The app push notification clauses (items, purpose, retention, and the Expo, APNs and FCM processors and transfers) take effect on 2026-10-28.
Arena Technologies Inc. ("주식회사 아레나테크놀로지스", the "Company") operates memepad (the web app at memepad.lol and the mobile app, the "Service"). This Privacy Policy explains how we process personal information under the Personal Information Protection Act of Korea and other applicable laws.
The Service is a self-custodial application for creating and trading memecoins on the Solana blockchain. The Company does not hold or have access to your wallet private keys or funds.
We process personal information for the following purposes and will notify you in advance, and ask for consent where required, if they change.
memepad does not use third-party advertising trackers and does not sell personal information.
You provide this information directly when signing up, signing in, or using features, or it is generated automatically while you use the Service.
We destroy personal information without delay once its purpose is achieved. Retention periods by item:
We entrust the following processing to provide the Service, and our contracts require processors to handle personal information securely.
| Processor | Task | Data |
|---|---|---|
| Privy Inc. | Sign-in and embedded wallet | Email, social account identifier, public wallet address, IP address |
| Supabase Inc. | Database, authentication (X connection), file storage (coin and profile images) | Wallet address, profile, X connection, posts and call-outs, web push subscription, IP address for rate limiting, news article reports |
| Vercel Inc. | Website and API hosting | IP address, request logs |
| PostHog, Inc. | Website and app usage analytics (visits, screen views, wallet connections, coin creations, first trades and community posts by acquisition channel) | Pages and screens viewed (addresses masked), acquisition channel (website), usage events, browser and operating system information, random identifier |
| Functional Software, Inc. (Sentry) | Error and crash diagnostics for the website, app and servers | Error messages and where they occurred, browser, device and app version (wallet addresses, transaction signatures, emails and account identifiers are masked before sending) |
| Railway | Blockchain transaction ingestion server | Public on-chain transaction data (including wallet addresses) |
| Helius | Solana network access (RPC) and on-chain transaction ingestion | Public wallet address, signed transactions, IP address |
| Jupiter | Token swap quotes and transaction building (web) | Public wallet address, trade amount, IP address |
| Alchemy Insights, Inc. | Multichain wallet: Ethereum-family network access (RPC), token balances and history | Public wallet address, signed transactions (relayed through our servers; your IP address is not passed on) |
| Blockstream Corporation | Multichain wallet: Bitcoin network access and transaction broadcast | Public wallet address, signed transactions (relayed through our servers; your IP address is not passed on) |
| Secret Key Labs (Xverse) | Multichain wallet: classifying Bitcoin UTXOs that carry inscriptions or runes | Public wallet address (relayed through our servers; your IP address is not passed on) |
| Relay (relay.link) | Cross-network transfers: quotes, order creation and status checks | Sending Ethereum-family address, receiving Solana address, tokens and amounts, order identifier (relayed through our servers; your IP address is not passed on) |
| Mayan Finance (mayan.finance) | Cross-network transfers: quotes, order creation and status checks | Sending Ethereum-family address, receiving Solana address, tokens and amounts, deposit transaction identifier (relayed through our servers; your IP address is not passed on) |
| Expo (650 Industries, Inc.) | Mobile app update delivery, app push notification relay | IP address, app and device information, app push token, notification content |
| Apple Inc. (APNs) and Google LLC (Firebase Cloud Messaging) | App push notification delivery (iOS and Android) | Device push token, notification content |
| DiceBear | Default avatar generation | Avatar seed (public wallet address or X handle), IP address |
| Notion Labs, Inc. | Receiving and storing partner creator application forms | Partner creator application information (section 3) |
| Web push services (Google, Mozilla, Apple, etc., depending on your browser) | Web push delivery | Push subscription, notification content |
As part of the entrustment in Section 6, personal information is transferred abroad as follows, over the network while you use the Service.
