Last updated 8 August 2026
Short version: we read public chain data, we keep almost nothing, and we can never touch your funds.
A seed phrase, a private key, or a keystore file. Not for the scan, not for the claim, not ever. If any page anywhere asks you for those things to recover SOL, it is a theft attempt, close the tab.
Scanning needs no connection at all. Claiming does, because only your wallet can sign. A connection tells us your public address and lets us hand your wallet a transaction to show you. That is the whole permission. The signing happens inside your wallet on your device, and we never see the key that does it.
Only the last 500 scans are kept, older ones drop off automatically. We do not build profiles, we do not link scans to a person, and we do not sell or share this data.
The public site sets no tracking cookies. One session cookie exists on the private admin subdomain and only the site owner ever receives it.
The recover button sends you to a third party reclaim tool. Once you leave, their privacy policy applies, not ours. Some outbound links may be referral links, which cost you nothing extra.
Questions about anything here, write to hello@salvagesol.com.