Privacy

We keep as little as the claim flow needs.

Public data we index

For listed repositories we store public GitHub data: repository name, owner, stars, language, and the numeric id, login, avatar and public X handle of each recipient. This is how fees are attributed.

If you sign in

• GitHub sign-in gives us your numeric id, login and avatar. We discard GitHub’s access token immediately and request no repository access.
• Session cookie. A random token in an httpOnly cookie, valid 7 days. We store only its hash.
• Wallet link. Your wallet address and the signed message, so we can prove the link later.
• Claims. Amounts, wallet, status and transaction signatures. These are also public on-chain.

Everything else

Wallet lookups on the $OSI page are not stored against you. Request logs are kept briefly for abuse prevention and are scrubbed of cookies and secrets. No advertising trackers. Opt-out requests keep the contact you give us until handled.

To delete your sign-in data, use the opt-out form or contact us there. On-chain records can’t be deleted by anyone.