| Recipient (purpose) | Country | Data | When | How | Retention | How to refuse, and effect |
|---|---|---|---|---|---|---|
| Privy Inc. (sign-in, wallet) | United States | Email, social account identifier, public wallet address, IP address | On sign-in and wallet creation | Network transfer | Until you withdraw or the contract ends | Not transferred if you do not sign in, but account features are unavailable. |
| Vercel Inc. (hosting) | United States | IP address, request logs | When accessing the website | Network transfer | Until the processor's log retention ends or the contract ends | Cannot be refused other than by not accessing the website. |
| PostHog, Inc. (usage analytics) | United States | Pages and screens viewed (addresses masked), acquisition channel (website), usage events, browser and operating system information, random identifier | When using the website or app | Network transfer | 1 year from collection | On the website you can refuse by using an ad blocker or blocking browser storage; this does not affect your use of the Service. In the app, data is collected only under a random identifier that is not linked to your account or device. Turning off 'Share app usage stats' in the app menu stops sending and deletes that identifier from your device; deleting the app also deletes it. Refusing does not affect your use of the Service. |
| Functional Software, Inc. (Sentry, error diagnostics) | United States | Error messages and where they occurred, browser, device and app version | When an error occurs | Network transfer | Until the processor's retention period ends or the contract ends | Cannot be refused, but it is not linked to your account, and wallet addresses, transaction signatures and emails are masked before sending. |
| Railway (ingestion server) | United States | Public on-chain transaction data (including wallet addresses) | When transactions occur | Network transfer | Until the contract ends | This is public on-chain data; if refused, your trades may not appear in the Service. |
| Helius (Solana RPC) | United States | Public wallet address, signed transactions, IP address | On balance lookups and transaction sending | Network transfer | Until the processor's log retention ends or the contract ends | If refused, balances and trading are unavailable. |
| Jupiter (swap quotes) | Outside Korea | Public wallet address, trade amount, IP address | When swapping on the web | Network transfer | Until the processor's log retention ends | If refused, web swaps are unavailable. |
| Alchemy Insights, Inc. (Ethereum-family RPC) | United States | Public wallet address, signed transactions | When using the multichain wallet | Network transfer (via our servers) | Until the processor's log retention ends or the contract ends | If refused, Ethereum-family wallet features are unavailable. |
| Blockstream Corporation (Bitcoin access and broadcast) | Outside Korea | Public wallet address, signed transactions | When using the multichain wallet | Network transfer (via our servers) | Until the processor's log retention ends or the contract ends | If refused, Bitcoin wallet features are unavailable. |
| Secret Key Labs (Xverse, inscription/rune classification) | Outside Korea | Public wallet address | On Bitcoin balance reads and sends | Network transfer (via our servers) | Until the processor's log retention ends | If refused, Bitcoin sends are unavailable (we never send without classification). |
| Relay (cross-network transfers) | Outside Korea | Sending Ethereum-family address, receiving Solana address, tokens and amounts, order identifier | On transfer quotes and orders | Network transfer (via our servers) | Until the processor's log retention ends or the contract ends | If refused, cross-network transfers are unavailable (sending and receiving are not affected). |
| Mayan Finance (cross-network transfers) | Outside Korea | Sending Ethereum-family address, receiving Solana address, tokens and amounts, deposit transaction identifier | On transfer quotes and orders | Network transfer (via our servers) | Until the processor's log retention ends or the contract ends | If refused, cross-network transfers are unavailable (sending and receiving are not affected). |
| Expo (app updates) | United States | IP address, app and device information | When the app starts | Network transfer | Until the processor's log retention ends | If refused, app updates cannot be received. |
| Expo (app push relay) | United States | App push token, notification content | When a notification is sent | Network transfer | Until the processor's retention ends or the processing agreement ends | Not transferred if you do not allow notifications in the app or turn off 'Push notifications' in the app menu. Refusing does not affect your use of the Service. |
| Apple Inc. (APNs) and Google LLC (FCM) (app push delivery) | United States | Device push token, notification content | When a notification is sent | Network transfer | Per the provider's policy | Not transferred if you do not allow or turn off notifications in the app. |
| DiceBear (default avatars) | Outside Korea | Public wallet address or X handle, IP address | When an avatar is displayed | Network transfer | Until the processor's log retention ends | Upload your own profile image to stop using it for your avatar. |
| Notion Labs, Inc. (partner application form) | United States | Partner creator application information (section 3) | When you submit an application | Network transfer | 1 year after the pilot (or program) ends, or until the processing contract ends | Nothing is transferred if you do not apply. If you refuse, you cannot apply to the partner program, but your use of the Service is not affected. |
| Web push services (delivery) | United States and others (browser vendor's location) | Push subscription, notification content | When a notification is sent | Network transfer | Per the provider's policy | Not transferred if you do not allow or turn off notifications. |
Information recorded on-chain, such as wallet addresses, transaction history, and the metadata of coins you create, is public and permanent by the nature of blockchains such as Solana, Ethereum-family networks and Bitcoin and cannot be reversed or deleted. A coin's image and metadata cannot be changed or removed after launch. We do not provide this information to third parties, but anyone can read it on the blockchain.
You may request access to, correction, deletion, or suspension of processing of your personal information at any time, through account deletion in the app settings or by emailing contact@memepad.lol. We act without delay. You may also exercise these rights through a legal representative or an authorized agent. On-chain data cannot be deleted (Section 8).
The following privacy officer oversees personal information processing and handles related complaints and remedies.
To seek remedies for an infringement of your personal information, you may apply for dispute mediation or consultation with the following organizations (Korea):
The Service does not set a minimum age. Memecoins are highly volatile, high-risk assets.
If this Policy changes, we will post the revised version here with its effective date.
If you are in the European Economic Area (EEA) or the United Kingdom, the EU General Data Protection Regulation (GDPR) or the UK GDPR also applies to how we process your personal data. The controller is the Company named in Section 1.