1How to read this page#
There are two kinds of third parties here.
- Service providers work for Morsel. They process data on our behalf, under contract, only to provide their service to us. Our Privacy Policy covers what they handle.
- Independent services are run by others for everyone. When the App or our servers use them on your behalf, they handle data under their own terms and privacy policies, which we link below. Morsel does not control them, and listing them here is not an endorsement.
Some independent services are reached directly from your device, which means they also see your IP address. We say so where that applies. Anything you do on Cookie Chain or Solana is public, permanently, whichever service you use.
We update this page when the list changes. The date at the top shows the last change.
2Service providers#
| Provider | What it does for Morsel | Data involved | Policies |
|---|---|---|---|
| Railway | Hosts our API, RPC, relay, notification and background services, and their databases | Everything our servers handle, as described in our Privacy Policy, including IP addresses in server logs | Terms · Privacy |
| Vercel (Vercel Inc.) | Hosts our websites | IP addresses and request details of website visitors | Terms · Privacy |
| Sentry (Functional Software, Inc.) | Crash and error reports from the App, stored in the EU | Error details, device type, platform, app version, recent app events; your IP address is visible when a report is sent | Terms · Privacy |
| Google Firebase Cloud Messaging (Google LLC) | Delivers push notifications to Android devices, and to iOS devices through Apple | Push token, notification content (chat messages stay encrypted) | Terms · Privacy |
| Apple Push Notification service (Apple Inc.) | Delivers notifications and Live Activity updates to iPhones, passed on by Firebase | Push and Live Activity tokens, notification content (chat messages stay encrypted) | Terms · Privacy |
| Resend | Sends support emails | Your name, email address and our reply | Terms · Privacy |
| Hostinger | Backup email service if Resend is unavailable | Your name, email address and our reply | Terms · Privacy |
| Helius | Solana RPC and data: balances, transactions, collectibles, image resizing and transaction delivery; watches Solana addresses registered for payment notifications | Wallet addresses, signed transactions, image addresses; your IP address when the App connects directly | Terms · Privacy |
| GIPHY | GIF search in chats | Search words, sent from our servers; GIF images load directly from GIPHY, which sees your IP address | Terms · Privacy |
3Blockchains and the services that run on them#
| Service | What it does in Morsel | Data involved | Policies |
|---|---|---|---|
| Cookie Chain | The network Morsel is built for. Validators process your transactions | Everything in a transaction is public | Public network |
| Solana | The second supported network | Everything in a transaction is public | Public network |
| Jupiter (Block Raccoon S.A.) | Solana swap quotes and routing, token lists and prices (through our servers); token search and Solana limit orders (directly from the App) | From our servers: wallet address, tokens and amounts. From the App: search words, limit orders and signed order transactions, and your IP address | Terms · API terms · Privacy |
| Raptor (Solana Tracker) | Routes a share of Solana swaps, as an alternative to Jupiter | Wallet address, input and output tokens and amounts, sent from our servers; the swap itself is public | Raptor · Docs · GitHub · Terms · Privacy |
| Jito (Jito Labs) | Speeds up delivery of Solana swap transactions to validators | Your signed swap transaction (which becomes public) | Terms · Privacy |
| CookieBox and CookieScan swap aggregators | Quote and build Cookie Chain swaps across pools such as CookieSwap and CookieBox | Wallet address, tokens and amounts, sent from our servers; the swap itself is public | cookiebox.app · cookiescan.io (no published terms or privacy policy found for either) |
| Solana swap venues (Raydium, pump.fun, and Meteora pools through bags.fm) | Quote and build Solana swaps that Jupiter does not cover | Wallet address, tokens and amounts, sent from our servers; the swap itself is public | Raydium · pump.fun terms · pump.fun privacy · bags.fm |
| MomoSwap launch curves | On-chain curves for newly launched Cookie Chain tokens; the App swaps a token on its curve until it has a pool | Your swap transaction (public) | momoswap.fun |
| Cookie Chain limit order program | Holds and fills Cookie Chain limit orders through independent keepers | Your order (public) | On-chain program |
| Hyperlane | Bridges COOK and SOL between Solana and Cookie Chain | Your bridge transfer (public) | Terms · Privacy |
| Validators | Run Cookie Chain and Solana and receive delegated stake. One Cookie Chain validator, "Morsel", is operated by Morsel | Your stake account (public) | Set by each operator |
