Privacy Policy

Last updated: September 27, 2026

What we collect

When a shop owner signs in with Google, we receive their Google account ID, name, email address, whether the email is verified, and profile picture. If the owner allows it, we also read the list of Google Business Profile locations their account manages and whether Google has verified them as the owner of each one. When anyone pastes a Google Maps link, we read the public place it points to (name, address, position, website). When you connect a wallet, we see its public address and a signature you create to prove you own it.

What we do not collect

We never see your Google password. We never post, reply, edit your business listings or change anything in your Google account — the access we ask for is used only to read which listings you manage. We never see your wallet's private key or seed phrase.

How we use it

Only to run the site: to decide whether you can claim a shop's tip jar, to send the jar to the wallet you link, and to let us stop fake claims (the email of a pending claim is shown to the site admin during the safety window).

Google user data

Main St's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to anyone.

Storage and deletion

Sign-in sessions live in memory and expire after 12 hours; the list of your listings is not stored after that. For a claim waiting in the safety window we keep your email and Google account ID until it is paid or cancelled. Coin launches, jar payments and wallet links are recorded on the Solana blockchain, which is public and cannot be deleted by anyone. To have anything we store about you deleted, contact us at the address on our X account.

Not affiliated

Main St is not affiliated with Google LLC, pump.fun, or any shop listed on the site. Map data © OpenStreetMap contributors.