Privacy.

Rush does not operate user accounts. There is no signup, no email, no password. The only identifier the Service ties to a user is the Solana wallet public key they connect. We do not sell data, run third-party analytics, or set advertising cookies.

The Service collects the minimum information required to route transactions and operate the application:

• Wallet public key. Your Solana wallet's public address is sent to our backend when you request a route quote or settlement. Public keys are already published on chain.
• Trade intent metadata. The venue, market, outcome, side, and notional amount you choose are sent so we can compose the right Solana transaction.
• Operational logs. Standard request logs (IP address, user agent, timestamp, response code) are retained briefly for service reliability and abuse prevention.

We do not collect names, emails, phone numbers, government IDs, financial account numbers, or any KYC information. Where a venue (such as Kalshi) requires identity verification, that flow runs directly between you and the venue.

We do not run third-party advertising scripts, attribution pixels, or session-replay tools on Rush surfaces.

The Service stores a small amount of state on your device:

• Open positions. Settled positions, including entry price and the on-chain receipt signature, are saved in your browser's localStorage under the key rush.positions.v1. This data never leaves your device and is cleared when you clear site data.
• Wallet adapter preferences. The Solana wallet-adapter library may store the last wallet you connected so it can reconnect on return visits.

To deliver the Service, your wallet address and trade intent are sent to third parties as part of normal routing:

• Solana RPC providers. For blockchain reads and transaction submission.
• Jupiter Aggregator. For SOL → USDC conversion quotes and routes.
• Destination venues. Polymarket, Kalshi, Limitless, Hyperliquid, Opinion. Each venue is the controller for the data they receive about your order.

Each of these parties operates under their own privacy policy.

All settlement transactions are published to the Solana blockchain. On-chain data is public by design and outside Rush's ability to alter, redact, or delete.

Operational logs are retained for up to ninety (90) days unless required longer to investigate abuse or comply with a legal request. We do not maintain a long-term database of user trade history.

The Service is not directed to children under 18. We do not knowingly collect information from children.

Because we do not operate accounts, there is no profile to export or delete. You can clear local storage at any time from your browser. To inquire about logs that may contain your wallet address or IP, contact us at the address below.

We will update this policy as the Service evolves. Material changes will be reflected by updating the "Last updated" date above.

Privacy inquiries can be sent to privacy@rush.trading.