Last updated October 28, 2026
We keep this simple and store as little as possible.
Wallet addresses you paste are only remembered in your own browser (local storage). Holdings are read from the public Solana blockchain.
We store only:
We ask X only for permission to read your basic profile. We use it once at sign-in to get the details above, then throw the X access token away. We can't post, like, follow or read your messages.
We never connect to your wallet, never ask you to sign anything, and never see private keys or seed phrases.
When you sign in, a single secure sign-in cookie keeps you signed in for up to 30 days. Signing out deletes it.
The Rafflors team can see which X account claimed which wallet, to handle disputes. We don't sell or share your data.
Remove any wallet from your profile at any time (this releases the claim), or sign out. To have your profile deleted, contact the Rafflors team in the Rafflors Discord or on X at @rafffle_dao.
The site runs on Cloudflare. Images load from the Orbis image service, IPFS and X (profile pictures).