Privacy

The site is served through Cloudflare, which handles every request before it reaches HEY’s server. HEY’s web server then writes an access log: each request’s time, address, URL, status, browser and the page you came from. Credentials are removed before a line is written (API keys, the Telegram webhook secret, cookies, authorization headers, and the tokens in email-confirmation, unsubscribe, private-feed and GitHub sign-in addresses). What you type is removed too: the text of a search (the q, query, search or term part of an address) and an Ask HEY question never reach that log. HEY counts searches in its own tables by a normalised key. The raw log is deleted after at most 48 hours.

Before that, HEY folds it into hourly counts by route, status and kind of browser or crawler, and a daily list of pages that were not found. Those tables hold no IP address and no browser string.

The application’s own logs record a request’s route, status and timing, not who made it. Rate limits, which stop one caller from overloading the site, count requests per address in the server’s memory and write nothing.

On each page, a small script sends HEY a page view: the path, the host of the page you came from, any utm_ campaign labels in the address, a random id for the tab and whether this browser has visited before. The Research Terminal sends the same. A few controls also report, by name only, that they were used: a source, share, copy or related link on a project page, a Uniswap link, a step in a wallet flow. No address, amount or text you typed goes with them.

The server stores the path, the referring host (never the full address), the kind of device, the browser family, the country Cloudflare reports, and the campaign labels. It also stores two digests:

• a visitor digest, from a server secret, the day, your IP address and your browser string, which changes every day;
• a session digest of the tab id and the day.

Neither can be turned back into an address, and neither links one day to the next. Your IP address and browser string are not stored.

If your browser sends Do Not Track or Global Privacy Control, the page-view beacon records nothing. Known crawlers and HEY’s own traffic are not counted either.

Some product events are recorded by the server itself, not the beacon: a search (its words, lower-cased and trimmed, but never a contract address), a scan, a page not found. Under Do Not Track or Global Privacy Control these are still counted, but without the visitor digest.

A scan keeps the address you scanned only when HEY found a contract or token there, to count which contracts readers ask about. An address with no contract, such as a wallet, is not kept: the scan is counted without it, and a scan page is counted as a scan page, never by its address.

HEY sets no advertising or analytics cookie and loads no third-party analytics script. Every cookie it sets is listed below, and each one keeps a feature working.

• hey_session30 days, or until you sign out; a moderator’s or admin’s ends after 12 hours idle or 7 days

  Keeps you signed in: your account id, a session id and its expiry, signed by HEY so it cannot be forged.

• hey_signed_inThe same as the session · readable by the page

  Tells the page header someone is signed in, so it can show the account link. It holds only “1”: no token and no identity.

• hey_oauth_state10 minutes

  Protects a GitHub sign-in against forgery and remembers the page to return to.

• hey_github_link10 minutes

  Links GitHub to the account you are signed in to: names that account and this session, signed by HEY, and works once.

• hey_wallet_challenge10 minutes

  Binds a wallet sign-in message to this browser while you sign it. Sent only to the wallet sign-in route.

• hey_board_share2 minutes

  Shows a research board’s new share link once, right after you turn sharing on.

• hey_early_access30 seconds

  Carries the outcome of a Research Terminal early-access request to the next page.

• hey_access_refresh30 seconds, or 2 minutes while the re-check runs

  Carries the outcome of a Research Terminal access re-check to the next page, or, while the re-check still runs, which re-check to follow.

• hey_starter_dismissed1 year

  Remembers that you pressed “Not now” on the Research Terminal’s starter set, so it is not shown again on this browser.

HEY’s scripts also keep a few values in your browser’s own storage. They stay on your device, except the two analytics values described above.

• hey_sUntil the tab closes

  A random tab id for first-party analytics. It lives as long as the tab and relates that tab’s page views to each other, and to nothing else.

• hey_seenKept until cleared

  The value “1”, so analytics can count a browser’s first visit. No identifier.

• hey-themeKept until cleared

  Your light or dark theme choice.

• hey-sidebarKept until cleared

  Whether you opened the site’s side navigation from its narrow rail.

• hey-builder-viewKept until cleared

  Whether you last chose the list or the card view for builder lists on Explore and the narrative pages.

• hey.terminal.recentSearchesKept until cleared

  Your recent Research Terminal searches, shown back to you.

• hey-terminal-preview-barUntil the tab closes

  That you closed the Terminal preview bar in this tab.

• hey-chart-events:…Until the tab closes

  Which event types you chose to show on a Terminal chart, for this tab.

• hey-wallet-sessionKept until cleared

  That you connected a wallet on this site, so the connection can resume. No address.

• hey:pending-transfer:…Kept until cleared

  A transfer your wallet sent that HEY has not recorded yet, so a reload never asks you to pay twice. Removed once recorded.

• hey:submit-draftUntil the tab closes

  Your unsent project-submission draft, for this tab.

• hey:alerts-unreadUntil the tab closes

  How many of your alerts are unread, kept for one minute in this tab so the header does not ask on every page.

• hey:follow-intentUntil the tab closes

  A project you asked to follow before signing in, so the follow completes after sign-in.

• hey-check-lastUntil the tab closes

  What you last checked in the search and HEY’s answer, for this tab, so pressing Back shows it again for half an hour. Never sent to HEY.

• hey:desk-intentUntil the tab closes

  A research desk you asked to follow or copy before signing in, so it completes after sign-in.

• hey_te_fromUntil the tab closes

  Which kind of page (a project page, search or other) you pressed a Terminal link on, read once when the Terminal opens and then removed.

• hey_te_sentUntil the tab closes

  That this tab has already counted one Terminal entry, so a tab is counted once.

• hey_sample_sentUntil the tab closes

  Which project this tab last counted as the Terminal’s open sample, so a tab counts it once.

• hey_tgapp_openedUntil the tab closes

  That this tab has already counted one opening of HEY’s Telegram Mini App, so a tab is counted once.

• hey:updates:visit:v1Kept until cleared

  When you last opened What changed without signing in, so the changes since then are marked New. Two times only; never sent to HEY.

• hey.admin.guide.v1Kept until cleared

  Staff console only: that you have read the five-line guide on the console’s first page, so it is not shown again. Never sent to HEY.

When you connect a wallet, the wallet libraries (RainbowKit, wagmi and WalletConnect) keep their own connection state in your browser’s storage.

An account is optional. It lets you follow projects, get alerts, claim a project, use an API key or use the Research Terminal.

• Wallet sign-in asks you to sign a standard sign-in message (ERC-4361) that says it moves no funds and grants no approval. It sends no transaction. HEY stores the address and a hash of the signature. It gives the account no display name, so no public page names you by your address; a Scout handle is shown only if you choose one.
• GitHub sign-in asks GitHub for your public profile only (read:user). It asks for organisation membership (read:org) only while you are proving you own a project’s GitHub organisation. HEY stores your GitHub id, login, name, account creation date and public repository count. It does not ask for your email, and it never stores GitHub’s access token.
• Sessions. A sign-in is recorded as a row with its method, start, expiry and last use. It holds no address and no browser details. Sessions last 30 days, and an ended session’s row is deleted 30 days later.
• HEY staff sign in to the console with an email address and a password, stored only as a salted hash.

What you keep in an account — followed projects, alerts, research boards, notes — is private to it unless you share it.

You can link one wallet to your account by signing a message. HEY keeps the address, a hash of the signature and when it was linked. An address belongs to one account at a time.

When HEY checks your linked wallet for a holding tier or for Research Terminal access, it reads the $HEY balance from the chain, decides, and keeps only the decision: the tier, whether the Terminal minimum was met, and the $HEY price and minimum it used. The balance, and any dollar value worked out from it, are not stored.

The one exception is the advisory funding vote: if you cast a ballot, HEY reads your linked wallet’s $HEY balance once at the closing block and stores it as that ballot’s weight. The ballot asks for that consent before it is cast.

If you pay for something in $HEY or another token, or put up a bond, your wallet sends the transfer. HEY records the transaction’s hash, the address it came from, the amount and what it was for. All of these are already public on the chain.

HEY has your email address only if you add one, on the Watchlist or from “Add an email address” on your account page, whether you signed in with GitHub or a wallet. Add or change it. HEY then sends one confirmation link, valid for 24 hours, and nothing else until you confirm. After that it sends only the kinds you leave on: a claim confirmed, research you asked for, bounty payouts, alerts (at most one email an hour) and the weekly digest (off unless you turn it on).

Email is sent through Resend, which receives your address and the message. Every email has a one-click unsubscribe link that works without signing in. You can remove your address at any time. HEY adds no open or click tracking.

You can get the weekly digest, a daily digest of What changed, or one project’s changes by email without an account. HEY then stores your address, what you asked for (and the project, for a project’s changes), whether you confirmed it, and which day or week it last sent — nothing else: no account, no password, no name. It sends one confirmation link, valid for 24 hours, and nothing else until you confirm; an address nobody confirms is deleted within two days.

Every email has a one-click unsubscribe link. It deletes the subscription and the address with it. If your account’s confirmed address has subscriptions, they appear in your account’s data download and are deleted with the account.

If you link HEY’s Telegram bot to your account, HEY stores the chat id, your Telegram user id and when you linked it. Telegram receives the messages the bot sends you, and your HEY display name when you confirm the link.

To unlink, use your account page, send /unlink to the bot, or block the bot. Each one deletes the link (the actor record below keeps which account was linked, so deleting your HEY account still deletes it).

When you use the bot or its Mini App — in a private chat, in a group, inline in any chat or in Guest Mode — HEY keeps your Telegram user id; the username Telegram supplies, if you have one — only the latest; a pseudonymous key derived from your id; when you first and last used HEY in Telegram; for 90 days, one record per interaction: where it happened (a private chat, a group, inline, Guest Mode, the Mini App), what it was (a lookup, a scan, a watch…), what it was about — the project, a contract or token HEY knows, or a $TICKER a token HEY holds carries, never the words you typed and never a wallet’s address — and how it ended; in a group, the group’s random key (never its chat id); if you linked a HEY account: which account, each alert HEY delivered to your chat and each click on an alert’s link — a delivery is never counted as your use. These records are for HEY’s own operators only: they are never published, never in HEY’s API, and never used to rank, score or order a project. Blocking the bot stops its messages in your private chat and clears your username; it does not stop the record — using HEY in a group, inline, in Guest Mode or in the Mini App records again, and any later use lifts the block. Records expire 90 days after your last use; deleting your HEY account deletes the record linked to it.

If HEY is added to a group, HEY keeps the group’s chat id — the one address its messages go to; whether HEY is still in the group, and when it was added and first used; the projects its admins chose to watch, and whether they asked for changes, a daily digest, or nothing; two random keys: one that counts the group’s use without its chat id, one that marks HEY links shared from the group. A lookup — in a group, inline in any chat, or in Guest Mode where HEY is not a member — is answered, counted and recorded as above. HEY never keeps the text of a message or a query — a lookup is resolved to the project, contract or $TICKER it named, and the words are forgotten; a group’s title, its members, its admins or its conversation (group privacy stays on, so HEY sees only what is addressed to it); your name, photo, phone number or contacts — only the username Telegram supplies, and only the latest one. Nor, ever: Telegram’s signed Mini App launch data — it is checked, used to attribute the open to your Telegram user id (or to leave HEY’s own staff out), then dropped; joining a group, or messaging anyone, unasked; price, holder or trading alerts. Removing HEY from a group stops its messages at once; the group’s record and watched projects stay so an admin who adds HEY back finds them, and HEY stays quiet until an admin turns delivery on again.

For each call to the public API or the hosted MCP server, HEY records the route pattern (not the full address), the method, the status, the time taken and the response size. It also records the key and account, if a key was sent, and a digest of the caller that changes every day. Raw rows are kept for 90 days. An MCP client’s self-declared name and version are recorded too.

API keys are stored only as a hash. HEY shows a key once, when you create it.

A webhook stores the address you give it, its description, and the events and projects it follows. Its signing secret is derived when it is needed, not stored. Deliveries carry only the public change events /api/changes already serves, with no HEY credential. HEY keeps a delivery’s status and the first 256 bytes of your endpoint’s reply for 30 days.

• Project submissions keep your account, what you entered, and a salted hash of your address for spam review.
• Claims keep the proof you chose: a DNS record, a file or meta tag on the site, GitHub administration, or a signature from the token’s launcher, owner or deployer, or the fee recipient its Pons launch names. For a signature, HEY keeps the address and a hash of the signature.
• Owner updates and Scout research notes are published on the project’s page, labelled with how HEY checked them. A Scout handle is shown only if you choose one.
• Ask HEY questions are stored with your account. When the model layer is switched on, the question and HEY’s evidence lines for the project are sent to Anthropic to draft the answer. Nothing else about you is sent.
• Error reports (“Report an error on this page”) keep your account, the reason you chose and up to 500 characters of your own words. Only moderators see them; the page never shows them.
• Claim and submission attempts are counted against a salted hash of your address for 30 days, to stop abuse.

