WHAT WE KEEP

01WHAT IS PUBLIC ANYWAY

SWOGE is a token on Solana. Every wallet address, every balance and every DOGE payout is public on the chain, for everybody, for good. We did not make it that way and we cannot change it.

To show what a wallet has been paid, we keep our own copy of that public data: the DOGE transfers sent by StonkFun’s payout wallets, and the list of addresses that hold SWOGE with their balances. That is the payout index. It holds addresses and amounts, not people, and it is built from the chain whether or not you ever open this site.

02LOOKING UP A WALLET AND PRINTING A RECEIPT

On the Receipt Printer you paste an address. It is sent to our server, which looks it up in the payout index and sends back the numbers. Nothing is connected and nothing is signed. Your browser remembers the last address you looked up, on your device only, so you do not have to paste it again.

If you print a receipt, we store a frozen snapshot of the numbers behind a random ten-letter id. The wallet address is kept in a separate private column (it is how we cap receipts per wallet and avoid printing duplicates) and is never put in the receipt, its link, its share card or the public wall. A line you switch off is left out of the stored snapshot, not just hidden. Anyone with the link can see the receipt; if you left it on the wall, everyone can.

03PROVING A WALLET (YOUR SWOGE ID)

You prove a wallet is yours by sending a tiny, exact amount of SOL from it, normally to yourself. You do that in your own wallet app. We then find that transfer on the public chain. We store: the wallet address, the amount we asked for, the time, and the signature of the transaction that proved it (a public transaction id, not a secret). That is all the proof is.

While you are proving, we also keep a hash of your IP address with the attempt, only to cap how many attempts one connection can start in an hour. A hash of an IP address is not strong anonymity and we do not claim it is.

04SIGNING IN, DEVICES. AND NO COOKIES

Your browser makes a long random token and keeps it in its local storage. Our database stores only a hash of it. Whoever holds that token can edit the profile it is attached to, so treat the browser like a key. “Sign out” deletes the hash on our side and the token on yours.

Signing up and signing in. You sign up first, with X or a passkey, then link your wallet once; after that, signing in on any browser opens the same SWOGE ID and nobody asks for the wallet again. There is no email and no password. With X you approve read-only access on x.com; we read your X id, handle, name and picture once, keep those, revoke the token and throw it away. We can never post. If you later prove a wallet, that X account also becomes your ID’s X link (the shill score), which you can unlink. A passkey (Face ID, a fingerprint, your screen lock or a security key) never leaves your device or your password manager: we keep its public key, a counter, the name you give it, whether your device said it is synced, and when it was made and last used. None of that can sign you in anywhere, here included. While you are signed up without a wallet (a “day pass”) nothing about you is public: no page, no number, no board. You can remove a sign-in method from your SWOGE ID at any time, except the last one, which would lock you out. A day pass can be deleted outright from the same screen it signs out on. A sign-in attempt is kept for a day as a hash of its one-time code, the device hash and a hash of the address it came from, to stop anyone hammering the door.

We set no cookies. We run no advertising or tracking scripts and nobody else’s analytics, and we do not fingerprint you. The fonts are served from our own domain. What your browser keeps for the site, on your device only, never sent anywhere by itself:

• swoge.device the device token above (sent with SWOGE ID and meme calls, so the database knows which profile you mean). A browser without a SWOGE ID gets one the first time it gives a rep or publishes a meme
• swoge.depot only if you unticked the depot box in the Meme Gym
• swoge.wallet the last address you looked up
• swoge.signed, swoge.login.on whether anybody was signed in on this browser last time, and which sign-in buttons to draw, so the SWOGE ID page opens without waiting for our server
• swoge.home only while you are signed in: the last copy of your own SWOGE ID this browser was shown (it holds your wallet address and your numbers), so the page paints at once and then refreshes. Signing out deletes it
• swoge.character the doge you built, and swoge.receipt your receipt choices
• swoge.ref if you arrived through a member’s link (?ref=): that member’s page name, kept for up to 30 days. It is sent once, if you get a SWOGE ID, so the database can note who brought you in. That note is one line (your profile, theirs, the date), it is removed with either profile, and it puts that member’s name and their count of recruits on the Army’s recruiters board. Your name is not shown there.
• swoge.seen the date this browser was last counted (see the head count below), and swoge.nocount if you switched the counting off

Clearing your browser’s site data removes all of it.

