Privacy notice

Last updated September 24, 2026

The short version

1. Who we are

Fomo Spend is operated by its independent operators (“we”, “us”). This notice covers fomospend.xyz, the web app, the fomo-spend CLI and the MCP server. Contact: @FomoSpendX402 on X.

2. What we don't collect

3. What stays on your device

The web app keeps these in your browser's local storage. They never leave your device unless you move them yourself, and clearing your browser data deletes them:

The CLI and MCP server keep your encrypted key, limits and payment history in ~/.fomo-spend on your own machine. We never receive them.

4. What our servers process

DataWhyHow long
IP address, browser type, page requested, time (standard web server logs)Running and securing the site, stopping abuse, fixing problemsKept in our hosting provider's logs for a limited period
IP address, in memory onlyRate limitingBriefly, in memory; never written to disk
Requests you send to a service through the app (link, method, headers you add, body, and the signed payment)Your browser can't reach most pay-per-use services directly, so our server forwards the request and passes back the answerNot stored. We log only the site's host name and the response status, not the link, query or body.
Wallet addresses you check balances for, and payment data needed to build a paymentReading public blockchain data through our blockchain proxyNot stored by us; see our blockchain data providers below
Error messages from the app (page, error text, browser type)Finding and fixing bugsKept in our hosting provider's logs for a limited period

We use this data only to provide and protect Fomo Spend. Where a legal basis is required, it's our legitimate interest in running a secure, working service, and performing the service you ask for.

5. Who else sees what

WhoWhat they seeWhen
Services you pay (for example Exa, CoinGecko, Nansen)Your request, your payment and your wallet address. They see our server's IP address, not yours.When you pay them
BitrefillThe card and amount you buy, the payment and your wallet addressWhen you buy a gift card
Blockchains (Solana, Base)Every settled payment, publicly and permanently, including sender and recipient addresses and the amountWhen a payment settles
Blockchain data providers (Helius for Solana, Base's public endpoint)Wallet addresses and blockchain queries forwarded by our serverWhen the app checks balances or prepares a payment
Privy (and WalletConnect, if you choose a wallet in Privy's sign-in)Your email or Google account and your embedded wallet, under Privy's privacy policyOnly if you use Privy's sign-in
Your wallet provider (for example Phantom or MetaMask)Whatever their app collects under their own policyWhen you connect it
Google FontsYour IP address and browser details when fonts loadOn page load
Railway (our hosting provider)The server logs described aboveAlways

We don't sell or rent personal data, and we don't share it for advertising. We may disclose information if the law requires it or to protect the safety and security of our users and service.

6. International transfers

Our hosting and providers may process data in the United States and other countries. Where required, they're bound by appropriate safeguards.

7. Your choices and rights

8. Children

Fomo Spend is not for anyone under 18, and we don't knowingly process children's data.

9. Security

We use HTTPS everywhere, never hold keys, forward requests only to public internet addresses, and restrict our relay and blockchain proxy to this site. No system is perfectly secure; please report issues through the docs repository's Security tab.

10. Changes

We'll update this notice when our practices change; the date at the top shows the latest version.

11. Contact

Privacy questions or requests: message @FomoSpendX402 on X.