Last updated 30 October 2026

Privacy

No accounts, no cookies, no trackers. Here's what leaves your device and what doesn't.

Camera and photos

The camera feed and the recognition model run in your browser. Nothing is uploaded while you scan.

When you launch

The photo you picked and the coin's details (name, ticker, description and links) are uploaded to IPFS through Pinata, so pump.fun can show them. That data is public and permanent.

Your wallet

scanpad sees your public wallet address so it can show your balance and build the transaction. It never sees your private key or seed phrase, and it will never ask for them.

Our server

It passes requests on to Pinata, PumpPortal and a Solana RPC provider, and keeps nothing. Our host, Vercel, keeps standard request logs such as IP address and time, which we also use briefly to limit uploads per visitor. We don't sell or share any of it.

Stored in your browser

Your past launches and the last wallet you used are saved in your browser's local storage, on your device only. Clearing your browser's site data removes them.

Files loaded from elsewhere

Fonts come from Google Fonts. The recognition model, QR reader and Solana library come from jsDelivr, and the model's weights from Google's TensorFlow Hub. These providers see your IP address when your browser fetches their files.