Privacy Policy

Last updated: 2026-11-03Version: 2026-10-9

This Privacy Policy explains what information Degenly handles, why, who receives it, how long we keep it, and what you can do about it. Degenly (degenly.app) is operated by Kervan LLC, a Wyoming limited liability company, 30 N Gould St Ste N, Sheridan, WY 82801, USA ("we", "us", "our"). Kervan LLC is responsible for the information described here.

1. The short version

No name or phone number, and no email in our database. You use Degenly with a Solana wallet or with an Ethereum-compatible wallet (for Ethereum, Base and BNB Chain). We do not ask who you are. If you create a Degenly wallet, you sign in with your email, Google or Apple account; that sign-in goes to our wallet technology provider, Para, not into our database (section 3d). The only other exception is the optional Referral Program: if you earn rewards above a yearly amount, U.S. tax law requires us to collect a tax form (section 2g).
No third-party analytics, no advertising, no tracking cookies. We use no third-party analytics, advertising or tracking tools. We keep only our own short record of which sign-up steps a wallet reached, to see where people get stuck (section 2j).
What our servers store is linked to your public wallet address: when you accepted our Terms, a record of the swaps you make through Degenly (for fees), your watchlist and alerts if you sign in, the addresses you follow in the Wallet Tracker, for a Degenly wallet, when it was last active, and a record of each sanctions check made before you trade (section 2h). We also keep the times of your wallet's last 5 sign-ins, only to warn you about a sign-in from another browser; we do not keep which browser, device or location they came from. We also record which sign-up steps your wallet reached (section 2j) and which of your Solana wallets were signed in together, so that one person counts as one account in the Referral Program (section 2k).
Username and Referral Program: when your wallet signs in, it gets a username, which you can change (section 2i). If you join the optional Referral Program, we also store your referral code, which wallets you referred, your rewards and payments. If you were invited, we store which referral code your wallet is linked to.
Public profile (optional, off unless you turn it on): if you turn it on, anyone can see your username next to your public wallet address on your Degenly wallet profile. You can turn it off at any time (section 2i).
We do not store your IP address or your location in our databases. We read the country of each request at the moment it arrives, only to apply the regional restriction in our Terms (sanctions and our swap providers' terms), and then discard it. Our hosting provider's request logs are described in section 3.
Blockchain transactions are public and permanent. Anything you do on-chain can be seen by anyone, and nobody, including us, can delete it.

2. Information we store on our servers

Our database stores only the following. Each item is linked to a public wallet address, not to a name or email. If you use both a Solana wallet and an Ethereum-compatible wallet, we keep them as two separate wallets and do not link them to each other. A sign-in session may hold several of your Solana wallets together so that you can switch between them, and we remember which Solana wallets were in the same session (section 2k).

a. Sign-in records

When you sign in, we issue a one-time code (a "nonce") for your wallet address. It expires after 5 minutes and is deleted when it is used or during routine clean-up after it expires.
What: wallet address, the code, when it was issued and when it expires; for Sign-In With Ethereum, also the network you sign in on.
Why: to check that you control the wallet (Sign-In With Solana, or Sign-In With Ethereum for Ethereum, Base and BNB Chain).
Sign-in times: for each wallet, the times of its last 5 sign-ins, only so that Degenly can warn you in your browser when a sign-in came from another browser; we do not keep which browser, device or location a sign-in came from.

b. Terms acceptance

What: wallet address, the version of the Terms and Risk Disclosure you accepted, and the time you accepted them. When you accept, you also confirm your age and that you are not in a Restricted Region; we store the fact of acceptance, not separate answers.
Why: to know that you accepted the current Terms before trading, and to be able to show it if there is a dispute.

c. Swap and fee records

What: for each swap prepared and made through Degenly: wallet address, the network, the tokens swapped (their public token addresses), buy or sell, the U.S. dollar value at quote time, the fee rate and fee amount, the transaction signature or hash, its status, the time, and quote-time detail (amounts, fee, network cost and price impact in U.S. dollars). On Ethereum, Base and BNB Chain we also keep the transaction we prepared for you (router address, amount sent, a fingerprint of the transaction data, deadline, minimum output and fee receiver), so that we can check the transaction you send against it. A prepared order that is never confirmed is deleted during routine clean-up after it expires (section 6).
Why: to check that a signed transaction belongs to the order we prepared, to charge and account for our fee, to work out your 30-day volume for the fee tier, to show your Degenly trade history, PnL and fill reports, and for our accounting and tax records.

