Hounds Privacy Policy

This policy explains what personal data Hounds ("Hounds", "we") collects when you use hounds.fun, the Hounds desktop client and the Telegram bot @Houndsbot (the "Service"), why we collect it, how long we keep it, and what you can do about it.

Hounds is not offered to people in mainland China or in sanctioned countries and regions (see the Terms of Service).

1. What we collect

Account data

Your email address, and a one-way hash of your password (we cannot see your password).
If you sign in with Google: the email address and Google account identifier that Google gives us (see Section 4).
If you use Telegram: your Telegram user ID, username, display name and language setting.
If you sign in with X or link your X account: your X public profile (see Section 5).
Account settings: language, notification preferences, and trading settings (slippage, anti-MEV, auto-trading and copy-trading rules).
Security data: whether 2FA is on, a hash of your trading PIN, and the dates of security changes.

Wallet and transaction data

The wallet addresses linked to your account, and whether each wallet was generated by Hounds or imported.
The private keys of your wallets, stored encrypted in a separate signing service and used only to sign the transactions you request or set up.
Orders, trades, positions, transfers, cross-chain transfers, withdrawals and withdrawal addresses, and referral rebates.
Transactions on public blockchains are visible to everyone and cannot be deleted by anyone, including us.

Device and connection data

Your IP address. We use it to block restricted regions and to limit login attempts and abuse. We record it with security events (sign-ins, sign-outs, email codes, security alerts) so that you and we can spot unauthorized access. Our servers also keep standard access logs that include IP address, browser type and the page requested.
A description of the device or browser (user agent) for each signed-in session, shown to you in the Security Center's device list.
A session cookie that keeps you signed in. We do not use advertising cookies.
Usage statistics. When you open a page, the website records the page type (for example "signals" or "wallet") together with random identifiers. These statistics do not include your IP address, the full URL, wallet details or your browser string. When you are signed in, they are linked to a one-way code derived from your account number. If your browser sends "Do Not Track", we do not record them.
If you open our Telegram bot through a link that carries a campaign tag, we record that tag with your account, so we can count which channels bring new users. We report this only as totals.

Communications

The emails we send you (verification codes, password reset, security alerts) and their delivery status.
Messages you send to our support channel.
In-app notifications about your trades and account.

We do not ask for government ID, and we do not collect payment card data.

2. Why we use it

Purpose	Data used
Create and secure your account, and sign you in	account data, security data, IP, device
Execute your trades, transfers and withdrawals	wallet and transaction data, settings
Keep withdrawals safe (24-hour pause after security changes, waiting period for new addresses, limits)	security data, transaction data
Send security alerts and let you freeze your account from them	email, security events, IP, device
Block access from mainland China and other restricted places	IP address
Prevent fraud and abuse (bulk accounts, referral abuse, attacks)	IP, device, account and transaction data
Send verification codes, security alerts and trade notifications	email, Telegram ID, notifications
Pay referral rebates	transaction data, referral links
Sign you in with X; recognize X accounts with a public audience (KOLs); show linked X profiles next to their wallets and trades; internal research	X public profile, account, wallet and transaction data
Understand which pages and channels are used, and fix problems	usage statistics, campaign tags, access logs
Comply with the law and respond to lawful requests	any of the above, as required

Where data protection law requires a legal basis, we rely on: performing our contract with you (running your account and trades); our legitimate interests (security, fraud prevention, and understanding and improving the Service); compliance with legal obligations; and your consent where we ask for it.

We do not sell your personal data. We do not use it for third-party advertising.

3. Who we share it with

Service providers who process data for us: our hosting provider, our email delivery provider (Resend), and the blockchain RPC and data providers that receive the transactions we submit.
Google, X and Telegram, only if you choose to sign in, link an account or use the bot through them.
Swap aggregators, DEX routers and bridges (for example Jupiter, KyberSwap and Relay), which receive your wallet address and the transaction details needed to quote and execute the trades and cross-chain transfers you request.
Your referrer, who sees only the total number of people they invited and their own rebate amounts per chain. Your referrer does not see your email, username, wallets or trades.
Everyone using the Service, if you sign in with X or link your X account: your X public profile and its link to the wallets in your Hounds account and their trades are shown publicly (see Section 5).
Authorities, when the law or a valid legal request requires it.
A buyer or successor, if Hounds is merged or sold. This policy will continue to apply.

