KARMAN

Privacy policy

Updated 7 November 2026

Karman has no accounts, no sign-up, no email list and no analytics. This page lists the little it does handle.

What the service sees

  • IP address. The API reads it to count free quote calls (30 a day). The counter lives in server memory for one day and is never written to a database or shared.
  • Request content. Token, strike, expiry and the wallet address you send to the execution endpoints are used to build your transaction and are not stored by Karman. The hosting provider keeps standard request logs for a short period for security and debugging.
  • Payment authorizations. An x402 payment is an EIP-3009 authorization signed by your wallet; once settled it is public on Robinhood Chain, like every transaction.
  • Wallet connection on the desk. The site only asks your wallet for an address when you click Connect wallet. It keeps nothing after you close the page.

What is public by nature

Addresses, option positions, payments to KarmanRouter and every transaction you send are public on Robinhood Chain and cannot be erased by anyone. The live line and the counters are built from those public records.

GDPR

The legal basis for the IP counter is legitimate interest (keeping the free tier fair). You can ask for access, rectification or erasure of any personal data the operator holds about you, object to its processing, or complain to your data protection authority. Write to the operator through X. Since nothing is stored beyond a day, there is usually nothing to return or erase.

Third parties

The site is hosted on Vercel. Prices come from public market data endpoints called by the server, never by your browser. Fonts are served from the site itself.