Privacy
Last updated 18 October 2026
This site
This site has no forms, no tracking cookies and no analytics. Its fonts load from Google Fonts, so Google sees your IP address when the page loads.
The app
The app at app.gravifi.xyz stores nothing about you until you sign in with your wallet. Once you do, it keeps:
your wallet address, and the wallet whose invite link you used (if any); the trades you make through the app (what, which basket, the amount in dollars, when) and the details of any that failed; the value of what your wallet holds, recorded hourly, to draw your history; your points; the problem reports you send; and, if you create a basket, its name, description and image.
To keep buying closed in comprehensively sanctioned countries, the app reads the country Cloudflare attaches to each request. It doesn't store it.
Your browser remembers which wallet you connected and a few display choices. The app loads live prices from Jupiter, which sees your IP address.
The testnet
The testnet at testnet.gravifi.xyz keeps the same data, plus the IP address of each test USDC claim, used only to limit abuse of the faucet.
On the testnet you can log in with email, Google or Apple. That login is run by Privy, which keeps your email address (or the Google or Apple account you used) and the wallet it creates for you, under its own privacy policy. We can see your email address in Privy's dashboard; we don't copy it into our database and we don't email you.
Why
To run the app: show your positions, history and points, credit invites, keep the faucet fair, fix what breaks, and keep buying closed where sanctions require it. We don't sell or share your data, and we don't use it for advertising.
The blockchain is public
Every trade is a Solana transaction: public and permanent, visible to anyone with your wallet address. We can delete what we store; nobody can delete what's on the blockchain.
Where it's kept
In a database on Cloudflare, which hosts the site and the app, and for testnet logins with Privy. Both may process data outside the EU under the European Commission's standard contractual clauses.
How long
As long as you use the app, or until you ask us to delete it. Problem reports and failed-trade details are deleted after twelve months; faucet IP addresses after thirty days.
Your rights
You can ask to see, correct, export or delete your data at any time by writing to team@gravifi.xyz. You can also complain to your data protection authority; in Italy, the Garante per la protezione dei dati personali.
Who is responsible
Tullio, the founder of GraviFi, reachable at team@gravifi.xyz. This page will name the company once it exists.