| Liquid staking protocols (Jito, Marinade and Jupiter) | Issue the SOL liquid staking tokens (JitoSOL, mSOL and jupSOL) the App lets you swap into | Your swap (public) | Jito · Marinade · Jupiter |
4Data and media providers#
| Provider | What it does in Morsel | Data involved | Policies |
|---|---|---|---|
| CookieScan | Cookie Chain data: tokens, collectibles, prices and a backup RPC | Wallet addresses, tokens; your IP address for requests made directly by the App | cookiescan.io (no published terms or privacy policy found) |
| Solana public RPC (Solana Foundation) | Backup connection to Solana if our primary provider is down | Wallet addresses, signed transactions, your IP address | Terms · Privacy |
| CoinGecko and GeckoTerminal (Gecko Labs Pte. Ltd.) | Token prices and pool data | Token addresses (not your wallet address), your IP address | Terms · Privacy · GeckoTerminal terms · GeckoTerminal privacy |
| DEX Screener | Token and pool data | Token or pool addresses, your IP address | Terms · Privacy |
| pump.fun | Data for Solana tokens launched there | Token addresses, your IP address | Terms · Privacy |
| DeFi protocol data (Raydium, Meteora, Kamino, bags.fm) | Shows your liquidity, lending and other positions, and token information | Your wallet address and token addresses, sent from our servers | Raydium · Meteora · Kamino · bags.fm |
| MomoSwap | Data for tokens launched on MomoSwap | Token addresses; your IP address for requests made directly by the App | momoswap.fun |
| IPFS gateways (Lighthouse, ipfs.io and dweb.link by Protocol Labs, Filebase, Pinata) | Load collectible and token media stored on IPFS, mostly through our image proxy | The content address requested; your IP address when loaded directly | Lighthouse · Protocol Labs · Filebase · Pinata |
| Arweave (arweave.net) | Loads media stored on Arweave | The content requested, your IP address | Privacy |
| Token logo hosts (such as GitHub, Google Cloud Storage, Amazon S3 and project websites) | Host token logos and images | The image requested, your IP address | Set by each host |
| Google favicon service and DuckDuckGo icons | Show the icons of dApps and of sites you visit in the browser | The site's domain, your IP address | Google privacy · DuckDuckGo privacy |
| Google Search | Searches when you type something other than a web address into the browser's address bar | Your search words, your IP address | Terms · Privacy |
| Reference data (exchange rates from ExchangeRate-API and exchangerate.host; Solana validator data from Stakewiz) | Currency conversion and validator details | No personal data; requested by our servers | ExchangeRate-API · exchangerate.host · Stakewiz |
5Platforms and connections#
| Provider | What it does in Morsel | Data involved | Policies |
|---|---|---|---|
| Apple (App Store, iOS) | Distributes the App; Face ID, Touch ID and the Keychain protect your wallet on the device; speech recognition for voice search | App Store data under Apple's policies; biometric checks and Keychain items stay on your device; voice search audio may be processed by Apple | Terms · Privacy |
| Google (Google Play, Android, Chrome) | Distributes the App and the extension; Android Keystore and biometrics protect your wallet on the device; speech recognition for voice search on Android and in Chrome | Store data under Google's policies; Keystore items and biometric checks stay on your device; voice search audio is processed by Google | Terms · Privacy |
| WalletConnect (Reown, Inc.) | Connects the App to dApps that use WalletConnect | Encrypted connection messages, your wallet address once you connect, your IP address | Terms · Privacy |
| dApps you connect (through the browser, Wallet Standard, the Morsel connect kit or WalletConnect) | Whatever the dApp does | Your public address once you connect, and every request you approve | Set by each dApp |
6Links out of the App#
Some screens open other services in the App's browser when you choose to, and those services are governed by their own terms and privacy policies:
| Service | Where it appears | Policies |
|---|---|---|
| Baked Bazaar | A collectible's page on Cookie Chain, and the empty Collectibles screen. The App also shows Baked Bazaar's logo from its site | bakedbazaar.art (no published terms or privacy policy found) |
| Magic Eden | The empty Collectibles screen on Solana | Terms · Privacy |
| Solscan and the CookieScan explorer | "View on explorer", following the explorer you choose in Settings | Solscan · cookiescan.io |
| Bake Your Stake | Liquid staking on Cookie Chain, from the Stake page | bakeyourstake.xyz |
| MomoSwap | Rewards. This link carries Morsel's referral code, so Morsel may earn a reward when you use MomoSwap through it | momoswap.fun |
7Questions#
If you have a question about a third party, or think something is missing from this page, write to legal@morselwallet.app.