4. Google sign-in

If you sign in with Google, we receive from Google your email address, your name as shown on your Google account, and a Google account identifier. We do not receive your Google password. We use this information only to create and sign in to your Hounds account, to contact you about your account, and to keep your account secure. We do not use it for advertising, we do not sell it, and we do not share it with anyone except as described in Section 3. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove Hounds' access at any time in your Google account settings; your Hounds account and its data remain until you ask us to delete them.

5. X (Twitter) sign-in and linking

If you sign in with X or link your X account, X asks you to approve two read-only permissions, users.read and tweet.read, which X requires for sign-in. We use them once, to read your own profile, and then ask X to revoke the access; we do not keep an X access token. (If that revoke request fails, the token still expires after the short lifetime X sets.) We do not read your posts or anyone else's, we do not request access to your direct messages, and we do not post on your behalf.

What we receive: your X account ID, username, display name, profile picture, bio, website and location as shown on your profile, verification status, follower and following counts, post count and account creation date. All of this is public on your X profile. We do not receive your X password. We record it once, when you sign in or link your X account.

What we use it for:

signing you in and showing your X identity in your Hounds account;
recognizing X accounts with a public audience (KOLs) and building our own database of such accounts;
product features, such as showing which X accounts bought or sold a token in signals, market data and rankings;
internal research.

Public display: your X account is linked to your Hounds account and to the wallets in it. This link is shown publicly in the Service: anyone using Hounds may see your X username and profile next to the wallets in your account and the trades they make, for example in signals, trade lists and rankings. Linking X is optional, and we show you this notice before you confirm. If you do not want your X identity shown next to your wallets, do not sign in with X or link it.

We do not sell this information, we do not use it for third-party advertising, and we do not share it except as described in Section 3. Our use of information received from the X API follows X's developer terms.

Unlinking: you can unlink your X account at any time in your account settings. If X is your only way to sign in, add another sign-in method first. After you unlink, we remove the link between your X account and your Hounds account and wallets, and stop showing your X identity next to your wallets and trades. We cannot withdraw what others have already seen or copied, and trades on public blockchains stay public. We may keep the public profile information we had already collected in our research database of public X accounts, without any link to your Hounds account or wallets. If you delete your X account or make it protected, we will remove its profile information from that database as X's developer terms require; we check for this once a week. Because we do not keep an X access token, Hounds does not stay connected to your X account; to remove the link, unlink in your Hounds account settings.

6. How long we keep it

We keep personal data for as long as we need it to provide the Service, to keep records of funds movements, to prevent fraud and abuse, and to meet legal obligations. After that, we delete it or make it anonymous, in line with this policy. Usage statistics do not contain your IP address or direct identifiers. Data recorded on public blockchains is permanent and outside anyone's control.

7. Your choices and rights

See and change your data: most of it is in your account (Security Center, Wallet Center, settings).
Sign out other devices in the Security Center, or freeze your account from a security alert email.
Revoke Hounds' access to Google in your Google account settings. Unlink X in your Hounds account settings (we do not keep an X access token, so there is nothing to revoke on X's side; see Section 5).
Turn off notifications in settings. Security emails cannot be turned off.
Export your private keys from the Wallet Center (requires your trading PIN and a 2FA code; in the Telegram bot, a 2FA code only if 2FA is on).
Ask for a copy, correction or deletion of your data through our official support channel. We will first confirm that you control the account, for example with your current 2FA code entered on our website, a confirmation in our Telegram bot, or a confirmation link sent to the email address already on your account. If you tell us your email may be compromised, we will not use email to confirm. We never ask you to read a code to anyone. We may keep records we must keep by law or to protect against fraud, and nobody can delete what is already on a blockchain.
Depending on where you live, you may have further rights, including the right to complain to your data protection authority.

8. Security

Passwords are stored as one-way hashes. Private keys are stored encrypted in a signing service that is separate from the website. Sessions expire after 30 days, or after 7 days without activity. 2FA protects sign-in if you turn it on, and is required for withdrawals and key export on the website, and security alerts let you freeze your account if something changes without you. No system is perfectly secure. If a breach affects you, we will tell you as the law requires.

9. International transfers

Our servers and service providers may be located outside the country where you live, so your data may be processed in other countries.

10. Children

The Service is for adults (18+). We do not knowingly collect data from children.

11. Changes

We will post changes to this policy on this page. For material changes, we will notify you on the website or by email before they take effect.

12. Contact

Hounds. Support channel: our official Telegram community, https://t.me/Houndsfun. Please do not post private details in the group. For private help, start a private chat yourself with someone on the group's admin list; official admins never message you first.