1. Who is responsible
FreshTokenWatch is a non-commercial hobby project run by a private individual living in Serbia. There is no company behind it. As permitted for non-commercial private websites in Serbia, no name or postal address is published. The operator is the controller for the data described here and can be reached at kontakt@freshtokenwatch.com.
2. Applicable law
This site is subject to the Serbian Law on Personal Data Protection (Zakon o zaštiti podataka o ličnosti, "Službeni glasnik RS" no. 87/2018, ZZPL). For visitors in the EU/EEA, the GDPR also applies (Art. 3(2) GDPR).
3. Hosting and server logs
The site runs on a dedicated server of Hetzner Online GmbH in Germany. The web server logs each request (IP address, time, requested URL, status, referrer, browser identification) for security and troubleshooting. Logs are deleted automatically after 14 days. Database backups are kept on the same server and rotated after 7 days. Legal basis: legitimate interests (ZZPL Art. 12(1)(6) / GDPR Art. 6(1)(f)).
4. Account
If you register, we store your e-mail address, your username, a salted scrypt hash of your password and the account creation date. Signing in sets one strictly necessary cookie, ftw_session (HttpOnly, Secure, SameSite=Lax, valid 30 days); the server stores only a hash of its value together with your user ID and the expiry time. Your username is shown publicly next to comments you post.
There is no self-service deletion yet: e-mail kontakt@freshtokenwatch.com from your account address and your account, sessions and comments will be deleted. Legal basis: contract (ZZPL Art. 12(1)(2) / GDPR Art. 6(1)(b)).
5. Comments
Signed-in users can post comments on token pages. Comments are public and show your username (or, if you have none, the part of your e-mail address before the "@"), the text and the time. You can edit or delete your own comments at any time.
6. Pro waitlist and sponsor inquiries
If you join the Pro waitlist or send a sponsor inquiry, we store your e-mail address, your note, the form you used, your browser identification string and the time of your request, and we are notified by e-mail. The data is used only to contact you about this request and is deleted when no longer needed or on request. Legal basis: steps prior to a contract / your request (ZZPL Art. 12(1)(2) / GDPR Art. 6(1)(b)).
7. E-mail delivery (Resend)
Notification e-mails about waitlist and sponsor requests, and an internal daily statistics e-mail to the operator, are sent through Resend (Resend, Inc., USA). For waitlist and sponsor notifications Resend processes the submitter's e-mail address and note. Resend acts as a processor; data may be transferred to the USA on the basis of standard contractual clauses. The internal statistics e-mail contains only aggregated figures.
8. Statistics
We use two privacy-friendly, self-hosted statistics systems, both on our own server and without cookies:
- Built-in counters: page views per hour and page with browser family, operating system family and device type; daily counts of search terms entered in the search box, landing pages and certain actions (for example "joined waitlist"). No IP addresses or full user-agent strings are stored; country is not recorded.
- Umami (served from
freshtokenwatch.com/_u/): page address, referrer, browser, operating system, device, screen size, language and country derived from the IP address. The IP address is not stored; unique visitors are counted with an anonymised hash that changes daily. Umami honours "Do Not Track".
Legal basis: legitimate interests (ZZPL Art. 12(1)(6) / GDPR Art. 6(1)(f)).
9. Storage in your browser
Your watchlist, compare list, recently viewed tokens, theme, sidebar and onboarding state, watchlist filter/sort and alert settings are stored only in your browser's local storage (keys beginning with ftw:) and are never sent to us as a list. If you enable watchlist alerts, your browser asks for notification permission; the page then checks the watched tokens' public data and shows notifications locally. No push service is used. You can delete this data by clearing site data in your browser.
10. Embedded content and links
Token pages embed a chart from DexScreener. When it loads, your browser connects to dexscreener.com, which receives your IP address and browser data and may set its own cookies; DexScreener's privacy policy applies. Links to explorers, DexScreener or Telegram lead to third-party sites.
11. Your rights and complaints
You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent. Write to kontakt@freshtokenwatch.com; requests are answered within 30 days. You may complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (Poverenik, www.poverenik.rs) or, in the EU/EEA, to your local data protection authority. See also the contact page.
12. Last updated
17 October 2026.