# Privacy

Pump Callouts runs entirely in your browser.

- **What it talks to:** pump.fun's own API (`frontend-api-v3.pump.fun`) to look up coins, check callout
  eligibility and post the callouts you write; pump.fun's image CDN and public IPFS gateways to fetch coin
  images; DexScreener's public API for coins pump.fun doesn't know. These are the same calls the pump.fun
  website makes.
- **Authentication:** the extension reads the `auth_token` cookie that pump.fun set when you logged in, and
  sends it only to pump.fun. It never stores, copies or transmits it anywhere else. No private keys are
  read or requested.
- **Trojan:** a page-world hook observes Trojan's own trade API responses inside the trojan.com tab so the
  overlay can react to your buys. Nothing about your trades is sent off the page; a short local history is
  kept in the extension's storage on your machine so the panel can show "you bought…".
- **Local storage only:** settings, drafts, posted-callout history and a diagnostic log live in the browser's
  extension storage. They can be cleared from the popup.
- **Update check:** a few times a day the extension downloads `version.json` from this download site to see
  whether a newer version exists. Unless you turn off "Send anonymous diagnostics" in the toolbar popup, the
  request also carries a short, anonymous report that helps us find and fix problems:
  - the extension version, browser (Chrome, Edge, Brave, Opera or Firefox) and its major version, and the
    operating system and processor type (for example Windows, x86-64);
  - your browser window's width, rounded down to one of a few sizes (1280, 1600, 1920, …);
  - which of the extension's features are switched on;
  - whether you are logged in to pump.fun in this browser (yes or no, nothing about the account);
  - on Trojan's trenches, how many coin cards the extension found and whether its additions fit Trojan's
    layout, and whether a Trojan coin page still shows the coin address where the extension expects it;
  - how many warnings and errors the extension hit since the last report, counted by type (for example
    "pump.fun rate-limited us 3 times").

  It never includes an ID, your wallet or account, your pump.fun username, the coins you look at or trade, or
  the pages you visit. With diagnostics off, the update check sends nothing at all. Like any web request, the
  site's server log records the IP address it came from; logs are deleted after two weeks, and only daily
  totals (no IP addresses) are kept after that.
- **Windows updater (optional):** if you install it, a scheduled task downloads new versions from this site
  into the extension's folder. It sends nothing else.
- **Callers, dev history and coin stats:** the extension reads pump.fun's public callout feed, a coin's public
  list of holders who called it, callers' public callout records, a creator's public list of launched coins,
  and a coin's public record, trade activity, holder statistics, top-trader trades and same-ticker coins. These
  are read-only requests without your login; nothing about you is sent.
- **Trojan trenches button:** clicking the pump.fun button on a coin switches your pump.fun tab to that coin.
  Nothing is sent anywhere.
- **Developer builds only:** builds made locally with `npm run build` can stream the diagnostic log to a dev
  server on `127.0.0.1:7331`. Published releases have this switched off entirely.
- **No analytics services, no tracking, no third-party servers.** The only report is the anonymous one
  described under "Update check", and you can switch it off.