A little clarity.
More control.

Start with what you choose to do

This policy applies to CapyNest’s swap tools and beginner’s guide. The site operator is responsible for the interface and can be reached using the privacy email below. You can read the guide without connecting a wallet. There is no registration form asking for your name, email, or bank-card details.

If you decide to connect a wallet, CapyNest learns its public address and connection details. Public does not mean anonymous: someone may connect an address to your identity. Your recovery phrase and private keys stay with your wallet. Never send them with a privacy request.

What happens when you check a swap

To show balances and prepare a quote, the app uses your public wallet address, the tokens you choose, the amount, slippage setting, fees, and minimum received. Simulation and confirmation checks also use transaction information and status. A simulation reads real mainnet data but does not complete a swap. Live execution uses your wallet’s approval flow and shares the signed transaction with the network.

Jupiter supplies exchange routes. A configured Solana RPC provider, such as Helius or the public Solana service, supplies balances and transaction checks. Token searches reach DexScreener through our server; GeckoTerminal provides the trending list. Your search text or token address is passed to the search service. If our server cannot connect because of a network or TLS failure, your browser can retry DexScreener itself; DexScreener then sees your IP address and browser headers too. Token-image hosts can also receive connection details when remote artwork loads. These service requests still happen if you decline analytics.

A small memory in your browser

The browser remembers your selected wallet provider and up to five recently selected tokens, including search terms, token details, and selection times. It also keeps a swap archive with public addresses, amounts, tokens, times, outcomes, and transaction signatures. That archive is capped at 50 entries per wallet and 100 total. A separate recovery journal saves operation details and quote envelopes to help check interrupted swaps before trying again.

Those local records do not expire after a set number of days; they remain until their limits replace them or you clear the site’s data. Pending operations stay in the recovery journal. Check unresolved transactions before clearing it. Disconnecting a wallet removes the remembered wallet-provider choice, but it does not erase the transaction records.

The app may use a cookie called swap-client for security and API request limits. When used, it lasts up to 24 hours and cannot be read by page JavaScript. On Vercel, request-IP checks may provide this protection instead. CapyNest also remembers your analytics decision in local storage for 180 days. If browser storage is blocked, your privacy choice applies to the current tab and you may be asked again later.

A choice you can safely decline

Optional visit analytics helps show which parts of CapyNest and the beginner’s guide people use. It stays off until you choose Accept analytics or enable it in preferences. Vercel Web Analytics can then receive page visits, referrers, visit times, approximate location, and browser, device, and operating-system details. Our filter strips URL queries and fragments, accepts only known public pages, and sends no wallet or swap custom events.

This analytics service does not set analytics cookies. Vercel uses a temporary hash derived from a request and discards its visitor session after 24 hours; that does not mean every aggregate report disappears after one day. Choose Reject optional to continue without it. You can change the decision using Cookie settings on both the swap and learning pages. Withdrawing consent stops future events but cannot erase statistics already received. No advertising pixels are included in the app.

What leaves your device

The hosting service receives the IP address, request headers, requested resources, and diagnostic information needed to serve and secure pages. The routing, market-data, and blockchain services receive the details their features require. External links, including Solscan links, open independent services with their own policies.

If confirmed-swap notifications are configured, CapyNest sends the operator’s Telegram chat a receipt containing the app name, originating page URL, public wallet, token addresses, amounts, minimum received, and transaction signature. This supports operating the swap service and is separate from visit analytics. The delivery cache prevents repeated successful alerts for 24 hours; messages may remain in Telegram after that period.

Confirmed Solana transactions are public and persist independently of CapyNest. Clearing a browser, disconnecting a wallet, or requesting deletion cannot remove them from the chain. Providers may operate in countries other than yours and apply their own processing and retention rules.

Why information is used and how long it stays

Wallet, quote, and transaction information is used to provide the actions you request. Security identifiers help prevent abuse. Where applicable law requires a legal basis, service performance and legitimate interests in protecting the interface may apply to those purposes. Your permission is the basis for the optional analytics offered here.

Token-search responses have a 30-second reuse window in a bounded server-memory cache, although expired entries may remain until replaced or the server restarts. Request-limit counters use temporary windows. Other retention periods depend on hosting logs, analytics settings, and operator Telegram messages, rather than the local browser limits. We use authenticated API access and transaction checks to protect operations; no service can promise perfect security.

Your next step, whenever you need it

Use Manage cookie preferences to review analytics permission. Browser site-data controls can clear local history and the saved decision. If you use all three apps on one origin, they share wallet and swap records but have separate brand-specific analytics decisions. Separate domains keep separate local records.

Depending on where you live, you may be entitled to request access to information, a correction, deletion, a portable copy, restricted processing, or to object to certain uses. You can also contact the relevant privacy regulator. Email the operator below to ask about these rights. Requests may require reasonable identity verification, and public blockchain records cannot be deleted by the operator. We show the last revision above and will renew the analytics choice when its consent version changes.