Privacy

Last updated July 19, 2026.

The short version

sol.new is non-custodial. Your wallet keys live on your device (passkey-protected by your operating system) and are never sent to our servers. We can't move your funds, and we can't see your private key.

What stays on your device

  • Your wallet's private key, generated locally and protected by a passkey (Face ID, Touch ID, Windows Hello, or a hardware security key).
  • Your selected network (live / test) and theme preference, stored in your browser.

What we store

  • Public on-chain activity. When you launch a token or NFT through sol.new, we record the public mint address, the wallet that signed for it, the metadata you supplied (name, symbol, description, image), and a timestamp. This powers the public "what's new" feed and your portfolio. Everything we store here is already public on the Solana blockchain.
  • Standard server logs. Like most websites, our hosting provider records request metadata (IP address, user agent, timestamp) for short periods to defend against abuse and to debug outages.
  • Aggregate analytics. We use Vercel Analytics, which records page views and performance metrics without cookies and without tracking individuals across sites. If a Google Analytics ID is configured for the deployment you're visiting, page views are also reported there in aggregate.
  • Optional mailing list. If you join the sol.new mailing list, we store the email address you provide (and optional first name) with our email provider (Resend) so we can send product updates and launch highlights. You can unsubscribe or change preferences at sol.new/unsubscribe.
  • Optional email ↔ wallet link. If you request a magic link while a passkey wallet is connected, we store your email with the public wallet address (and optional WebAuthn credential id) so the link can open that wallet on a device that has the passkey. The private key never leaves your device; the link only names which public address to open and still requires Face ID / fingerprint.

What we don't collect

  • Names, emails, phone numbers, or government IDs — unless you voluntarily submit an email for the mailing list.
  • Private keys, seed phrases, passkey credentials, or any signing material.
  • Browsing activity outside sol.new.

Third parties

sol.new uses public Solana RPC endpoints to read and submit transactions, and uses content-delivery and analytics providers (Vercel, optionally Google Analytics) listed above. Email for the optional mailing list is handled by Resend. Each of these sees the request metadata necessary to do its job.

Your choices

  • Clearing your browser's site data for sol.new removes local preferences. To delete a wallet, remove its passkey from your device's passkey manager.
  • Public on-chain records (token mints, transactions) are part of Solana itself and cannot be erased by us.
  • Mailing list: use /unsubscribe to leave or adjust topics (product updates, launch highlights).
  • For questions or requests, email gm@metasal.xyz.

Changes

If this policy changes in a meaningful way, we'll update the date at the top and note what changed.