Privacy notice

Accounts · last updated 23 Oct 2026

An account lets you keep your feeds and layout across devices. We keep as little as we can.

What we store

• Email, if you sign in with email. Used only to send sign-in codes, and the newsletter if you tick that box.
• Wallet addresses you sign in with or link. Public addresses only. We never ask for a transaction, and we can't move funds.
• Encryption: emails and wallet addresses are encrypted (AES-256-GCM) in our database. Lookups use a keyed hash.
• Sessions: a random token (stored hashed), the browser type (for example "Chrome · macOS"), and created / last-active times, so you can see and sign out your devices.
• Your settings: feed and layout choices you make on the site.
• Sign-in codes are stored only as a hash and deleted once used, after 10 minutes, or after 5 wrong tries. Unused codes stop working after 10 minutes and are purged within a day.
• Newsletter: we record the date you opted in. Desk early-access requests are a separate list.
• Invites: if you joined with an invite, the invite records that an account used it. Deleting your account removes that link.
• Security logs: IP addresses are held up to 15 minutes, only for sign-in rate limits.

Cookies

• wsid: keeps you signed in. 30 days, renewed as you use the site.
• ufi: remembers the device an invite was used on. 1 year.
• ufs: desk access. 30 days.
• No ad or tracking cookies.

Analytics

Counts only: page, device type, referring site, country. A daily-rotating anonymous visitor hash is kept 35 days. No cookies, no IP stored. Do Not Track and GPC are honoured.

Backups

Railway takes weekly backups, kept for 27 days. Deleted data leaves the backups within 27 days.

We don't sell data, and we don't use ad trackers. Emails go out through Resend (our email provider). The service runs on Railway, and Cloudflare provides our CDN and security.

Your rights (GDPR)

• Export: account menu → Settings · devices → Download my data.
• Delete: same page → Delete account. That removes your account, linked wallets, sessions and settings right away.
• Newsletter is opt-in and off by default. Turn it off any time in Settings.
• Questions: privacy@unfolded.io.

Terms

unfolded. is news and data for information only. It is not financial advice. Use the site fairly: no scraping that harms the service, and no abuse of sign-in. We may suspend accounts that do. The service is provided as is.