Privacy policy

• Your wallet address. To sign in you sign a message with your wallet (free, no transaction). We check the signature against your address and don’t keep it. To stop a signed message being used twice, we keep a fingerprint of it until it expires. Your address is how the site knows you.
• Your profile. The username, profile picture and banner you add. They are public.
• Pictures you upload. Profile pictures, banners and token art are re-encoded to a fixed size before they are stored, which drops all of a file’s metadata: EXIF, location, camera and software details. The stored picture is public.
• Your 𝕏 account, if you connect it. 𝕏 asks you to allow read-only access (users.read and tweet.read, the least 𝕏 offers). We read your account id and handle once, then revoke the access straight away. We can’t post, read your messages or act for you. We keep the id, the handle and which wallet connected it, and your handle can show on your profile.
• Verified links. When you verify a website or an 𝕏 account, we keep the proof: the post, the domain or the file that held the code. Verified links are public.
• Referrals. Which link you signed up through (or none), and when. Once the contracts are live, that pairing is written on-chain.
• Posts and ratings. After launch, what you post about a token and how you rate it, public with your wallet.
• Usage events. A short list of steps, such as viewing the sign-up page, following a referral link, signing up or connecting 𝕏. Each one keeps the step, the time, a few short details (the page, the campaign tags in the link, the referral code, the website that sent you), your wallet if you are signed in, and a visitor code. The visitor code is a keyed hash of your IP address and browser details (user agent) that changes every day (UTC): it counts visitors within a day, can’t be turned back into your IP and can’t link your visits across days. Your IP address itself is never stored or logged. Where you first came from is also kept with your sign-up.
• Rate limits. To stop floods, we count requests per keyed hash of your IP address for a minute at a time. The counts are deleted after a day.

To sign you in, show your profile, run referrals and the OG badge, keep one 𝕏 account to one wallet, protect the site from abuse, and count how the sign-up is going.

When someone signs up, connects 𝕏 or becomes an OG, the team gets a short message in a private Telegram chat: a shortened wallet address, the username or 𝕏 handle, and how they arrived.

FOBO sets only its own cookies, none of them readable by scripts on the page:

• fobo_session keeps you signed in, for 7 days.
• fobo_ref remembers the referral link you followed, for 30 days.
• fobo_src remembers where you first came from (campaign tags, referral code, the site that sent you), for 30 days.
• fobo_x_oauth holds a connect-𝕏 attempt, for 10 minutes.

Your browser also keeps which wallet you connected (the wallet library) and small display choices. No advertising or cross-site tracking cookies.

Everything you do on Robinhood Chain, such as launches, trades, claims and referral pairings, is public and permanent. Anyone can read it, and FOBO reads and shows it, including the automatic risk signals. Nobody, including us, can change or delete it.

• Cloudflare carries all traffic to the site, so it sees your IP address and requests.
• Our hosting and file storage providers run the servers and hold uploaded pictures.
• Your wallet, WalletConnect and Reown, and Coinbase Wallet if you choose it, when you connect.
• 𝕏 while you connect your account, and when we check a public post you made to verify a link.
• Telegram for the team’s notifications above, and if you open FOBO’s Telegram.
• Robinhood Chain’s RPC providers, which your browser and wallet talk to for prices, balances and transactions.
• The block explorer when you open a link to it.

Each handles data under its own policy.

No ads. No third-party analytics, pixels or trackers. We don’t sell, rent or share your data for marketing. We don’t ask for your name, email, phone number or documents.

Your profile, pictures, 𝕏 link, referrals and posts are kept until you change them or ask us to delete them. Usage events and where you came from have no automatic expiry yet: they are kept while the site runs. Rate-limit counts go after a day, and cookies expire as listed above.

You can change your profile at any time. To have your data deleted, message us from the contact below and prove the wallet is yours when asked. We then delete your profile, pictures, 𝕏 link, verified links, posts, ratings and the usage events tied to your wallet. Your referral link and OG badge go with them.

We can’t delete anything on-chain, including a referral pairing already written there, or what other services keep under their own policies.

FOBO is not for anyone under 18, and we don’t knowingly collect their data.

We may change this policy, and the date at the top will change with it. The rules for using the site are in the terms of use.

Message FOBO on 𝕏 at @fobodotfun or in FOBO’s Telegram. We will never ask for your seed phrase or private key.