Privacy Policy

PaperPump is a Chrome extension that simulates trading on Pump.fun. This policy covers both the extension and this website (paper-pump.web.app). We've tried to write it in plain language because we hate legalese as much as you do.

The short version

The extension stores all your trading data locally in chrome.storage.local on your own device. It reads the token address from the URL and fetches public price data from DexScreener and Pump.fun's public API. Nothing you trade, no wallet address, no browsing history - none of it is sent to our servers.

The extension makes two types of requests to our own infrastructure: (1) a single read-only request to check Early Bird availability when you open the pricing panel, and (2) a one-time device registration request when you first activate a Pro license key. Both expose your IP address to our server the same way any web request does. Neither contains personal data.

What the extension collects

The extension does not collect or transmit:

• Your wallet address or private keys
• Your trade history, P&L, or balances
• Your browsing history outside of Pump.fun token pages
• Any personally identifiable information

The extension does:

• Read the token contract address from the current Pump.fun page URL
• Fetch public token price data from DexScreener and Pump.fun's public API
• Store all your accounts, trades, and settings in chrome.storage.local - only accessible to the extension on your own device
• Contact PaperPump's backend server to check Early Bird spot availability when the pricing panel is opened - this request exposes your IP address to that server
• When activating a Pro license key for the first time on a device, send a one-time registration request to PaperPump's server containing a randomly generated device ID - not your license key or any personal data

Pro license verification

When you purchase Pro, your payment is processed by MoonPay Commerce. After the transaction confirms, a signed license key (JWT) is sent to your email address. You are also redirected to a page on this website that attempts to activate the key automatically if the extension is installed. If the extension is not installed, a copy button is shown instead.

License verification happens entirely offline inside the extension using a hardcoded public key. The extension never sends your license key to our servers to validate it. On first activation, the extension sends a one-time device registration request containing a randomly generated device ID - this is used to enforce the per-device limit and contains no personal data. MoonPay Commerce receives your email address to deliver the key; MoonPay's privacy policy governs that process.

This website

This website is hosted on Firebase Hosting (Google). Firebase may collect standard web server logs (IP address, browser type, pages visited) as part of their infrastructure. We do not use additional analytics, tracking pixels, or third-party ad networks on this site.

Cookies

This website does not use cookies for tracking or advertising. Cloudflare may set a cookie for security and performance purposes as part of their CDN infrastructure.

Third-party services

The following third-party services are involved:

• DexScreener - public price data API (no account, no auth)
• Pump.fun - public token data API (no account, no auth)
• MoonPay Commerce - payment processing for Pro subscriptions (receives your email address)
• Resend - transactional email delivery for license keys
• Cloudflare Workers - PaperPump's backend API (receives your IP address when checking Early Bird availability and when registering a device on first license activation)
• Firebase Hosting - website hosting (Google infrastructure)

Each of these services operates under their own privacy policies.

Children's privacy

PaperPump is not directed at children under 13. We do not knowingly collect personal information from anyone under 13.

Changes to this policy

If we make material changes, we'll update the date at the top of this page. Continued use of the extension or website after changes constitutes acceptance of the updated policy.