Privacy
Last updated: 2026-11-04 UTC.
This policy covers farbeamlabs.com and its API. "Farbeam" means the operator of that service. Questions go to contact@farbeamlabs.com.
#Summary
| Topic | What happens |
|---|---|
| Analytics | None. No third-party analytics and no tracking pixels |
| Cookies | One, fb_session, and only after you sign in. No tracking cookies |
| Accounts | Optional. An account is a Solana wallet address, with no email or password. Reading data needs no account |
| Request logs | The application writes none |
| IP addresses | Held only in memory as a hash, for rate limits. Never written to disk |
| Contact form | Stores what you send until it is forwarded to the inbox |
| Selling data | Farbeam does not sell personal data |
#Data you send
#Contact form
The contact form sends your name, email address, optional company, topic and message. The server writes these to its database and forwards them to the inbox for contact@farbeamlabs.com. After a successful send, the content in the database is replaced with an empty object, and the row is deleted after 30 days. If forwarding keeps failing, the content stays in the database until someone handles it.
Messages in the inbox are kept as long as needed to answer them and to keep a record of the conversation. To ask for a message to be deleted, write to the contact address.
#Accounts and sign-in
If you sign in with a Solana wallet, Farbeam stores the wallet address, a generated account id, the created time and the last-seen time. A wallet address is public on the chain, but linking it to an account here is data about you. Sign-in also stores a one-use nonce, for up to 5 minutes, and a SHA-256 hash of the session token, for up to 7 days.
If you link Telegram, Farbeam stores the id of that private chat with your account. Unlinking removes it, and so does /stop in the chat.
#API keys
When you create a key, Farbeam stores a SHA-256 hash of it, a generated id, your label, the created time, the last-used time and the number of calls per UTC day for that key. The key itself is not stored. Do not put personal data in the label.
Revoking a key marks it revoked and turns off its rules. The record is not deleted. To ask for deletion, write to the contact address and include the key id.
#Alert rules
If you create a rule, Farbeam stores its name, expression, webhook URL, format, cooldown, a signing secret and failure counts. The delivery log stores the time, the transfer id, the status, the HTTP code and a short error class for 14 days. Deleting a rule also deletes its delivery log. A webhook URL can identify you or your system, so treat it as data you are giving to Farbeam.
#Addresses and hashes you look up
To answer a lookup, the server sends the address or hash to outside services, listed below. They see the request as coming from the Farbeam server, and your IP address is not forwarded. The application does not record which addresses you looked up.
#Data collected automatically
The server reads your IP address from the connection or from the forwarding header to apply limits. It hashes the address with SHA-256 and keeps the hash in memory:
- For up to about 6 minutes, for the API rate limit.
- For up to 24 hours after the last event, for the limits on sign-in attempts and contact messages.
- For as long as a stream is open, for the limit on live streams.
A restart clears all of these. The API returns a request id with each response. The application does not store the id.
If the server hits an unexpected error, it writes the method, the path and the error text to its process output. A path can contain a blockchain address or a transaction hash. It does not contain your IP address or key.
This policy covers the application. A network provider or hosting layer between you and the application can see connection data, as with any website.
#Cookies and browser storage
The site uses two items in your browser, and neither is sent to a third party. There are no analytics or advertising cookies.
| Item | Type | Holds | Removed when |
|---|---|---|---|
fb_session | Cookie, HttpOnly, SameSite=Strict, Path=/api | A random session token, set only after you sign in to the console | You sign out, or after 7 days |
fb-lang | localStorage | The code language you chose in the docs | You clear your browser data |
The session cookie is strictly needed for sign-in. If you never sign in, it is never set.
Fonts, scripts and styles are served from the same site. External links do not send a referrer.
#Outside services contacted by the server
The server, not your browser, contacts these services. While you use the site, your browser connects only to farbeamlabs.com. At sign-in, your browser also talks to the wallet extension you choose, under that wallet's own terms.
| Service | Purpose | What it receives |
|---|---|---|
| dRPC, 1RPC, Nodies, BlockRazor, Arbitrum, PublicNode | EVM chain data | Addresses and hashes you look up, plus polling calls |
| Helius | Solana chain data, when configured | Addresses and hashes you look up, plus polling calls |
| PublicNode | Solana chain data, as a fallback | Addresses and hashes you look up, plus polling calls |
| CoinGecko | Prices | Asset ids only |
| DexScreener | Token pool data | Token addresses you look up |
| GoPlus | Token security fields | Token addresses you look up |
| RugCheck | Solana token score | Token addresses you look up |
| DefiLlama | TVL, stablecoins, DEX volume | No user data |
| GeckoTerminal | Trending pools | Chain name only |
| Your webhook URL | Alert delivery | The event payload, to the URL you chose |
| Telegram | Alert delivery, if you link a chat | The chat id and the alert text |
| Inbox service | Forwarding contact messages | The contents of the form |
#Public blockchain data
Farbeam stores and shows public blockchain data such as addresses, amounts and transaction hashes. Labels name public, well-known addresses such as exchange wallets and contracts. Farbeam does not try to link an address to a private person. If you think a label is wrong or should be removed, use the contact form.
#Retention
| Data | Kept for |
|---|---|
| Large transfers | 7 days |
| Status samples | 30 days |
| Delivery log | 14 days |
| Forwarded contact rows | 30 days, with content removed after the send |
| Sessions | 7 days, or until sign-out |
| Sign-in nonces | 5 minutes |
| Accounts, API key records and rules | Until deletion is asked for or a rule is deleted |
| IP hashes | Memory only, as above |
#Your choices
You can use the site and the API with no account and no key. You can delete a rule with DELETE /rules/{id}, revoke a key with DELETE /keys/{id} or DELETE /me, and unlink Telegram with DELETE /account/telegram. To ask for access to or deletion of data about you, write to contact@farbeamlabs.com. Accounts have no email attached, so Farbeam can find your records only if you give the wallet address, the key id or the contents of a message.
#Children
The service is a technical tool that is not aimed at children.
#Changes
If this policy changes, the date above changes and the changelog records it.