anceta
Launch app

Privacy Policy

This policy says what personal information Anceta and RugUAV, its browser extension, collect, why, how long it is kept, who it is shared with, and what you can ask of us. It follows Quebec's private-sector privacy law (Law 25) and Canada's PIPEDA. Questions: [email protected].

1. What we collect, and why

  • Account: your email address, the name you give, and whether the email is confirmed. To open your account, send receipts, codes and reminders, and recover access.
  • Wallet addresses you link (Solana or Ethereum): public addresses only, never keys. To sign you in and to confirm a crypto payment came from you.
  • Sign-in records: the time, IP address and browser of each sign-in, sign-up, password reset and key change. For security: to spot abuse and let you review where you are signed in.
  • Payments by card: processed by Stripe. We never see or store your full card number. We keep Stripe's customer and subscription identifiers, your plan and its dates, and the card brand and last 4 digits Stripe gives us, so you know which card a renewal will use.
  • Payments in crypto: the public Solana transaction signature, the paying address, the amount and the plan. Solana is a public ledger; the transaction itself is public by nature.
  • RugUAV sign-in: when you connect the extension, we keep a one-way hash of its access key (never the key itself), the random device identifier it sends, the device name it shows (for example “RugUAV · Windows”) and when it was last used. See section 2.
  • Server logs: we don't log your ordinary use of Anceta, on the website or through RugUAV, including the coins you look up. Only requests that fail, are very slow or exceed our rate limits are written to the server's log, with the address requested (which can include a coin's address), the time, the IP address and the result, for security, abuse prevention and troubleshooting. These logs are deleted automatically as newer entries replace them, usually within days.
  • Site traffic: Cloudflare serves the site and protects it; it processes IP addresses to do so. Cloudflare Web Analytics counts visits on the website without cookies and without identifying you.

We collect nothing else: no advertising profiles, no tracking across other sites. We do not sell your data, share it for advertising, or use it to decide anyone's creditworthiness or for lending.

2. RugUAV browser extension

RugUAV is Anceta's browser extension. It shows Anceta's token risk information while you browse supported trading sites.

  • Sign-in. When you click “Sign in with Anceta” or “Create an account”, you log in on anceta.com; your password never passes through the extension. The extension then receives an access key for your account and keeps it only on your computer, in the extension's private storage. It also creates a random device identifier so your account can be used on one computer at a time: signing in on another computer signs the first one out. The key and device identifier are sent only to anceta.com.
  • Coins you view. To show a coin's risk information, the extension reads the token address and basic token details shown on supported trading sites (currently axiom.trade, padre.gg, gmgn.ai and Photon at photon-sol.tinyastro.io) and requests that coin's data from anceta.com. It does not read your wallet, balances, trades or any other content of those pages.
  • Rug marks. If you use “Mark as rug”, the mark stays on your computer: the extension hides that coin in your browser. It is not sent to Anceta and changes nothing for anyone else.
  • Settings. Your extension settings (panel position, theme, thresholds, alert sound, including a custom sound you choose) and the coins you hide or mark are stored only in your browser.
  • What the extension doesn't do. No advertising, no analytics or tracking, no reading or recording of your browsing history, no access to your wallet or private keys. It communicates with no server other than anceta.com.
  • Your control. “Sign out” in the extension's settings revokes its access key on our side; you can also sign it out from your account page. Removing the extension deletes everything it stored on your computer.

3. Cookies

Anceta sets one cookie: your session, so you stay signed in. It is necessary for the service and holds no tracking. Stripe sets its own cookies on the payment form, as described in Stripe's policy. RugUAV sets no cookies.

4. How long we keep it

  • Account data: as long as the account exists. When you delete it, the account, its sessions, wallets and keys (including RugUAV's) are deleted at once.
  • Sign-in records: 90 days.
  • Server logs: deleted automatically as newer entries replace them, usually within days.
  • Payment records (card identifiers, crypto signatures, amounts, periods): 7 years after the payment, as Canadian tax law requires, even after the account is deleted. They are kept apart from the deleted account.
  • A record that an email, wallet or card has already used its free trial: kept, so a trial can't be taken twice. It holds one-way hashes only: not the email or address itself, and for a card a hash of the fingerprint Stripe gives it, never the card number.
  • Emails never confirmed within 24 hours of sign-up are deleted automatically.

5. Who sees it

Only the people operating Anceta, and these providers, each for one job, only what that job needs, and bound by their own privacy terms: Stripe (card payments, United States and Canada), Resend (sending our emails, United States), Cloudflare (serving and protecting the site, worldwide network), and the Solana infrastructure providers we read the blockchain through (they see our requests, not your account). Anceta itself runs on our own server in Canada. RugUAV adds no other third parties: the extension talks only to anceta.com. Some providers are outside Quebec and Canada; we choose providers with recognised safeguards. We hand over information to authorities only when the law requires it.

6. Your rights

You can ask to see the personal information we hold about you, have it corrected, have it deleted, or withdraw a consent. Most of it you can do yourself on the account page: change your email, remove a sign-in method, sign out everywhere, sign RugUAV out, delete the account. For the rest, write to [email protected]; we answer within 30 days. If you are not satisfied, you may complain to the Commission d'accès à l'information du Québec or, elsewhere in Canada, to the Office of the Privacy Commissioner. Depending on where you live (for example under the EU or UK GDPR, or California's CCPA), you may have further rights; we honour them.

7. How it is protected

Passwords are stored hashed with a slow algorithm and refused when found in known breaches. Email codes and links are single-use and short-lived. Sessions can be revoked at once. Access keys, including RugUAV's, are stored only as hashes; RugUAV's key is tied to one device and can be revoked at any time. Everything travels over HTTPS. Secrets live only on our server. We review dependencies for security advisories and keep an audit trail of sign-ins. If a breach ever creates a serious risk of harm, we tell the people concerned and the Commission d'accès à l'information, as the law requires.

8. Children

Anceta and RugUAV are for adults. They are not intended for anyone under 18, and we don't knowingly collect information from anyone under 18; if that happened, write to us and we delete it.

9. Changes and contact

The date at the top says when this policy last changed; account holders are emailed about changes that matter. The person responsible for personal information at Anceta: the owner of anceta.com, [email protected].