Privacy & Cookies

1. What is stored about you

The website is hosted and run by Cloudflare (Workers for the application, D1 for the database, and a Durable Object for realtime chat delivery). Depending on which features you use, the service stores these categories:

• Your profile — your wallet address (which is public on-chain anyway) and the username you choose.
• Sign-in data — short-lived login challenges and a session record so you stay signed in.
• Your chat messages — the text you post, when you posted it, replies and edit times, plus pinned messages.
• Your poll votes — which option your wallet voted for in each community poll (one vote per wallet).
• Moderation records — mute/ban restrictions and a moderation log kept by the creator.
• Security counters — rate-limit entries that stop spam; they contain no message content.

Purpose: operating sign-in, chat, moderation and polls. There is no advertising or analytics database.

2. Cookies and browser storage

This site sets exactly one cookie of its own: cathole_session. It is HttpOnly, Secure, SameSite=Strict, keeps you signed in, and your browser discards it after 12 hours (it is also deleted immediately when you log out). There are no analytics or advertising cookies.

If you use "remember this browser", this site also stores a device credential in your browser's own IndexedDB so you can sign in again without signing a new message; it stays on your device and can be removed by forgetting the browser / logging out.

Third-party storage is separate. When you connect a wallet, Reown AppKit / WalletConnect may set cookies or storage of their own under their own policies — Cathole does not control those. Sites you open through outbound links (X, Blockscout) likewise have their own cookies.

3. Where the service runs

The application, the database and realtime chat are all provided by Cloudflare (Workers, D1, Durable Objects). Cloudflare processes the data above to run the service. Other external services actually used: Reown AppKit / WalletConnect for wallet connections; a public Robinhood Chain RPC endpoint so the server can check your public token balance for the holder requirement; outbound links to X and the Blockscout explorer that open only when you click them. No analytics, tracking pixels or ad networks are used by this site.

4. Third-party wallet software

Reown AppKit and WalletConnect connect your wallet to the site. Your wallet provider and WalletConnect process that connection under their own privacy policies. Cathole receives only your public address and the signatures you approve.

5. The blockchain is permanent

Wallet addresses and transactions on Robinhood Chain are public and permanent. Neither Cathole nor anyone else can delete them. Anything you do on-chain is outside this website's control.

6. Retention and deletion

Session lifetime is not the same as deletion. Your sign-in cookie expires after 12 hours and is deleted at logout, but the underlying session record and everything else listed above stay in the database until something removes them: there is no automatic deletion schedule. What is established: you can edit or delete your own chat messages, change your username, and revoke remembered login; the creator can remove content through moderation. Data already recorded on the blockchain cannot be deleted by anyone.

7. Contact

For privacy questions or requests relating to your personal data, email support@cathole.fun.