Privacy

Sit Out is operated by Hexleon LLC ("we", "us"), which is responsible for the data described here. This policy is governed by the laws of the State of Washington, USA.

This describes what the Sit Out site actually stores today. We do not sell personal data and we do not run third-party analytics or ad trackers on these pages.

What we store

• Invoices: plan, amount, the Solana Pay reference, timestamps and status. If you choose to give one, an optional contact (email address or @handle, max 120 characters), used only if you need help with that invoice. No emails are sent automatically. No account or password is created.
• Payments: the on-chain transaction that paid an invoice, including the paying wallet address. This is public on the Solana blockchain anyway.
• Access keys: only a SHA-256 hash of your key, with its plan, start and end dates. We cannot recover a lost key from the hash.
• Wallet sign-in (optional): the wallet address you link to your key, plus an audit line each time a wallet is linked or unlinked (time, key id, wallet address).
• Sessions: the sign-in cookie sitout_sub (HttpOnly, Secure, SameSite=Strict, up to 7 days, or until your trial ends). It is a signed token holding a random session id, your key id or trial id, and your wallet address, so it keeps working across server restarts. Signing out ends it at once: we keep the session id on a sign-out list until the cookie would have expired.
• Request logs: time, path, status and a keyed hash of your IP address (not the raw IP), kept for abuse prevention and rate limiting.
• Free trial (if you start one): a salted hash of the wallet address that started the trial (not the address itself), the trial's start and end time, and rate-limit counters (a salted hash of your IP address with the time of each trial start, dropped after 24 hours). This is kept only to enforce one trial per wallet and the daily trial limits. The wallet sign-in audit log also records the wallet address and time when a trial is started or resumed.
• Suggestion box (if you use it): your message and category, the optional contact you choose to give (email address or @handle), a keyed hash of your IP address for spam limits, and, if you are signed in, your key id or wallet. Used only to read and answer suggestions.
• Preferences: if you are signed in, the market you last chose (crypto or stocks), stored with your key id or wallet so the dashboard opens where you left it.
• Pay-per-call (if enabled): the paying wallet address, amount, the transaction signature and the resource requested.

Cookies

Only the sign-in session cookie above. No advertising or analytics cookies. If you paste your key instead of signing in with a wallet, it is kept in that browser tab only (never in a cookie) and forgotten when the tab closes.

Your browser's own storage also keeps two small items on your device, never sent to anyone else: the market you last chose (crypto or stocks), and, while you pay, the open invoice's id and resume code so you can come back to it. Clearing your browser's site data removes both.

We store your language choice and the page you signed up from.

Sharing

We do not sell or rent data. Data is processed on our own server and through the infrastructure that runs the site (a Cloudflare tunnel). Like any network provider, Cloudflare handles basic request data (IP address, page address, time) to deliver the site. No analytics script runs on our pages: they are served so the network cannot insert one, and our content security policy blocks third-party scripts. Payment data is on the public Solana blockchain by nature.

Retention and backups

• Invoices and payment records: kept for 7 years, for tax records.
• Request logs: deleted after 30 days.
• Optional contact: kept until you ask us to delete it.
• Backups: store files are backed up with rotation (hourly copies kept 48 hours, daily copies kept 30 days), so a deleted item can remain in a backup until that copy rotates out.

Your choices

You can use the service without giving a contact and without linking a wallet. To ask for a copy or deletion of your contact or wallet link, write to frank.grok.92@gmail.com. On-chain records cannot be deleted by anyone.

Version: 2026-10-08b