Privacy · updated September 26, 2026
What we collect, and why.
PumpPill is a token research site, two Telegram bots and an MCP server for AI assistants. This page lists what each one stores, who else receives it, and how to have it deleted.
On the website
- Google Analytics and Google Tag Manager load on every page. They set Google's own cookies and send Google the pages you view and a few events, such as tapping a checkout button.
- Our own visit counter stores a random session id, the page type, the site that referred you and any campaign tags in the link. It does not store your IP address. If you connect a wallet, the wallet address is stored with that visit.
- Your browser keeps some settings for you in local storage: your chain choice, filters, sound and notification toggles, your chat session, and your Premium sign-in.
- Signing in with a Solana wallet sets one secure cookie for 30 days and stores your public wallet address, a hashed IP address and your browser's user-agent string.
Premium, Wallet Watch and payments
- Payments are handled by Stripe. We never see or store card numbers. We keep the Stripe customer and subscription ids, your email address, the plan, the amount and the date.
- Your Premium sign-in is your Stripe customer id, kept in your browser. Email sign-in sends you a link that works for 30 minutes.
- If you link Telegram to Premium, we store your Telegram user id and username so alerts can reach you.
- Wallet Watch stores the wallets you choose to follow and any note you add.
Emails
- If you subscribe to the Robinhood Report, Pulse or the newsletter, or ask us to watch a token, we store your email address, what you subscribed to, and an unsubscribe link. Emails are sent through Resend.
- Every email has an unsubscribe link, and unsubscribing takes effect immediately.
The Telegram bots
- The trading bot (@PumpPill_Trade_Bot) stores your Telegram user id, your wallet addresses, your orders, your trades and the fees charged.
- Wallets the bot creates or imports for you are custodial: we store the private key encrypted with a key kept only on our server, and it is only decrypted to sign a trade you ask for. You can see your key with /export to keep your own backup. We never ask you for it.
- The scan bot and the community chat store your Telegram id, display name and simple counts of what you asked. The chat assistant remembers your preferences and recent topics so it can answer in context.
The chat assistant
- Messages you send to Ask PumpPill are stored with your session (up to 8,000 characters each) and are sent to AI model providers to generate the answer: Nous Research, and Anthropic. Voice messages are transcribed by OpenAI. Please don't send anything you would not want stored.
The MCP server (AI assistants)
- Each call records the time, the tool used, whether it succeeded, how long it took, the name your AI client reports, and whether a member key was used. We do not store your IP address or what you asked, and never store the member key itself.
Server logs
- Our web server logs each request with the visitor's IP address and browser, for security and to stop abuse. These logs are kept for about two weeks. Traffic passes through Cloudflare, which processes it under its own policy.
Who else receives data
- Google (analytics), Stripe (payments), Resend (email), Telegram (bot messages), Cloudflare (network), and Nous Research, Anthropic and OpenAI (the chat assistant). When we look up a token we send its contract address to market-data and block-explorer services; that contains nothing about you.
- We do not sell personal data.
Keeping and deleting it
- We keep account, subscription and bot records while you use PumpPill. On request we delete what we hold about you, except records we must keep, such as payment records, and anything already written to a public blockchain, which no one can delete.
- To see or delete your data, email [email protected] from the address you used, or message us from the same Telegram account.
Questions: [email protected]. See also the terms of use.