Privacy
Last updated: 6 August 2026
webbysol is a website building tool for Solana creators, projects and communities. We collect as little as possible.
- Account and wallet address. When you sign in, its public address is stored alongside your sites so they follow you between devices. We never request signatures, transactions, or spending approval.
- Site content. With no database configured, everything you build stays in your own browser's local storage and never reaches our servers. If a database is configured, saved sites are stored there so they can be served publicly at your subdomain.
- Uploaded images. Images added through the editor are embedded directly into your site data rather than uploaded to a separate store.
Payments. When you publish a site we store the transaction signature, the amount, and the wallet that paid, which is the same information already public on the Solana blockchain. We use it to prove your site is paid for and to stop one transaction unlocking several sites. We never see or hold your funds, and there is no card or payment method stored anywhere.
Sessions. Signing in sets one httpOnly cookie so the server knows which wallet you are. It is a random token, not a tracker, and it is stored hashed on our side. Signing out deletes it.
Live market data is fetched through our server from DexScreener's public API. That request carries the contract address being looked up, not any information about you.
Analytics. We use Vercel Web Analytics to count page views. It sets no cookies, stores no IP address, and does not follow anyone between sites. We see totals, not people. Because sites published on webbysol are served by the same application, visits to them are counted too. Content blockers stop it, and nothing on the site depends on it running.
Visits to published sites. So that the owner of a site can see how it is doing, we keep a count of views and visitors for each published site, per day. There is no log of individual visits, no cookie, and no stored IP address. To avoid counting the same person twice in a day we keep a one-way hash of the visitor's address and browser, salted with a secret and with the site and the date, which cannot be reversed, cannot be matched across two sites, stops meaning anything at midnight, and is deleted within days. For a browser sending Do Not Track or Global Privacy Control we skip that step entirely: the visit is added to the day's total and nothing whatsoever is derived about the visitor, so they are never counted as a distinct person. Only the site's owner can see its numbers.
We do not sell your data and we do not run advertising, ad networks, or scripts that profile you across the web. You can delete any of your sites at any time from your sites page.