c2. Order and order fee records (Solana orders and DCA)

What: for each order or DCA you place through Degenly: wallet address, the order ID Jupiter gives it, the fee rate, the fee amount in SOL, the U.S. dollar value of your deposit at the time, the signature of your fee transfer, whether the fee is paid or still owed, and the time. While you are placing an order, we also briefly keep what we prepared for it: the tokens, the amount, the order type or DCA schedule, the fee, any unpaid fee added to it and a fingerprint of the deposit transaction. That prepared record is deleted when the order is placed, and otherwise during routine clean-up after it expires (it is valid for about two minutes).
Why: to check that the transactions you sign match the order we prepared, to charge and account for our fee, to add an unpaid fee to your next order without charging it twice, and for our accounting and tax records.

d. Watchlist and alerts (only if you sign in)

What: wallet address, your watchlist, your alert rules, and when they were last updated.
Why: to sync your watchlist and alerts between your devices.

d2. Wallet Tracker (only if you sign in and use it)

What: your wallet address, the addresses you choose to follow, the names and emoji you give them, your groups and notification choices, and when you added them.
Why: to show you live public activity of the addresses you follow. The addresses you follow (not your own wallet address and not the names) are sent to our Solana data provider, Helius, so that it tells us about their public transactions.

d3. Degenly wallet activity (only if you create a Degenly wallet)

What: the public Solana address of your Degenly wallet and the time it was last active.
Why: to count how many Degenly wallets are active in the last 30 days, which our wallet provider charges us for and which we use to plan capacity. We do not store your email, Google or Apple account here.

e. Short-lived cache

To limit calls to our data providers, our servers briefly cache public chain data, such as the balances of a wallet address you look up, and the list of your orders that Jupiter returns. These cached entries expire within minutes.

f. Referral Program (only if you join, or if you were invited)

What, if you join: your wallet address, your referral code, your username (section 2i), which can appear on your share cards and be seen by anyone who opens your link, when you accepted the Referral Program Terms and which version, your status (standard or partner), which wallet addresses are linked to your code, and, for each week, the rewards earned and their U.S. dollar value, the payment amount in SOL, the exchange rate used, the transaction signature, the result of the sanctions check, the review status and who decided it.
What, if you were invited: the referral code your wallet is linked to, when it was linked, and for each of your swaps a yes/no flag for whether it counted for the program. We do not tell the person who invited you your wallet address or your trades; they see only totals.
Why: to link invited wallets, calculate and pay rewards, prevent abuse (for example self-referral or wash trading), check payments against sanctions lists, and keep accounting, tax and sanctions records.
Public: reward payments are blockchain transactions from our payment wallet to yours. Anyone can see them on-chain, and they can show that your wallet received a payment from Degenly.

g. Tax forms (only for referral rewards above the yearly threshold, and for partners)

What: the IRS form you give us (Form W-9, W-8BEN or W-8BEN-E). It contains your name, address, country, tax identification number and signature. For partners, we also keep the name, email and country in the signed partner agreement.
Why: U.S. tax law requires us to document whether you are a U.S. or non-U.S. person before we make these payments, to report payments where required, and to withhold tax where required.
Where: these forms are not kept in Degenly's database. They are kept separately, with access limited to the people at Kervan LLC who handle payments and taxes.

h. Screening records (when trading is enabled)

What, for every check: a one-way code (a keyed hash) made from the wallet address instead of the address itself, the network, the date and time, the version of the sanctions list used (its publication date and a fingerprint of the file) and the result: clear, match, or check not possible. The code cannot be turned back into the address, but we can make the same code again from an address we are given, so the record still relates to that wallet.
If a wallet matches, we keep the same record as above and handle the match under our internal sanctions procedure, which may include reporting to the authorities as the law requires.
Why: to be able to show which checks we made and with which list, to meet U.S. sanctions record-keeping and reporting rules, and to answer reasonable requests from our swap routing providers about our screening.