The head count. We do want to know how many people come and whether the printed cards work, so the site counts, itself, with no outside service. When a page opens, your browser tells our server the page’s path (without anything after a ?), the name of the site that led you here (never the page on it), and a campaign word if the link carried one (?c=). Our server adds the country Vercel says the request came from and whether it looks like a phone, a tablet or a desktop, and then adds one to a counter for that day: “Tuesday, /go, no referrer, a phone, this country: 14”. Pressing one of a few named buttons, or a link that leaves the site, adds one to a counter the same way. That is all that is kept: totals per day. There is no line per visit or per visitor, no id, no cookie, and the IP address and browser details are not read for it, hashed or otherwise, so there is nothing in it to look you up by or to delete. To count visitors and not just opens, your browser remembers the date it was last counted (swoge.seen) and says “first time today” or “first time ever”; the date itself never leaves your device. Pages about one member, receipt or meme are counted together as one page. To be left out altogether, open any page once with ?count=off on the end (?count=on undoes it).

05YOUR PROFILE AND ITS SWITCHES

A profile always shows: your member number, name, page address, bio, your doge, the date you joined, and, if you linked one, your X handle with your shill numbers. Everything about money is behind a switch you control:

• DOGE received (on by default): lifetime, 7 days, 24 hours, number of payouts.
• Rank (on by default): where that wallet stands among paid wallets.
• Tier badge (on by default): a wide band such as GYM RAT, never the amount.
• Exact SWOGE balance (off by default).
• Wallet (off by default): even when on, only a shortened form like 8oop…M449 is shown. The full address never appears on a public page of ours.

On the Army’s DOGE boards every paid wallet is a line with a rank and an amount and no address. A line carries your name only if DOGE received and Rank are both on. The weekly contest’s standings and podiums follow the same rule, and so do the badges a podium earns. One honest limit: if you show your exact DOGE figure, someone can match it to a board line or to the chain, because the amounts are public. The people who run the site can see which wallet is behind a profile; nobody else can through us.

Your GAINS total and rank are public on the gym’s board and on your page. The holding lines show to others only with Exact SWOGE balance on, the DOGE line only with DOGE received on, and a switch on your gym card keeps you off the board altogether without changing what you earn. To score holding and buys we read your proven wallet’s SWOGE transactions from the public chain.

06LINKING X, AND WHAT WE READ FROM X

You link an X account in one of two ways. Connect with X: you approve read-only access on x.com, we ask X one question (which account is this?), and we discard the access key straight away; it is never stored, so nothing we hold could post, like, follow or read messages for you. Or post a code: you post a short code and paste that post’s link, and we read that one public post through X’s public embed data, with no permission involved at all. Either way we never post, like or follow. We store your X user id, handle, display name and avatar address, and for each post you log: its id, its words, its like and reply counts and when it was posted.

Separately, we pay for X’s API to search X for public posts that mention SWOGE, the site or the contract address. Every match is stored, from members and non-members alike: the post id, the author’s X user id, the words, like, reply, repost and quote counts, language and time. We keep non-members’ mentions so that somebody who links their X later is credited for what they already posted. For non-members we do not store a handle, name or avatar, and nothing from this table is shown on the site except totals. Avatars of linked members load straight from X’s image host in your browser, with no referrer.

Sending in a thesis. From your SWOGE ID you can send in a link to a post of your own on X for the thesis wall. You tick a box saying you wrote it and are happy for us to republish it with your SWOGE ID, and we keep the time of that tick. We then read that one post through X’s paid API to check that its author is the X account linked to your SWOGE ID, and we keep with your submission: the post’s link and id, its words, the links to its pictures, when it was posted, the title you suggested, and whether your wallet held any SWOGE at that moment. Every try is also written down (time, a hash of your device token, the link) to hold the limits. Only you and the owner can see a submission. We never show how many have been sent in. You can take a waiting one back; it can then never be published, but its record stays with your profile until the profile is deleted.

If the owner features it (nothing goes up by itself), we may read the rest of that thread from X the same way, the owner may edit the title and pick a quote, and the chosen pictures are copied into our own storage so the page does not depend on X. The page is public and shows your doge, name, member number, X handle and the numbers your profile switches let out, and it always says whether the wallet behind your SWOGE ID holds SWOGE right now, whatever your switches say: that is what the tick box agrees to. You can take a featured thesis down yourself from your SWOGE ID at any time, or ask @TheSwogeDoge; the copied pictures are then deleted. A thesis is its author’s opinion, not ours, and not advice.

Guest theses: if you never sent one in. The owner can add a public X thread to the thesis wall as a guest thesis, with credit and a link to the original. For that we read the post through X’s paid API together with its author’s public X profile, and we keep: the X account’s id, handle and display name, a copy of its avatar, the thread’s words, copies of the pictures the owner chose, the link, when it was posted, and the time the owner ticked that the author is fine with it. No wallet is involved and the page shows no holder numbers. To have it taken down, ask @TheSwogeDoge from that X account; the copied pictures and avatar are then deleted. If that X account is ever connected to a SWOGE ID, the thesis becomes that member’s: from then on the page shows their doge, name, member number and the numbers their switches let out, and says whether they hold SWOGE, exactly like a thesis they had sent in, and they can take it down themselves from their SWOGE ID. Unlinking X turns it back into a guest thesis. Deleting the profile deletes it.

