Privacy

What connecting authorizes

Connecting shares your public wallet address. The site requests a readable, one-use membership message signature and reads token balances through Helius. It does not request transaction signing, spending approvals, token transfers, or your recovery phrase. Check that the signing domain matches the Float address you opened: joinfloat.xyz. The message should name Float and describe community access. Cancel any unexpected transaction request.

This is a limited code review and testing, not an independent security audit or a guarantee. Website, dependency, account, and wallet compromise remain possible. Your public address can reveal onchain activity even though it is not shown on your community profile.

What we store

We store a private hash of your wallet address, display name, supported token symbols and verification slots/times, verification expiry, optional value tier and its expiry, value-badge preference, followed topics, saved-item references, reply notification preferences and in-app notifications, posts, replies, reports, and moderation records.

Raw wallet addresses are temporarily stored in five-minute challenges and deleted after successful verification or cleanup on later verification requests. The signed-in session also keeps the verified public wallet address to recheck holdings. This address is not exposed on profiles or returned by the member API. It is removed on sign-out, replacement verification, or expired-session cleanup on subsequent verification/refresh requests.

Your latest token quantities are saved privately to show your portfolio value. They are returned only to your signed-in account, never in public profiles, discussions or exports. Unrelated token holdings are discarded. Detected holdings are replaced on each successful holdings check.

Photos and bios are visible to members; uploaded photos are resized and stripped of metadata.

Wallet troubleshooting logs record the wallet app name, the completed or failed step, a fixed error category, and a random attempt ID. These diagnostic events exclude wallet addresses, balances, signatures, and the message being signed.

What others see

Member discussions require an active verified session. Other members see your alias, contributions, and your optional value badge. Public visitors see the dashboard layout with no member data. Your full holdings list, followed topics, saved items, and notifications are returned only to your own active session. Administrators can review content, reports, and member records. Members can copy content, so this is not a confidential channel.

Limits of privacy

Wallet hashes are pseudonymous, not anonymous: a known public wallet can be matched to its hash. The RPC provider receives wallet addresses to check holdings. An HttpOnly session cookie lasts up to 24 hours; signing in again invalidates your previous session. Administrators authenticate through an explicitly allowed ChatGPT identity or administrator wallet. Access is checked on the server.

Retention and requests

Contributions and moderation records persist until operator deletion. Removing a contribution hides it from members but retains it for moderation. Contact support for privacy, deletion, or appeal requests. Automatic long-term retention deletion is not yet implemented.

Disclosures

Discussion and market research are not investment advice. Token ownership does not establish expertise, direct equity ownership, or an affiliation with an issuer. Float is independent of Backpack and underlying companies. There are no funded rewards or guaranteed benefits. Legacy research tools retain their separate consent and simulated-data labels.

Holder tiers

Tiers use the estimated USD value of supported tokenized stocks in your verified wallet: Bronze under $100; Silver $100–$999; Gold $1,000–$9,999; Platinum $10,000–$99,999; Diamond $100,000 or more.

Every holding needs a reliable current price. Tiers expire when checks become stale. They do not indicate expertise or total wealth, and do not change posting rights.

Value badges are private by default. Enable Show value badge in Profile to share your tier and its range. Exact balances stay private.