i. Username and public wallet profile

Username: when your wallet first signs in, Degenly gives it an automatic username ("degen" followed by six digits). You can change it in Degenly. We store it with your wallet address. A username you stop using stays recorded with your wallet, so that it is not given to anyone else, except to its rightful owner (see Referral Program Terms, section 8A).
Wallet profile: every Solana wallet has a profile page at degenly.app/w/ followed by its address, which anyone can open. It shows information that is already public on the blockchain: the address, its recent swaps, its balances and its profit and loss. It does not show your username unless you turn on "Show my username on my public profile". This setting is off unless you turn it on. We store only whether it is on or off, separately for each wallet.
If you turn it on: anyone who opens your wallet profile, signed in or not, sees your username next to your wallet address. This links your username to everything that wallet has done or will do on the blockchain, and to anything else that uses the same username, such as your share cards.
If you turn it off: we stop showing your username on your profile from the next time the page is loaded or refreshed; a page that is already open refreshes within about a minute. Our servers do not cache it. You can turn the setting on or off at any time on your own wallet profile while signed in with that wallet.
What we cannot undo: people who saw your username while the setting was on may have taken screenshots, saved the page or noted which wallet is yours. We cannot control or delete those copies, and your wallet's blockchain history stays public. We ask search engines not to list wallet profile pages, but we cannot control whether every search engine or other service follows that request.
Copy Trading leaders: if you are an active Copy Trading leader, signed-in Degenly users can see your username with your wallet, whether this setting is on or off.
Why: to give your wallet a name in Degenly, and to show your username publicly only where you chose to show it. For the public profile we rely on your consent (section 9), which you can withdraw at any time by turning the setting off.

j. Sign-up steps (only for a wallet that is connected or signed in)

What: wallet address, the name of a step and the time. The steps are: whether the Terms window was shown, accepted or closed; whether the Deposit window was opened; whether reading your balance needed a retry; the result of using a referral code; and, if you tried Demo mode before signing in, whether you started the demo, made a demo trade, pressed "Go live" and then signed in (demo_start, demo_first_trade, demo_go_live_click, demo_signed_in). The same step is recorded at most once a day per wallet.
Not recorded: amounts, tokens, demo balances or demo trades, IP address, browser or device.
Why: to see where people stop between connecting a wallet and their first trade, and to fix those steps. We look only at totals.

k. Account links (Solana wallets used together)

What: each Solana wallet address that was signed in together with another of your Solana wallets in one sign-in session, the address that identifies that group of wallets, and when the wallet was first seen in it. Ethereum-compatible wallets are not linked.
Why: so that one person counts as one account in the Referral Program: you cannot use the referral code of one of your own wallets, and an account can be invited only once (Referral Program Terms, sections 4 and 9). We do not use these links for anything else, and we do not show them to anyone.

We do not store: your name, email, phone number, IP address, location, device identifiers, browser fingerprint or user agent in our database. The only personal details we hold outside the database are the tax forms and partner agreements described in section 2g. Your Degenly wallet sign-in details are held by Para (section 3d), not by us.

3. Information processed when you visit, but not stored by us

a. Your location for the sanctions check. For every request, Cloudflare, our hosting provider, tells our server which country (and, for some countries, which region) the request comes from, based on your network address. Our server uses this only to check whether the request comes from a country or region where Degenly is not offered because of sanctions or our swap providers' terms (Terms of Use, section 4), and so whether to show Degenly or the "not available in your region" page. Our code does not save or log this location, and we do not use it for anything else, such as analytics, advertising or tailoring content.

b. Your IP address for abuse limits. For the live price feed, our server uses your IP address, held only in memory, while you are connected and for about one minute after you disconnect, to limit how many connections and requests one network can open. It is not written to our database.

c. Hosting provider logs. Degenly runs on Cloudflare. Cloudflare processes every request (including your IP address and request details) to deliver the site and to protect it against attacks, under its own privacy policy (https://www.cloudflare.com/privacypolicy/). In addition, we use Cloudflare's logging tool for our application, which records technical details of each request to our servers, such as the time, the address requested (which can include a public wallet address you looked up), the response status, and network information that Cloudflare adds to the request. We use these logs only to find and fix errors and attacks. Cloudflare deletes them automatically after at most 7 days.

