Privacy policy

Last updated 8 October 2026

The short version. refund.fi has no accounts database, no analytics and no tracking cookies. If you sign in with email, Privy holds your email address, not us. What you do in an auction is recorded on a public blockchain, against your wallet address.

1. What is public on the blockchain

refund.fi runs on Robinhood Chain. Every bid, purchase, refund, claim and auto-bid is a transaction that anyone can see, permanently, together with the wallet address that made it. The website shows each address under a generated nickname (such as "pixelbunny"), but the address itself is public and can't be deleted by us or anyone else.

2. Email sign-in (Privy)

If you sign in with email, the sign-in and your embedded wallet are run by Privy. Privy receives your email address and stores it to let you sign in again, and secures the wallet it creates for you. We can see, in Privy's dashboard, which email address belongs to which wallet address. We use that only to run refund.fi and help you if something goes wrong. We don't sell it, share it for marketing, or email you unless you ask us to.

3. What stays in your browser

refund.fi keeps a few things in your browser's local storage. They never leave your device:

that you confirmed you're 18 or over;
whether you signed in with email, so you stay signed in;
your sound setting, and which auctions have already warned you that they're ending;
a cache of auction data, so pages load faster;
if you turn on one-click bidding with a wallet, the bidding key it uses. That key can only place bids, within the limits you set. Clearing your browser's site data removes all of these.

We don't set any cookies of our own. Privy may use its own storage to keep you signed in.

4. Services that see your connection

Loading refund.fi means your browser talks to these services directly. Each sees your IP address and basic browser details, under its own privacy policy:

Vercel, which hosts the website;
Cloudflare, which runs the live auction feed;
Alchemy, dRPC and Robinhood Chain's public servers, which read the blockchain and send your transactions, and so also see your wallet address;
Privy, if you sign in with email, and WalletConnect, if you connect a mobile wallet;
Google Fonts, jsDelivr, esm.sh and CoinGecko, which serve the fonts, code libraries and token logos.

These services may keep short-lived logs, such as which pages were requested and when, to run and protect their systems. We use the logs we can see only to keep refund.fi working.

5. Sharing a win

A share card is drawn in your browser. Nothing is sent anywhere until you choose to share it, save it or post it.

6. Children

refund.fi is only for people aged 18 or over. If we learn that someone under 18 has signed in with email, we'll delete what we can of their sign-in details.

7. Your choices and rights

You can play with a browser or mobile wallet instead of email, so that no email is involved.
You can ask us to delete your email sign-in. Your wallet and anything it did on the blockchain stay public, because no one can remove them.
Depending on where you live, you may have the right to see, correct or delete the personal data we hold, and to complain to a data protection regulator.

8. Changes

If we change what we collect, for example by adding analytics, we'll update this page and the date at the top first.

9. Contact

For privacy questions or requests, message us on X at @refundfi.