Privacy
TILT keeps a wallet and a count of reads. It does not keep a name, an email, or a profile of who you are.
Who this covers
This notice is for the TILT site, including justtilt.app when that name points here. TILT is operated by Mukesh Chandra Kushwaha, NIE Y5341983V, Travessera de Dalt, 08024, Barcelona, Spain. You can reach us at privacy@justtilt.app.
The same notice applies wherever you open it. If you are in the EEA, the UK, Switzerland, or California, the extra rights at the end apply to you. We do not run a thinner notice for other countries.
Last updated 30 October 2026.
What we store
When you connect a wallet, we store the public address. The seed never leaves the wallet and we never ask for it.
We store a session for that address, how many free reads are left, how many paid reads are left, and the date a 30-read or 50-read pack ends. A 5-read pack and a 10-read pack have no end date. A paid pack record is kept so the same payment cannot be counted twice. That record is the transaction signature, the token (USDC or SKR), and the amount.
The topic you type is sent with the read. We keep one mark so the same wallet is not charged twice for the same note: the topic, and the time of the note it was shown. That mark is replaced the next time that wallet opens the same topic. It is not a history of every search. We also keep a count of how many reads were spent on a topic. That count is not tied to a wallet, and it is deleted with the topic. The last topic and the note you were shown stay in this browser until you clear the site data.
Our hosting and RPC providers also see your IP address and browser type in temporary server logs to deliver the site and stop abuse.
What a read sends on
A live read asks X for the loud public posts on that topic, then asks xAI, using Grok, to score them. The topic goes to X and to xAI for that request. We do not send your wallet address with it. We keep the text, the time, the handle, and the likes and reposts of those posts for up to 7 days, so the next read of the same topic fetches only what is new. That list is not tied to a wallet. Posts older than 7 days are deleted.
A payment is checked on Solana through Helius. The address and the transaction are already public on the chain. A SKR price, when you pay in SKR, is read from Jupiter, or from DexScreener if Jupiter has no price. That request does not include your wallet.
Where it lives
The site is hosted on Vercel. The wallet record is in a Postgres database at Neon. The session token for this browser is kept in local storage under the name tilt-board-v1, not in a cookie. A server session lasts 30 days. Disconnecting clears it in this browser only. The server copy keeps working until those 30 days end.
Vercel, Neon, xAI, X, and Helius process data in the United States and other regions outside your home country. When data moves outside the EEA, the UK, or Switzerland, we rely on the standard contractual clauses or the EU-US Data Privacy Framework that those providers offer.
We do not sell this data. We do not share it for cross-context behavioral advertising. We do not run analytics cookies.
The footer links to Plainly Crypto, a separate guide published by the same operator. Opening it does not send your wallet or your reads. That site has its own notice.
How long
The sign-in challenge expires in minutes. A price quote expires in minutes. The session expires after 30 days. Loud posts kept for a topic are deleted after 7 days.
The wallet row stays while the account holds reads. Inactive wallet rows with zero reads and no payments are deleted after 12 months. Payment rows are kept for 6 years to show that a payment was real and to meet Spanish tax and accounting rules, or until you ask us to delete them where the law allows. Server logs with IP addresses expire automatically according to our providers' schedules, typically within 30 days.
A Solana transaction cannot be deleted. The chain is public. Deleting our row does not remove the transfer.
Why we are allowed to
The wallet, the reads, and the payment record are kept to perform the service you asked for, including the free reads and a pack you pay for. The signature check and server logs are kept to stop a payment from being claimed twice and to protect the site from abuse. That is our legitimate interest. Payment records are also kept to meet legal tax and accounting obligations. Connecting a wallet is not consent for advertising, and we do not ask for that.
Your rights
You can ask for a machine-readable copy of the wallet row we hold, ask us to correct it, or ask us to delete it. You can object to the signature check or ask us to restrict it. We will not treat you differently for using these rights. If you are in the EEA, the UK, or Switzerland, you can complain to your local data protection authority. In Spain that authority is the Agencia Española de Protección de Datos. None of that removes the transaction from Solana.
To use any of these rights, email privacy@justtilt.app with your public wallet address. We may ask you to sign a free off-chain message with that wallet to prove it is yours. We will reply within 30 days.
Disconnecting removes the session in this browser. It does not end the server session. Clearing site data for TILT removes the local note as well. The database copy remains until it expires or you ask for it to be deleted.
Children
TILT is not for children. We do not knowingly keep a record for anyone under 16.