Poppin Social, Inc.
Last updated: Aug 24, 2026
Poppin reads the page you are on to decide whether to show one card. The match request describes the page, not you. Your account, your posts, and your wallet activity are the personal data we actually keep, and this page lists all of it.
To decide whether a page matches an asset, the extension sends our servers a description of the page: its address, title, headline, description tags, and a short excerpt of the visible text. The answer is public catalog data and a live price.
On X, tweets are matched against the asset catalog locally in your browser; tweet text is not sent to our servers.
Your watchlist, price alerts, and notification preferences live in your browser's extension storage, not on our servers.
When you create an account we collect your email address and basic profile details (a display name and an avatar if you set one). Sign-in runs on a third-party identity provider; your password never reaches Poppin.
If you link your X account, we store your X user id and handle, and the authorization token X issues us, used only to read your public profile.
Posts, replies, and votes are public, are attached to the page they were written on, and show your profile name. Do not post information you want to keep private.
If other users follow you on Poppin, they can see the trades you make through the Service: the asset, the direction, and the size, attributed to your profile. Your balances and wallet address are not shown to them.
When you sign up we create a Solana wallet for you. Poppin holds this wallet's private key on your behalf: it is generated on our servers, stored encrypted, and used only to sign the transactions you ask for. It is never sent to your browser, and it is never readable in the clear.
When you buy or sell, we route the trade through public liquidity venues on Solana (currently the Jupiter aggregator) and submit it to the blockchain. We keep records of your balances, orders, and trades; we need them to run the Service and to meet legal obligations. Executed transactions are recorded on public blockchains, which are public and permanent by design.
If you connect an external wallet, we store its public address and the ownership signature you provide. We never ask for, and cannot access, an external wallet's private key.
To comply with sanctions programs (including OFAC) and with issuers' eligibility rules, we determine which country a request comes from. This is a country-level lookup based on your network address, made at the moment of the request; we never ask the browser for your precise location and we do not keep a location history.
On poppin.so we collect the email address you give to the early access list, and we use analytics to understand how the site is used: Vercel Analytics and Speed Insights for aggregate traffic and performance, and Microsoft Clarity for session-level usage, which uses cookies and similar technology. Where the law requires, these run only with your consent.
We share data with the service providers who run parts of the Service for us: hosting, identity, email delivery, analytics, blockchain infrastructure, and the liquidity and issuer partners needed to execute a trade you asked for. We also share data when the law requires it or to protect the Service and its users. We do not sell your personal data.
We keep account, post, and transaction records for as long as your account exists, and longer where financial or legal rules require it. We protect data with industry-standard measures; no system is perfectly secure, so we cannot promise absolute security. What is written to a public blockchain cannot be deleted by anyone, including us.
You can uninstall the extension at any time, which stops all page reading immediately. You can ask us to show, correct, or delete the personal data we hold about you, or to close your account, by writing to info@poppin.so. Depending on where you live you may have additional legal rights, and we honor them.
If this policy changes in a way that matters, we will say so on the site. Questions: info@poppin.so.