Legal
Privacy Policy
Effective date:
The short version.
Lucid is a non-custodial browser extension for trading and launching tokens from X. Your private keys are held by Turnkey, never by Lucid. We collect only what the features need, we never sell your data, and we don't use it for advertising.
This policy explains what information the Lucid browser extension, the Lucid API and lucid.top (together, "Lucid", "we", "us") collect, how we use it and who we share it with. By installing or using Lucid you agree to this policy and to our Terms of Use.
1. Information we collect
Account information
- Email address, if you sign in with email.
- X account identifier, if you sign in with X. We receive an account identifier through Turnkey's OAuth sign-in. We don't get your X password or the ability to post for you.
- Turnkey identifiers for your wallet organization and user, which link your Lucid account to your wallet.
- Session information: when a session started and was last used, your browser's user-agent string, and the sign-in method. We store only a hash of your session token.
Wallet information
- Public wallet addresses (Solana and EVM) for your account, as reported by Turnkey.
- We never receive, store or have access to your private keys or recovery material. Keys are generated and held by Turnkey in secure enclaves. Transactions are signed only after you confirm them in the extension. Lucid cannot move your funds on its own.
Transaction and usage information
- Transactions you make through Lucid: chain, transaction hash, type (buy, sell, send, launch, approval), token address and symbol, amounts, status and errors. We use these for your activity history, profit-and-loss figures, daily limits and alerts.
- Settings such as quick-buy amounts, slippage, limits, alert preferences and AI preferences, so they follow your account across browsers.
- Token launches you prepare: name, ticker, description, image, links, and the transaction that created the token.
- Watchlist and token "calls": for posts on X that contain a contract address, we may record the token, the post ID, the author's handle, when it was posted and the market cap at that time. This lets us show call performance.
Content from X
- The extension reads posts on x.com in your browser to find contract addresses and show trading controls. Posts are not sent to us just because you viewed them.
- If AI analysis is turned on, the text of eligible posts is sent to the Lucid API, along with the author's handle, name, public engagement counts and, only if you enable image analysis, the post's image URL. The text then goes to our AI provider to score the post and suggest a token concept. We cache the analysis result by post ID. You can turn AI analysis off in Settings.
- If you choose a post's image for a token launch, the extension fetches that image after you confirm you have the rights to use it.
Telegram alerts (optional)
- If you connect Telegram, we store your Telegram chat ID and username to send you alerts about trades, launches, take-profit/stop-loss and milestones. You can disconnect at any time.
Technical information
- Our servers process your IP address and request metadata to protect the service: rate limiting, abuse prevention and debugging. Rate-limit counters are short-lived, and server logs are kept only for a limited period.
Stored only in your browser
These stay in your browser's extension storage and are never sent to us: language, which chains are shown, your address book, account labels you add to X users, portfolio chart history, the take-profit/stop-loss rules you set, and the onboarding state.
2. How we use information
- To provide Lucid's features: sign-in, balances, quotes, trades, transfers, token launches, history, portfolio, alerts and AI suggestions.
- To keep the service secure: authentication, session management, fraud and abuse prevention, and rate limiting.
- To fix bugs and keep the service reliable.
We do not sell your information, use it for advertising or personalized ads, share it with data brokers, or use it to determine creditworthiness.
We share information only with service providers that are needed to run the feature you use, and only what that feature needs:
| Provider | Purpose | What they receive |
|---|---|---|
| Turnkey | Wallets, keys, sign-in | Email or X sign-in, wallet data, signing requests you approve |
| Vercel and our database host | Running the Lucid API | The account, transaction and settings data described above |
| Blockchain RPC providers (e.g. Alchemy and Solana RPC) | Balances and sending transactions | Wallet addresses, signed transactions |
| Jupiter, 0x, PumpPortal, pump.fun | Quotes, swaps, token creation | Wallet address, token and amount of the trade |
| DexScreener, GeckoTerminal | Token prices and market data | Token and pool addresses |
| Groq, Cloudflare Workers AI | AI post analysis and token images | Post text and related public post data; image prompts |
| Pinata / IPFS | Token launch metadata | Token name, ticker, description, image and links |
| Telegram | Alerts | Alert messages to your chat |
We may also disclose information if required by law, to protect the rights and safety of users or the public, or as part of a merger or acquisition. In that case this policy continues to apply.
4. Public blockchains and IPFS
Transactions on Solana, Ethereum, Base and BNB Chain are public and permanent. Anyone can see wallet addresses, balances and transaction history. Token metadata and images uploaded to IPFS during a launch are public and cannot be deleted. Deleting your Lucid account does not remove anything from a blockchain or IPFS.
5. Retention and deletion
- We keep account, transaction and settings data while your account is active.
- Sessions expire automatically, and you can revoke them any time under Account → Sessions.
- You can ask us to delete your account and associated data by emailing support@lucid.top. We will do so within 30 days, except where we must keep data by law.
- Uninstalling the extension removes the data stored only in your browser.
6. Security
Data is sent over encrypted connections (HTTPS). Session tokens are stored only in extension storage that web pages cannot read. Keys stay in Turnkey's secure infrastructure, and every transaction requires your confirmation. No system is perfectly secure, so please protect your email and X accounts.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. To use these rights, contact support@lucid.top. You can also turn off AI analysis, disconnect Telegram, revoke sessions or uninstall the extension at any time.
8. Children
Lucid is not intended for anyone under 18. We do not knowingly collect information from minors.
9. Chrome Web Store Limited Use
Lucid's use of information received from Chrome APIs and web pages complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We use this data only to provide and improve Lucid's single purpose: trading and launching tokens from X. We don't transfer it except as described above. We don't use or transfer it for advertising, and humans read it only with your consent, for security, or as required by law.
10. Changes
If we change this policy, we will update the effective date above. For material changes, we will also notify you in the extension before they apply.
11. Contact
Questions or requests: support@lucid.top