d. Degenly wallet sign-in (only if you create or use a Degenly wallet). The Degenly wallet is provided with technology from Para (Capsule Labs, Inc., United States). When you create or sign in to it, you give your email address, or sign in with Google or Apple, in a Para window. Para receives that sign-in information, the information it needs to verify you (such as one-time codes, passkey data and device and network information), and keeps its part of your wallet key. Para uses this to create and protect your wallet and to sign transactions you request, under its own privacy policy (https://www.getpara.com/privacy-policy) and our agreement with it. Para does not give us your email address for any other purpose, and we do not store it. If you sign in with Google or Apple, that company also learns that you signed in to Degenly through Para, under its own privacy policy.

e. Bot checks. On sign-in and on some wallet actions, we use Cloudflare Turnstile to tell people from automated traffic. Turnstile processes signals such as your IP address, browser and TLS information in your browser and on Cloudflare's servers, under Cloudflare's Turnstile privacy addendum (https://www.cloudflare.com/turnstile-privacy-policy/). We receive only a pass or fail result.

4. Information stored in your browser

Cookies. Degenly uses only these cookies:

Session cookie (__Host-degenly_session): set when you sign in with your wallet. It contains your wallet address and its issue and expiry times, signed by our server. It is HttpOnly (page scripts cannot read it), is sent only over encrypted connections, and expires after 7 days or when you sign out.
Ethereum session cookie (__Host-degenly_session_evm): set when you sign in with an Ethereum-compatible wallet. It works like the session cookie above, for that wallet, and is kept separate from it.
Orders cookie (__Host-dg_trig): set when you sign in to orders on Solana. It holds, in encrypted form, your wallet address and the access and refresh tokens Jupiter issues for that wallet, which let Degenly list, edit and cancel your orders for you. These tokens cannot move funds or create orders on their own. We keep no copy on our servers. The cookie is HttpOnly (page scripts cannot read it), is sent only over encrypted connections and only to Degenly, and expires after at most 12 hours.
Preview cookie (dg_preview): used only on our private, invite-only preview site before public launch. It lets invited testers in and expires after 14 days. It is not used on degenly.app.

These cookies are strictly necessary for the features you ask for. We use no analytics, advertising or tracking cookies, so there is nothing to opt out of.

Local storage. Degenly saves your settings in your browser's storage, on your device: the name of the wallet app you last used, your trade and swap settings, Fast mode settings and limits, filter presets, chart settings, your watchlist and alerts, your saved withdrawal addresses, and whether you dismissed the safety banner. If you use a Degenly wallet, Para's software also keeps data in your browser that it needs for your wallet and your session; it stays on your device until you sign out, end the session or clear your browser's site data. For Ethereum, Base and BNB Chain it also keeps the name of the Ethereum-compatible wallet app you last used, your network filter, and the hash of a transaction you sent until Degenly has checked it. It also keeps the times of this browser's own sign-ins, so that it can tell them apart from sign-ins in another browser, and the times of any sign-in notice you dismissed, so that it is not shown again. Your current session's transaction activity is kept in session storage and is cleared when you close the tab. This information stays on your device unless you sign in and sync your watchlist and alerts (section 2d). You can delete it at any time by clearing your browser's site data.

Demo mode. If you use Demo mode, your demo balance, demo positions and demo trade history are kept only in your browser's storage (degenly.demo), together with whether you have hidden or shown the demo button (degenly.demoShow.v1). They are never sent to our servers. The demo record is deleted when it has not been used for 7 days or when you finish signing in after a demo, and it is replaced by a new one when you reset it. If you sign in after trying the demo, your browser sends only the step names listed in section 2j, with your wallet address.

Referral code from a link. If you open a referral link, the referral code and the time you opened it are kept in your browser's storage (degenly.ref) for 7 days, so that the invite still works if you sign in later. It is not a cookie and is sent only to Degenly, when your wallet is linked to the code. It is deleted after 7 days, when the link is made, when you remove the code, or when the code is not valid.

Browser notifications. If you turn on browser notifications for alerts, your browser shows them locally. We do not use a push service and do not receive a notification address.