07MEMES

The Meme Gym makes memes inside your browser. Under its buttons sits a box, “Add it to the public depot when I save”, and it starts ticked. While it is ticked, saving a meme (download, copy or share) also sends the finished picture and its optional title to us, to hang in the depot, the public meme wall. That includes a picture of your own you used as the background. Untick the box and nothing is uploaded: the meme stays on your device. Your browser remembers the untick (swoge.depot). Classic templates are loaded by your browser directly from Imgflip, so Imgflip sees that request like any website would.

Anyone can publish. With a SWOGE ID in that browser, the meme is public under your member name and counts for your stats. Without one it is anonymous: the wall says “a gym visitor”.

Every meme is checked by a machine before it is stored. The picture and its title are sent to OpenAI’s moderation service, which answers with scores. Clean: it goes on the wall at once. Refused: we keep a line with the scores and the title, never the picture. If the check cannot run, nothing is published and nothing is kept. Nobody approves memes by hand. The owner can take one down.

What we keep with a published meme: the picture, title, time, size, the check’s top scores and the reps it collects (a rep is tied to the hash of the device that gave it, so it counts once). An anonymous meme also keeps a hash of your device token and a hash of your IP address: the first lets the same browser delete it for 24 hours, both hold the limits and help us deal with abuse. A member’s meme is tied to the profile instead. Every publish attempt and every rep is noted with those two hashes for the rate limits, and those notes are dropped after three days. A hash of an IP address is not strong anonymity.

Deleting: a member can delete their own memes any time. An anonymous meme can be deleted from its page by the browser that made it for 24 hours; after that, ask @TheSwogeDoge.

08WHO ELSE IS INVOLVED

• Vercel hosts the site. Like any web host it keeps short-lived request logs (IP address, the page or API path asked for; a wallet lookup’s path contains the address).
• Supabase runs our database, file storage and background functions. Your browser talks to it directly for SWOGE ID, Army and meme calls, so it sees those requests too.
• Helius (a Solana RPC provider) is how we read the chain. It sees the addresses we ask about, from our servers, not from you.
• StonkFun and DexScreener give us the token’s public totals and price. Our server asks them; your browser does not.
• X: the public embed data and the paid search described above; avatars load from X in your browser.
• TikTok’s embed on the socials page: nothing of theirs loads until you press “Show the latest posts” on a card. When you do, TikTok’s script runs in the page and it can set cookies and see that you were here, under its own policy.
• X’s video servers on THE SWOGE SHOW chart: the episode pictures come through this site, but nothing of X’s loads until you press PLAY. When you do, your browser fetches the episode’s video file straight from X (video.twimg.com), which sees your address like any website you visit.
• Imgflip: classic meme templates, loaded by your browser.
• OpenAI: its moderation service is sent the picture and title of every meme being published, to check it. Nothing else goes there.

We sell nothing to anybody and share nothing beyond what these services need to do that job. Links out of the site (StonkFun, DexScreener, Jupiter, Solscan, X) are ordinary links: those sites have their own rules.

09DELETING YOUR THINGS

Yourself, any time: delete any meme you published as a member (an anonymous one: for 24 hours, from the browser that made it); take back a thesis you sent in, or take your featured one off the thesis wall; unlink X (your logged posts stop counting and are set aside so that linking the same account again restores them); remove a sign-in method (a passkey, or X as a login: we delete what we held for it); sign out (the device is forgotten on both sides); edit or empty your name and bio; clear the site data in your browser.

The whole profile: ask @TheSwogeDoge from the linked X account, or tell us the member number and be ready to sign in in front of us. The owner has a delete button. It removes the profile, the link to your wallet, your devices, your sign-in account with its passkeys and X login, your X link and logged posts, your memes, your theses and your proving attempts.

What stays: the chain and our index of it (public data about addresses, not about you); receipts you printed (ask and we take one off the wall; its link is random and says nothing about the wallet); the record that one public transaction was already used as a proof, so it cannot be replayed; a short internal log of moderation actions. If you want public X posts of yours removed from our mention store, ask.

10THE SMALL PRINT WE DO HAVE

The site is not meant for children. We may have to keep or hand over data if a law really requires it. If what the site does changes, this page changes first or at the same time, and the date at the top moves. Questions, corrections, deletions: @TheSwogeDoge.