What we send and keep

The website

• No accounts, no ads, no analytics, no tracking cookies.
• It keeps one setting in your browser: the chart style you picked, line or candles.
• Its fonts come from Google Fonts and the report chart's library from jsDelivr, so those services see your IP address when they send them.
• The server counts requests per IP address for a few minutes, to apply its rate limits. It keeps no record of who looked at what. When it is under attack it may log requests for a few minutes to find the source, and deletes those logs afterwards.

The browser extension

• It works on Axiom (axiom.trade). To show its badges and tags, it sends isitbundled.com the addresses of the tokens on the page: the one in a token page's address, and the ones listed in Pulse, Discover and other lists; the wallet addresses shown on a token's page, in its holders, top traders and trades lists; and a token address you paste into its popup to check it.
• Its popup also shows isitbundled.com's public numbers (launches tracked, bundler wallets caught); loading them sends nothing about you. On a token's page it reads that page's address to show the token, and nothing from other sites.
• That is all it sends: not your Axiom account, your wallet, your balances or keys, nor any other page you visit. It clicks nothing, and changes nothing on the page but the badge and tags it adds.
• It keeps the answers in memory, not on disk, and its switches (badge, tags) in your browser's extension storage.
• The server handles its requests like the API's, below.

The API

• Requests are counted per IP address, or per API key, for a minute to apply the rate limit, and added up into daily totals of requests, tokens and wallets asked about. Which tokens or wallets an IP address or key asked about is not kept.
• An API key is kept as a hash, with the name it was made for, its limit and its number of requests.

The Telegram bot

• It keeps the ID of each chat it talks in, and a group's name. For each token asked about, it keeps the chat, the token, its answer and the time, for 90 days. It keeps no names or usernames from private chats.
• Sending it /owner, a command for the site's owner, keeps your username and name for an hour.
• In a group it receives the group's messages, as Telegram hands them to bots that answer plain commands, but it acts only on /check and on messages that mention it. It reads nothing else and keeps none of them.
• It writes to no one who did not ask, apart from the site owner's own alerts.

Wallet data

The tags on wallets come from public on-chain transactions: what a wallet did in a launch. Think one is wrong? Tell us on X, @isitbundledcom.