5. Who receives information

We do not sell your information, and we do not share it for advertising. We share only what is needed to run Degenly:

Jupiter (swap routing and execution on Solana, orders and DCA, token and price data): when you ask for a quote or make a swap on Solana, our server sends Jupiter your public wallet address, the tokens and the amount, and then your signed transaction. When you sign in to orders, or place, list, edit or cancel an order or DCA, our server sends Jupiter your public wallet address, your signed sign-in message, the order details and your signed deposit or withdrawal transaction. Jupiter keeps your orders and their history. Jupiter handles this under its own terms and privacy policy.
KyberSwap (swap routing on Ethereum, Base and BNB Chain; its operators are Lumen Forge Technology Ltd., Seychelles, and KyberDAO Foundation, Cayman Islands): when you ask for a quote or prepare a swap on these networks, our server sends KyberSwap your public wallet address, the tokens and the amount. Your wallet, not our server, sends the signed transaction to the network. KyberSwap handles this under its own terms.
Helius (Solana RPC and data provider): our server sends your public wallet address to read your balances and to simulate your Solana transaction before you sign, and sends your signed order fee transfer to the Solana network. If you use the Wallet Tracker, the addresses you follow are sent to Helius so that it reports their public transactions to us.
QuickNode (RPC provider for Ethereum, Base and BNB Chain): our server sends your public wallet address to read your token approvals, to simulate your transaction before you sign, and to read the result of a transaction you sent.
honeypot.is (token checks on Ethereum, Base and BNB Chain): our server sends only the token's address and network; we do not send your personal data to honeypot.is.
Blockchain networks: a transaction you sign is sent to the public network it belongs to (Solana, Ethereum, Base or BNB Chain), where it is visible to everyone, permanently.
CoinGecko (market data and charts): we do not send your personal data to CoinGecko; our servers request market data from CoinGecko without any information that identifies you.
Cloudflare (hosting, database, security): stores and processes the information described in sections 2 and 3 on our behalf.
Para (Capsule Labs, Inc.) (Degenly wallet technology): receives your Degenly wallet sign-in information and keeps its part of your wallet key, as described in section 3d.
Google or Apple: only if you choose to sign in to a Degenly wallet with them (section 3d).
Sanctions screening: we check the public addresses of wallets that receive referral rewards, and of wallets that trade before a swap, an order or a wallet transfer is prepared, against the U.S. sanctions list, which we download from the U.S. Treasury and keep ourselves; no data is sent to anyone for this. If we start sending wallet addresses to an outside screening provider, we will name it in this policy before we do.
U.S. Office of Foreign Assets Control (OFAC): if a wallet matches the sanctions list and we refuse a transaction for it, U.S. sanctions rules may require us to report the refused transaction to OFAC, including the wallet address and the details listed in section 2h.
People who invited you: see only the number of wallets they referred and their reward totals, never your wallet address or your trades.
Our payment wallet signers: reward payments are approved by people at Kervan LLC in a multi-signature wallet; they see the payment list (wallet addresses and amounts).
Tax authorities: where U.S. tax law requires it, we report reward payments to the U.S. Internal Revenue Service, which may share information with the tax authority of your country under tax treaties.
Authorities and legal requirements: we may disclose information if the law requires it, to respond to a valid legal request, to comply with sanctions, or to protect our rights, our users or the public.
Business transfer: if Degenly is reorganised or sold, the information may pass to the new operator, who must respect this policy.

Wallet apps you connect, and sites we link to (such as Solscan or DexScreener), are run by others under their own privacy policies.

6. How long we keep information

Sign-in codes: single use; they expire after 5 minutes and are deleted when used or during routine clean-up after they expire.
Prepared orders: on Solana, expire after about two minutes; on Ethereum, Base and BNB Chain, kept until about 24 hours after the quote's deadline, because a transaction you sent may take time to confirm. Deleted when executed or during routine clean-up after they expire.
Session cookie: 7 days, or until you sign out.
Terms acceptance records: for as long as you use Degenly, and after that for as long as we may need them to establish or defend legal claims.
Swap, order and fee records: for as long as we need them for the fee tier, your trade history, unpaid order fees, and our accounting and tax obligations. Tax law can require us to keep accounting records for several years.
Referral records, reward payments and sanctions check results: 10 years after the payment or the last reward, because U.S. sanctions rules require records of transactions to be kept for at least 10 years.
Screening records (section 2h): 10 years after the check, because U.S. sanctions rules require records of transactions to be kept for at least 10 years and claims under those rules can be brought for up to 10 years. They are then deleted.
Tax forms and partner agreements: 10 years after the last payment to you.
Watchlist and alerts: until you ask us to delete them.
Wallet Tracker list: until you remove the addresses or ask us to delete them.
Username and public profile setting: for as long as the wallet uses Degenly, or until you ask us to delete them. A username you stop using stays recorded with your wallet, so that it is not given to anyone else, except to its rightful owner (see Referral Program Terms, section 8A).
Degenly wallet activity record: for as long as the wallet is used, and deleted on request. Para keeps its own records under its privacy policy; to delete your Degenly wallet, first withdraw or export your funds.
Sign-up step records (section 2j): 90 days after the step, then deleted.
Account links (section 2k): until 2 years after the last sign-in of any wallet in the group, then deleted, or earlier if you ask us to delete them. If a wallet in the group has joined the Referral Program, was invited, or has earned or received a Reward, we keep the links of that group for as long as we keep the referral records (10 years, see above), because they show why an invite or a Reward was accepted or refused.
Application logs: at most 7 days.
Short-lived cache: minutes.

