DeFade
DeFade
Last updated: June 25, 2026
DeFade ("we", "us", "our") is operated by DeFade Ltd, a company registered in England and Wales (Company No. 17136143). This policy explains how we collect, use, and protect information when you use DeFade via our website at defade.org, iOS app, Android app, Chrome extension, Telegram bot, or public REST API.
DeFade Ltd is the data controller for personal data collected through these services. We are subject to the UK GDPR and the Data Protection Act 2018.
Account Information: When you register for a DeFade account, we collect your email address and a hashed password. This is used to authenticate you and manage your subscription.
Payment Information: Subscription payments are processed either by Stripe (card) or directly on the Solana blockchain (USDC). DeFade Ltd does not store your card details. For USDC payments, your public Solana wallet address is received as part of the on-chain transaction record. This is publicly visible blockchain data and is associated with your account for the purpose of confirming payment. We retain records of your subscription tier, billing status, and transaction references for accounting and dispute resolution purposes.
API Keys: If you generate a DeFade API key, the key and associated usage metadata (call counts, endpoints accessed, timestamps) are stored server-side linked to your account.
Usage Logs: We log API requests and scan activity including IP addresses, endpoints called, timestamps, and country (derived from Cloudflare's cf-ipcountry header). These logs are used for rate limiting, abuse detection, security, and resolving billing disputes.
Blockchain Data: When you scan a token or connect a wallet, we query publicly available Solana blockchain data through third-party APIs (Helius, DexScreener, Jupiter, Birdeye, Moralis). This data is publicly accessible on the blockchain and is not private information.
Wallet Addresses: If you connect your wallet, your public wallet address is used to display your holdings and facilitate swaps. We do not store your wallet address on our servers.
Analytics: We use Cloudflare Web Analytics to collect anonymous, aggregated usage data (page views, country-level location, referrer). This does not use cookies and does not track individual users.
Email Communications: If you subscribe to our newsletter or transactional emails, your email address is stored with our email provider (Resend). You may unsubscribe at any time.
When you connect a wallet (Phantom, Solflare, or Backpack), the connection is established directly between your browser and the wallet extension or app. All swap transactions are executed through Jupiter Aggregator — we do not custody, hold, or have access to your funds at any point. Transaction signing occurs entirely within your wallet.
DeFade uses the following third-party services to provide its functionality:
Each third-party service has its own privacy policy. We encourage you to review them.
Account data (email, hashed password, subscription status, API keys, and usage logs) is stored in a Postgres database hosted on Railway in the EU. Token analysis results are temporarily cached for performance (typically 5 to 15 minutes) and contain only publicly available blockchain data.
We use industry-standard security measures including HTTPS encryption, secure HTTP headers, Cloudflare WAF, CORS restrictions, and input validation on all API endpoints. Passwords are never stored in plaintext.
We retain account data for as long as your account is active. Usage logs are retained for up to 12 months. If you delete your account, your personal data is removed within 30 days except where retention is required by law (e.g. financial records for tax purposes).
Where we process personal data, we do so on the following lawful bases:
Under UK GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us at info@defade.org. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
DeFade is not intended for use by anyone under the age of 18. We do not knowingly collect information from minors.
We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of DeFade after changes constitutes acceptance of the updated policy.
For privacy-related questions, contact us at:
DeFade Ltd · Company No. 17136143 · Registered in England & Wales
Email: info@defade.org
Website: defade.org