PaceSeeker Privacy

Your data stays on your device

Overview

PaceSeeker is built with a privacy-first, self-custodial architecture. StealthLynk does not centrally collect, store, or process your personal data. All sensitive information remains on your device.

What StealthLynk Does NOT Collect

• Your Solana private keys or seed phrases
• Your wallet addresses or balances
• Your trading history
• Your CEX API secrets (stored locally, encrypted)
• Your identity documents
• Photos, contacts, or device media

What Is Stored on Your Device Only

All sensitive data is stored locally on your device using Android Keystore or iOS Keychain via Expo SecureStore:

• Session keypairs (encrypted; generated sessions expire after 24 hours, imported and hardware wallet sessions persist until revoked)
• CEX API keys (if you choose to enter them)
• App settings and trading preferences
• Local trade history (CSV exportable by you)

StealthLynk cannot access this data. If you uninstall the App, this data is permanently deleted.

Blockchain Interactions

When you enable LIVE mode, transactions are submitted directly to public Solana RPC nodes. These interactions are pseudonymous but publicly visible on the blockchain, as is true for all Solana transactions. StealthLynk does not operate these RPC nodes and has no special visibility into your on-chain activity.

CEX API Key Handling

If you enter CEX API keys for live trading:

• API keys and secrets are stored exclusively in device secure storage (Android Keystore or iOS Keychain via Expo SecureStore). They are never synced, backed up, or transmitted to StealthLynk.
• The App communicates only with official exchange API endpoints. There is no intermediary proxy or StealthLynk relay server.
• Your API secret is never sent over the network. The App uses HMAC-SHA256 signing locally and transmits only the resulting signature.
• API keys are used only for balance reads and market order placement. The App never initiates withdrawals unless you explicitly grant Withdraw permission for auto-rebalance.
• Keys are immediately deleted from secure storage when you tap Remove in the App.

Server Interactions

The App contacts PaceSeeker infrastructure for two purposes:

• Remote configuration — fetched on startup from a PaceSeeker endpoint. Contains RPC URLs, Jupiter API keys, feature flags, and update checks. The response is verified via Ed25519 signature or SHA-256 hash before use.
• Invite code redemption — when you unlock LIVE mode, the invite code is sent to a lightweight PaceSeeker endpoint to count redemptions. No wallet addresses, trading history, or personal data are transmitted.

Analytics and Telemetry

PaceSeeker does not include third-party analytics, crash reporters, or advertising SDKs. Error logs remain on your device unless you manually share them with StealthLynk for support.

External Services

The App queries the following external services for market data and trade execution:

• Jupiter Aggregator API — for DEX swap quotes and routing
• Jito Block Engine — for bundle submission
• Public CEX APIs — for price feeds (no authentication required)
• Solana RPC endpoints — for on-chain state and transaction submission

These services may log IP addresses and request data according to their own privacy policies. StealthLynk does not control their data practices.

Data Retention and Deletion

StealthLynk does not centrally collect your private keys, wallet addresses, balances, or trading history. Invite code redemption records and remote config access logs are the only server-side data; they contain no personally identifying information. To erase all PaceSeeker data from your device, simply uninstall the App and, if applicable, revoke your session wallet to reclaim any rent SOL.

Contact

For privacy questions, contact [email protected].