privacy

what caravela stores

• account: username, email, and your password as a one-way scrypt hash (nobody can read the password itself).
• profile: bio, profile picture and banner you upload. these are public.
• wallet: the public address you link, if you link one. your profile shows it shortened; friends can see the full address so they can send you SOL.
• portfolio: by default your profile shows your linked wallet's holdings and the positions you traded on caravela. turn it off any time in settings > portfolio on your profile.
• social links: the x, telegram, discord and website you add in settings are shown on your profile.
• activity: your watchlist, friends, chat and direct messages, and swaps made on caravela (transaction id, wallet, coin, SOL amount, which are public on solana anyway).
• session: a login cookie. it's only for keeping you logged in. no ads, no tracking cookies.
• this browser: display settings, recent lookups and whether you've seen the risk notice, kept in your browser's local storage.

what the site operator can see

the operator's admin tools show each member's username, email, full linked wallet address, join date, bio, social links, profile picture, and activity counts (messages, swaps, volume, friends, watchlist, callouts). they're used to run and moderate the site. they do not show your password or the text of your direct messages.

what caravela never has

your seed phrase, private keys, funds, or a readable copy of your password.

third parties

the swap box is jupiter's; the charts are dexscreener's. when you use them, your browser talks to those services directly under their own privacy terms. token images and links come from token creators and load from their servers.

deleting your data

ask the site operator to delete your account and its data.