This page documents Microset’s data practices for reviewers and users. It is
consistent with the published Privacy Policy and
Data Policy. Data collected
| Data | Collected? | Purpose | Retention |
|---|
| Wallet public key | Yes | Authentication and linking predictions/positions to a user | While the account is active |
| Auth signature / session JWT | Yes | Verifying wallet ownership and maintaining a session | Session duration |
| Prediction history (cached) | Yes | Displaying positions, profile, and market activity | While the account is active |
| Support correspondence | Only if you contact us | Responding to your request | While the account is active |
Wallet & key handling
Microset authenticates users by asking the wallet to sign a human-readable
message (Microsets:wallet-auth:) and verifying that signature server-side to
issue a session JWT. The public key is stored to associate on-chain activity with
the user. Microset never receives or stores the user’s private key or seed phrase.
The optional quick-prediction delegate is an on-chain session: the user funds an
escrow with a spend cap, the delegate key signs only predictions drawn from that
capped escrow, and the user can withdraw unused funds or revoke the session at any
time.
What Microset never collects
Microset never requests or stores private keys or seed phrases. Any site asking
for these is not affiliated with Microset.
- ❌ Private keys
- ❌ Seed / recovery phrases
Backend & third-party services
| Service | Purpose | Data shared |
|---|
Microset API (testapi.microset.io) | Auth, market data, user profile | Wallet public key, signatures, app data |
| MongoDB | Application database | Off-chain application data (profiles, cached activity) |
| Solana RPC provider | Read chain state / submit transactions | Public key, transaction data |
| Privy | Wallet connection & auth | Wallet address and authentication signals |
| Hosting (Railway) | Runs the backend | Operational data |
Data retention
Off-chain data is kept only as long as needed to operate the Service and meet
legal obligations, then deleted or anonymized. On-chain data is public and
permanent. See the Privacy Policy for full details.
