETRA SYSTEMS, which decides how the data below is used. For anything about your data, write to 1@demetra.work.

2. Visitors

Our server records each request's method, page, response code and time, without your IP address. To stop abuse, the address you connect from is held in memory for up to ten minutes when you request an analysis or a sign-in link, and is not written down.

3. Account holders

• Sign-in: your email address, or, with Google, your Google account identifier and verified email. We never ask for a seed phrase, a private key or a wallet connection.
• Profile: the site language you used and when you signed up and last signed in.
• Sessions: a random token in a cookie; we store only its hash, for 60 days.
• Sign-in links: stored as a hash, valid for 20 minutes, deleted a day after expiry.
• Watchlist: the wallets you follow. Nobody else sees it.
• Telegram: if you connect alerts, your Telegram chat ID, until you disconnect.

We use this to sign you in, keep your watchlist and send the alerts you asked for. We do not send marketing email, and we do not sell or rent your data.

4. Wallet addresses

Wallet pages are built from the public Solana blockchain. A Solana address does not tell us who owns it, and we do not try to find out. When you request an analysis, the request is not linked to you or your account.

5. Cookies

• ww_session: keeps you signed in, 60 days. Set only when you sign in.
• ww_oauth: protects the Google sign-in step, 10 minutes.

We use no advertising cookies.

6. Who else handles it

Our hosting provider, Hetzner Online GmbH, stores the database on servers in Germany. Sign-in emails go out through an email delivery service. If you choose Google sign-in, Google confirms your identity; if you connect Telegram, alerts are delivered through Telegram. Each receives only what its part requires.

7. Keeping and deleting

Your account data is kept while the account exists. The “Delete account” button on your account page removes your email, watchlist, Telegram connection and sessions at once. Database backups are kept for 14 days, so deleted data leaves them within that time.

You can ask us what we hold about you, to correct it or to delete it at 1@demetra.work.

8. Changes

If this policy changes, the new version appears on this page with a new date. A change that widens how we use account data will be announced to account holders by email first.