PremiumOpen bot

Privacy · updated October 2, 2026

What we collect, and why.

PumpPill is a token research site, two Telegram bots, a browser extension and an MCP server for AI assistants. This page lists what each one stores, who else receives it, and how to have it deleted.

On the website

  • Google Analytics and Google Tag Manager load on every page. They set Google's own cookies and send Google the pages you view and a few events, such as tapping a checkout button.
  • Our own visit counter stores a random session id, the page type, the site that referred you and any campaign tags in the link. It does not store your IP address. If you connect a wallet, the wallet address is stored with that visit.
  • Your browser keeps some settings for you in local storage: your chain choice, filters, sound and notification toggles, your chat session, and your Premium sign-in.
  • Signing in with a Solana wallet sets one secure cookie for 30 days and stores your public wallet address, a hashed IP address and your browser's user-agent string.

Premium, Wallet Watch and payments

  • Payments are handled by Stripe. We never see or store card numbers. We keep the Stripe customer and subscription ids, your email address, the plan, the amount and the date.
  • Your Premium sign-in is your Stripe customer id, kept in your browser. Email sign-in sends you a link that works for 30 minutes.
  • If you link Telegram to Premium, we store your Telegram user id and username so alerts can reach you.
  • Wallet Watch stores the wallets you choose to follow and any note you add.

Emails

  • If you subscribe to the Robinhood Report, Pulse or the newsletter, or ask us to watch a token, we store your email address, what you subscribed to, and an unsubscribe link. Emails are sent through Resend.
  • Every email has an unsubscribe link, and unsubscribing takes effect immediately.

The Telegram bots

  • The trading bot (@PumpPill_Trade_Bot) stores your Telegram user id, your wallet addresses, your orders, your trades and the fees charged.
  • Wallets the bot creates or imports for you are custodial: we store the private key encrypted with a key kept only on our server, and it is only decrypted to sign a trade you ask for. You can see your key with /export to keep your own backup. We never ask you for it.
  • The scan bot and the community chat store your Telegram id, display name and simple counts of what you asked. The chat assistant remembers your preferences and recent topics so it can answer in context.

The chat assistant

  • Messages you send to Ask PumpPill are stored with your session (up to 8,000 characters each) and are sent to AI model providers to generate the answer: Nous Research, and Anthropic. Voice messages are transcribed by OpenAI. Please don't send anything you would not want stored.

The browser extension (PumpPill Lens)

  • PumpPill Lens only runs on the sites it supports: X, Axiom, GMGN, pump.fun, DexScreener, FOMO, Pons and Definitive, plus pumppill.org/extension for sign-in. It has no access to any other site.
  • On those sites it finds token contract addresses on the page and sends us those addresses with the site's name (such as "x" or "axiom"), so we can look them up. It also sends the same addresses to DexScreener and GeckoTerminal for prices. It does not send the page's full web address.
  • The first time it runs, it makes a random install code on your device. Each request carries that code and the extension version. We only store a scrambled (hashed) form of the code, with the version, whether you are signed in to Premium, and how many lookups it made.
  • If you sign the extension in to Premium, each request also carries your Premium sign-in, and the extension sends the X account names of the people whose posts show a contract, so we can show their record. Without a Premium sign-in, no account name leaves your browser: warnings on known accounts are checked inside the extension.
  • We record which tokens you open a card for, linked only to the scrambled install code, to learn which tokens people are looking at. We keep that 30 days and never sell it.
  • When you press Scan or Read the first buyers, we log the token, the site, the time and a hashed IP address, to enforce the daily limits.
  • It never reads your wallet, your balances, your messages, your passwords or anything you type, and it never sends us your browsing history. The Buy button only opens our Telegram bot.

The MCP server (AI assistants)

  • Each call records the time, the tool used, whether it succeeded, how long it took, the name your AI client reports, and whether a member key was used. We do not store your IP address or what you asked, and never store the member key itself.

Server logs

  • Our web server logs each request with the visitor's IP address and browser, for security and to stop abuse. These logs are kept for about two weeks. Traffic passes through Cloudflare, which processes it under its own policy.

Who else receives data

  • Google (analytics), Stripe (payments), Resend (email), Telegram (bot messages), Cloudflare (network), and Nous Research, Anthropic and OpenAI (the chat assistant). When we look up a token we send its contract address to market-data and block-explorer services; that contains nothing about you.
  • We do not sell personal data.

Keeping and deleting it

  • We keep account, subscription and bot records while you use PumpPill. On request we delete what we hold about you, except records we must keep, such as payment records, and anything already written to a public blockchain, which no one can delete.
  • To see or delete your data, email [email protected] from the address you used, or message us from the same Telegram account.

Questions: [email protected]. See also the terms of use.