Your passkey's public key and credential id, and the Tempo address from it, to sign you in. The private key never leaves your device.
A session cookie (cwf_passkey, 30 days) for the faucet claim and the live stream's ticket.
A random install id sent with fee-relay requests, so fee budgets hold per device. No name or email is ever asked.
The relay's ledger: the network fees it paid for you, by address and install id.
IP addresses only as hashes, to rate-limit the faucet and a few endpoints.
Page-speed timings with the route only: no account, no address.
Your country is read per request to keep markets closed where they aren't allowed. It isn't stored.
Your public name and bio, if set, on your profile and beside your posts.
Takes, room messages and reactions: public, with your address. Filtered words are starred when shown; the original is kept.
Follows, blocks and reports. Who you block and what you report are never shown to them.
A social session cookie (cwf_social, 30 days) when you sign in with a wallet: one signature lets this browser post as you.
A moderator may hide a reported post. Hidden posts stay stored until you delete your data.
When you ask, the server sends that provider your question, up to 12 turns of the conversation and the figures on your screen: prices, the Window's line and prices, your positions as amounts, your settled record, earnings dates.
Never your address, keys, name or email. The conversation isn't stored; it stays in your tab.
Stop sharing from Sensei or from Settings → Account.
Price alerts, notification choices, the AI agreement and display settings live in your browser's storage. The servers never see them.
The topic, your message, an email only if you gave one, and your address only if you were signed in.
Settings → Account downloads everything kept off chain about your account as one file, and deletes it: profile, takes, messages, reactions, follows, your blocks and reports, game seats and signed-in contact messages.
Deleting asks for a fresh signature, waits five seconds so you can undo, and ends your sessions. Blocks others placed on you stay theirs.
Your passkey's public key (and any backup's) stays: your Tempo account still exists, and that key signs you in to it.
Your address, trades, balances and receipts are public on the blockchain. Mitoshi's indexer reads that public record to show your positions and history, as anyone could.
Tempo's RPC receives the transactions you sign.
Prices reach you from Mitoshi's servers, which fetch them from RedStone and the display feeds.
Tempo Wallet or WalletConnect, if you sign in with one, handles that sign-in under its own policy.
The AI provider Sensei names receives what's listed above, under its API terms.
Notifications are made on your device, only if you allow them.
Mitoshi runs on Tempo testnet. It handles no real money.