Privacy Policy

DexScanner is a token safety scanner. We collect the minimum needed to provide the service, never sell your data, and don't track you across the web. This page explains what we do collect, why, and what choices you have.

Account information. When you sign up via Clerk (our authentication provider), we receive your email address and an opaque user ID. We do not receive your password.

Scan activity. Token contract addresses you scan, the chain you selected, and the scan results we returned. This is stored against your account so we can render your scan history and watchlist.

Payment metadata. When you upgrade to Pro via Helio, we receive a transaction reference and your plan tier. We do not receive your wallet's private key, seed phrase, or full wallet history. Payment processing is handled by Helio under their own privacy policy.

Technical data. Standard request metadata (IP address, user agent, timestamps) used for rate limiting, abuse prevention, and debugging. IPs are not linked to your account in our analytics.

What we do not collect. We do not connect to your wallet, request signatures, request seed phrases, or hold custody of any funds. Token scanning is read-only over public on-chain data and third-party security APIs.

• To run scans and show you results, history, and watchlist.
• To enforce free-tier quotas and Pro entitlements.
• To deliver transactional emails through our service providers (sign-in verification via Clerk, payment receipts via Helio). We do not send marketing email without explicit opt-in.
• To investigate abuse, fraud, or security incidents.
• To improve the product (aggregate, non-identifying usage patterns).

We use the following third parties to run DexScanner. Each processes data under their own terms and privacy policy:

• Clerk — authentication and session management.
• Google Cloud Firestore — primary database for account, scan history, and watchlist data.
• Vercel — application hosting and edge delivery.
• Helio — crypto payment processing for Pro upgrades.
• Anthropic — AI verdict generation. Token data sent for verdicts is non-personal (contract addresses, market metrics, security signals).
• Public on-chain APIs — DEXScreener, GoPlus Labs, Etherscan family, GeckoTerminal. We send the contract address you're scanning; no personal data is sent.

We use only the cookies needed to keep you signed in (Clerk session cookies). We do not use third-party advertising trackers or cross-site pixels. We do not sell or share your data with advertisers.

Scan history and watchlist data is retained for as long as your account is active. To delete your account or request data removal, email dexscanner.app@gmail.com and we'll process the request within 30 days, except for records we're required to keep for legal or financial compliance (e.g., payment records).

Anonymous scan-cache entries (token data without user identifiers) may be retained longer to serve other users scanning the same token.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email dexscanner.app@gmail.com.

You can also remove your sign-in credentials at any time through the account profile in the app (Clerk-managed). Email us if you need scan history or watchlist data deleted as well.

We use industry-standard practices: HTTPS everywhere, encrypted data at rest in Firestore, scoped service-account credentials, and webhook signature verification. No system is perfectly secure; if you believe you've found a vulnerability, see security.txt.

DexScanner is not intended for children under 13 (or under 16 in the EEA/UK). We do not knowingly collect data from anyone in those age groups. If you believe a child has signed up, contact us and we'll remove the account.

Our service providers operate globally and may process data outside your country of residence. By using DexScanner, you consent to this transfer.

We may update this policy as the product evolves. Material changes will be communicated by updating the "Last updated" date above and, where appropriate, notifying you in the app or by email. Continued use after a change means you accept the updated policy.

Questions or requests: dexscanner.app@gmail.com.