When information is no longer needed for these purposes, we delete it or keep it only in a form that no longer relates to a wallet.

7. Your rights and choices

You can use Degenly's market pages without connecting a wallet or signing in.
You can delete everything Degenly keeps in your browser by clearing your browser's site data.
You can turn off "Show my username on my public profile" at any time; this withdraws your consent for the public profile (section 2i).
You can ask us to access, correct or delete the information we hold about your wallet address, or to give you a copy of it. Depending on where you live, you may also have the right to object to or restrict certain uses, and to complain to your data protection authority.
How to ask: email support@kervandeveloper.com from any address, include the wallet address, and tell us what you want. To protect you, we may ask you to prove that you control the wallet, for example by signing a message with it. We reply within 30 days.
Limits: we cannot delete or change anything on the blockchain. We may keep swap, fee, Terms, referral (including account links, section 2k), payment, tax and screening records where we must for legal, tax or sanctions reasons, or to establish or defend legal claims; we will tell you if this applies to your request. If you leave the Referral Program, your referral link stops working and we stop linking new wallets, but your wallet keeps its username (section 2i) and we keep the reward and payment records for the period in section 6.

8. Security

We keep server-side data to a minimum, use signed session cookies that page scripts cannot read and that are sent only over encrypted connections, never hold private keys, and restrict access to our systems. No system is free of risk, and we cannot promise that our systems will never be breached. Never share your recovery phrase or private key with anyone; we will never ask for it.

9. International processing

Kervan LLC is based in the United States. Cloudflare, Para, Jupiter, KyberSwap, Helius, QuickNode, honeypot.is and CoinGecko may process information in several countries, and KyberSwap's operators are based in the Seychelles and the Cayman Islands. Your information may be processed outside the country where you live.

Why we may use your information (legal bases). Where a data protection law asks us to name a legal basis, such as the GDPR in the European Union, the UK GDPR or similar laws elsewhere, we rely on: (a) performing our agreement with you for sign-in, your username, the Degenly wallet if you create one, preparing and recording your swaps, charging our fee, syncing your watchlist, alerts and Wallet Tracker list, and, if you join the Referral Program, running it and paying your rewards; (b) complying with legal obligations for accounting and tax records, tax forms, and sanctions records and reports; (c) our legitimate interests in protecting Degenly against attacks, limiting abuse (including referral abuse, for which we keep the account links in section 2k), finding where sign-up fails (section 2j), keeping Terms acceptance records, recording which referral code an invited wallet is linked to, and complying with the sanctions laws that apply to us, including the location check in section 3a and wallet screening; and (d) your consent for showing your username on your public wallet profile (section 2i). You can withdraw that consent at any time by turning the setting off; this does not affect what was shown before you did. We do not rely on consent for anything else.

10. Age

Degenly is only for people who are at least 18 years old, or the age of majority where they live, whichever is higher. We do not knowingly process information about anyone younger. If you believe a minor has used Degenly, contact us and we will delete the related records.

11. Changes to this policy

We may update this policy. We will change the "Last updated" date and version at the top. If a change is significant, we will show a notice in Degenly before it applies.

12. Contact

Privacy questions and requests: support@kervandeveloper.com
Legal notices: info@kervangroup.com
Postal address: Kervan LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA