Privacy policy
Updated September 27, 2026. This page mirrors the privacy policy at corium.so/#/privacy, which is authoritative.
This policy explains what information KOIA LLC ("KOIA", "we", "us") collects when you use Corium (corium.so), how we use it, who else handles it, and your choices. Corium is built to need very little: there are no accounts with emails or passwords, no cookies beyond sign-in, and no advertising or third-party trackers.
Who we are
Corium is operated by KOIA LLC, a Wyoming limited liability company, 1309 Coffeen Ave Ste 1200, Sheridan, Wyoming 82801, USA. For the purposes of data protection laws such as the GDPR, KOIA is the controller of the personal information described here. Contact: corium.so@proton.me.
Public blockchain data
Your wallet address and everything you do on Solana through Corium (launching coins, trading, claiming bounties) are recorded on a public blockchain that anyone can read, forever. Corium reads this public data to show prices, charts, holders, rankings and bounties. We do not control it and cannot change or delete it.
When you sign in
Signing in is a message you sign in your wallet; it costs nothing and moves no funds. We keep your wallet address, the exact message you signed and its signature, as the record that you agreed to a specific version of the Terms of Use. We create a public profile for your wallet: a generated name you can change, and an optional bio, profile picture and verified X handle.
Following, watching and calling
Who you follow and who follows you, and the counts, are public on your profile. The coins you watch are private to you. A callout you make is public: the coin, your note, the time and the price when you made it, and what happened after, which Corium reads from public trades (including whether you sold the coin after calling it). We keep when you last opened your notifications, so we can show what is new.
Telegram alerts
If you connect Telegram, we keep your Telegram chat ID and username, which app the bot's buttons open (Phantom, Solflare or a browser) and whether you muted it, and send you alerts through Telegram, which handles them under its own privacy policy. The bot's buttons only open Corium; they never trade or see your keys. /stop in the bot, or Disconnect on your profile, deletes the link.
X handle
To show a verified X handle on your profile, you post a code on X and give us the post's link; our server then reads that one public post through X's public embedding service, so X sees a request from our server, not from you. We keep only the handle and when it was verified, and it is public on your profile. You can delete the post afterwards and remove the handle at any time.
Supernova clips
Clips are made in your browser, on your device. Nothing is uploaded unless you choose to share the file yourself.
What you post
Chat messages, replies and likes, and the coins you launch (name, ticker, description, links and image), are public. Coin images, coin metadata and profile pictures are published to IPFS through Pinata. IPFS is a public, content-addressed network: once a file is published there, copies can persist and cannot be reliably deleted.
Sessions
When you sign in we set one cookie holding a random session token. We store only a hash of that token, with your wallet address, the times it was created and last used, and your browser's user agent string, so we can keep you signed in. A session ends after 14 days without use and at most after 30 days, or when you sign out. Your browser's local storage also remembers which wallet you last connected; that never leaves your device.
IP addresses and logs
Our server uses your IP address, in memory only, to rate-limit requests and stop abuse; it is not written to our database. Our hosting providers keep standard request logs, which include IP addresses, for security and operations, under their own retention policies.
Counting visits
We count visits ourselves, without cookies and without any analytics company. For each page you open we record the page, the site that sent you there (its domain only), campaign tags in the link (such as utm_source), whether the device is a phone or a computer, and a visitor code. The code is made from your IP address and browser with a secret that changes every day and is never stored, so it cannot be traced back to you or linked across days; your IP address itself is not recorded. We also note, under the same code and without your wallet address, when a visit leads to a sign-in, a trade, a launch or connecting Telegram. These records are deleted after 13 months.
What we do not do
We do not use third-party analytics or advertising trackers, we do not sell your personal information, and we do not share it for targeted advertising. We do not ask for your name, email address, phone number or identity documents.
How we use information
To run Corium: sign you in and keep you signed in, show profiles, chat, coins, rankings and share cards, compute and publish supernova bounties, prevent abuse (rate limits, moderation and bans), keep the service secure, and comply with the law. Under the GDPR our legal bases are performing our agreement with you (the Terms of Use) and our legitimate interests in keeping Corium secure and free of abuse; where the law requires us to keep or disclose information, legal obligation.
Moderation
When we hide a message or coin or ban a wallet, we record what was done, by which moderator wallet, and when, so moderation is consistent and reviewable.
Service providers
These providers process information for us, each under its own terms and privacy policy: Cloudflare (serves the website), Fly.io (runs our servers), Supabase (hosts our database), Helius (Solana network access; your requests reach it through our server, not from your browser), Pinata (IPFS publishing), Jupiter (the SOL price, which your browser fetches directly, so Jupiter sees your IP address), Telegram (alerts, if you connect it) and X (reading the one post you give us to verify a handle). Your wallet app is provided by its developer under their own policy. We may also disclose information when required by law or to protect Corium and its users.
Where information is processed
Our providers operate in the United States, the European Union and other countries. Where information leaves the EU or UK, we rely on the safeguards those providers offer, such as the European Commission's standard contractual clauses.
How long we keep it
Sign-in records are kept for as long as we may need to show which terms you agreed to. Profiles, chat, likes, follows, your watchlist and callouts are kept until you ask us to delete them or we remove them; a Telegram link until you disconnect it; visit counts for 13 months. Session records are kept until they expire, then deleted. Moderation records and bans are kept while needed to enforce them. On-chain data and IPFS files are outside our control.
Your rights
You can see and change your profile in Corium at any time. You can ask us for a copy of the information we hold about your wallet, to correct it, or to delete your profile, chat messages, likes, follows, watchlist, callouts and Telegram link from our servers, by emailing us; to confirm the request is yours we may ask you to sign a message with the wallet. If you are in the EU, the UK or a similar jurisdiction, you also have the rights to object to or restrict processing and to data portability, and you can complain to your data protection authority. If you are a California resident, you have the rights to know, delete and correct personal information and not to be discriminated against for using them; we do not sell or share personal information as the CCPA defines those terms.
Children
Corium is only for people 18 or older. We do not knowingly collect information from anyone younger; if you believe a child has used Corium, contact us and we will delete what we hold.
Security
Traffic is encrypted, we store only hashes of session tokens, and access to our systems is limited. No system is perfectly secure, and Corium never has access to your wallet's keys or funds.
Changes
We will post any update to this policy here with a new date, and point out significant changes in Corium.
Contact
KOIA LLC, 1309 Coffeen Ave Ste 1200, Sheridan, Wyoming 82801, USA. Email: corium.so@proton.me.