Pages are rendered from HEY’s own database: showing you a page sends nothing about you to a data provider. These services do receive data:

• Cloudflare handles every request to the site.
• Project websites. Most logos load through HEY, but a logo on a host HEY does not proxy loads straight from the project’s own site, which then sees your request.
• GitHub, when you sign in with it.
• WalletConnect (Reown) and your wallet, when you open a wallet control or the sign-in page, and when you connect.
• A Robinhood Chain node, which HEY asks for the balance of a linked address, and to check a smart-account signature.
• Resend, for a confirmed email address.
• Telegram, when you link the bot.
• Anthropic, for an Ask HEY question, as above.
• Uniswap Labs, for an indicative quote. When a Research Terminal reader asks for a Uniswap quote, HEY sends Uniswap the token, the amount typed and a fixed placeholder in place of an address. Your address is never sent, and HEY stores no quote.
• Your own webhook endpoints, which receive public change events.
• Scans. A scan sends the contract address you entered to the chain, its explorer and the market and code sources HEY reads. It sends nothing about you.

Quotes are provided by the Uniswap Labs API. Using them is subject to Uniswap Labs’ Terms of Service and Privacy Policy. HEY sends Uniswap no reader address — every quote is asked with a fixed placeholder swapper — and stores no amount and no quote.

For Uniswap Labs’ own handling of the data, see its Privacy Policy. HEY does not sell, rent or trade personal data, and shows no advertising built on it.

You can delete your account yourself, under “Your data” on your account page. Your own records are deleted in one step and every session ends. What HEY must keep — the treasury’s record of a transfer, a closed vote’s tally, published research and updates, error reports and the audit trail — stays with nothing linking it to you. Signing in again starts a new account.

• Deleted: your name, handle, bio, GitHub id and login, and email address; your sessions; linked wallets; email settings and the record of what was sent; the Telegram link and its messages; API keys and their usage counters; webhooks and their delivery records; follows, alerts, research boards, and the desks you follow or reported; Research Terminal settings; ballots in rounds still open; research notes not yet approved; scout credits; and your claims on projects, so those projects become unclaimed.
• Kept, with nothing linking it to you: the treasury’s records of transfers you made or received — bonds, payments, bounty funding and payouts, placements and research requests — with the transaction, its addresses and amount, which the chain publishes anyway; a closed round’s ballot weight, without its address; approved research notes, owner updates and project relationships; projects you submitted, without the address hash kept for spam review; error reports and flags you raised; Ask HEY questions, which are a shared cache; API request rows, without the account and key, until they age out after 90 days; and audit lines, with your name, email and addresses removed from them.
• A desk you published is unpublished and its words cleared. Its address is kept, empty, so nobody else can take a link its readers hold.
• For your safety, deleting needs a sign-in from the last 15 minutes and the words “delete my account” typed out.

Deletion waits while money is still moving for your account — a bond HEY holds, a payout not yet sent, an open bounty you funded, or a payment being checked — so nothing owed to you is stranded. The page says which.

The copies of the database HEY keeps for recovery still hold a deleted account until they are replaced: each nightly copy after 7 days, a copy taken before a deployment after 3 more deployments, and the hosting provider’s automatic snapshots on its own schedule. HEY uses them only to recover the service and to test that recovery works.

You can also download everything HEY holds about your account as one JSON file from the same place. It never includes a secret, such as an API key’s hash, or anyone else’s data. API keys appear by their first characters only. Up to 3 downloads an hour, each after a sign-in from the last 15 minutes.

If you can no longer sign in and want your account deleted, write to hi@heyresearch.xyz from somewhere that shows it is yours; HEY deletes it the same way.

• Raw web server log: at most 48 hours.
• Page views, product events and API request rows: 90 days. Daily and hourly totals built from them: 400 days.
• Sessions: 30 days, and the row 30 more days after it ends.
• Abuse counters for claims and submissions: 30 days.
• Webhook delivery records: 30 days.
• An email subscription without an account: until you unsubscribe, or two days if nobody confirms it. Your account and what you keep in it: until you delete it. Your email address: until you remove it or delete the account. What deletion keeps is listed above.

• Read without an account, a wallet or an email address.
• Turn on Do Not Track or Global Privacy Control, and the page-view beacon stops.
• On your account page: unlink your wallet or Telegram, revoke your API key, manage webhooks and sign out.
• Under Your data on the same page: download everything HEY holds about your account, or delete it.
• Remove your email address, or switch off any kind of email, on the Watchlist or from any email’s unsubscribe link.
• End an email subscription you made without an account from the unsubscribe link in any of its emails: the address is deleted with it.
• Clear this site’s storage in your browser to remove everything listed under browser storage.

Anything else about your data: write to hi@heyresearch.xyz.

When this page changes, its date changes. The Terms cover using the site and its data. Questions: hi@heyresearch.xyz.