Current data behavior, without invented controls.

A current-state data inventory for the Devnet application. Retention, deletion, subprocessors, and legal approval remain release blockers.

Devnet onlyConfiguration workflow only; no mint, trading, liquidity, or fee collection.devnet only

Working disclosureNamed legal and product approval is still required before release sign-off.audit required

Data currently stored

Records required by implemented workflows.

Public wallet address and wallet-signature challenge records
Session, entitlement, payment-request, and launch-credit records
Forge drafts, generated structured text, image prompts, and artifact history
Launch configuration, readiness score, companion, XP, and admin audit records
Operational logs and service-health data configured by the deployment owner

Not collected or produced

Hard application boundaries.

Seed phrases, private keys, or recovery phrases
Government identity documents or KYC records
Email address or phone number as an account requirement
Image or video files generated by TrenchForge—the current pipeline produces no media files

Storage and access

Implemented controls only.

Application records, including AI artifact JSON, are stored in Postgres. The application does not use an object-storage media pipeline.
Private workspace APIs require a valid wallet-signature session and enforce session or wallet ownership.
Session tokens are stored in HttpOnly, SameSite=Strict cookies; only token hashes are persisted by the API.

AI provider disclosure

What is sent when text generation is configured.

devnet only

The Forge sends the user-entered idea, archetype, preferred name, symbol, audience, constraints, and risk posture to the configured OpenAI-compatible provider. Wallet addresses, payment records, and private keys are not part of the generation request. Users should still avoid entering personal or confidential information in Forge briefs.

Retention and deletion

Implemented private-data controls; final policy pending.

audit required

Launch Studio sessions expire after 24 hours, but session expiry is not record deletion. Authenticated API routes provide wallet-data export and an explicit private-workspace purge request. Plan retention removes expired, unlaunched private work; published Solana, payment, entitlement, launch-credit, support, and admin-audit evidence is retained for integrity. The owner must still approve retention periods, response commitments, backup/log treatment, subprocessors, and final policy before Devnet release sign-off.

Legal & Trust Documents

Working product disclosures updated: August 23, 2026. Formal approval pending.

Terms Privacy Risk No Refund Wallet FAQ Trust

Preparing workspace

Bringing the next step into focus.

Restoring the page and its verified Devnet state.

Current data behavior, without invented controls.

A current-state data inventory for the Devnet application. Retention, deletion, subprocessors, and legal approval remain release blockers.

Devnet onlyConfiguration workflow only; no mint, trading, liquidity, or fee collection.devnet only

Working disclosureNamed legal and product approval is still required before release sign-off.audit required

Data currently stored

Records required by implemented workflows.

Public wallet address and wallet-signature challenge records
Session, entitlement, payment-request, and launch-credit records
Forge drafts, generated structured text, image prompts, and artifact history
Launch configuration, readiness score, companion, XP, and admin audit records
Operational logs and service-health data configured by the deployment owner

Not collected or produced

Hard application boundaries.

Seed phrases, private keys, or recovery phrases
Government identity documents or KYC records
Email address or phone number as an account requirement
Image or video files generated by TrenchForge—the current pipeline produces no media files

Storage and access

Implemented controls only.

Application records, including AI artifact JSON, are stored in Postgres. The application does not use an object-storage media pipeline.
Private workspace APIs require a valid wallet-signature session and enforce session or wallet ownership.
Session tokens are stored in HttpOnly, SameSite=Strict cookies; only token hashes are persisted by the API.

AI provider disclosure

What is sent when text generation is configured.

devnet only

Retention and deletion

Implemented private-data controls; final policy pending.

audit required

Legal & Trust Documents

Working product disclosures updated: August 23, 2026. Formal approval pending.

Terms Privacy Risk No Refund Wallet FAQ Trust

Current data behavior, without invented controls.

Data currently stored

Not collected or produced

Storage and access

AI provider disclosure

Retention and deletion

Approval Checklist

Legal & Trust Documents

Bringing the next step into focus.

Current data behavior, without invented controls.

Data currently stored

Not collected or produced

Storage and access

AI provider disclosure

Retention and deletion

Approval Checklist

Legal & Trust Documents