What we collect, and what we don’t.

MSR Decode is operated by Main Street Research LLC. This policy covers mainstreetres.com and every page on it, including the wallet-decode console, the copy-ticket intake, and the Scorecard nomination and alert forms.

When you submit a form on this site — the free wallet check, a copy ticket, a flip alert, a Scorecard subscription, or a nomination — we collect:

• Your email address, so we can respond to the request or send the alert you asked for.
• The wallet address or handle you submitted, so we can run or reference the decode.
• Optional position-size information, on the copy-ticket form only, if you choose to provide it — used to gauge interest in the routed-copy beta, nothing else.
• Your browser’s user-agent string and the page you submitted from (referer), on every form submission — standard request metadata, kept for abuse prevention and debugging.
• A salted hash of your IP address (not the IP address itself), on wallet-decode requests only — used to rate-limit the free-decode queue and nomination form so one visitor cannot exhaust either. The hash cannot be reversed to an IP without the server-side salt, which is never stored alongside it.

We do not ask for or collect passwords, payment details, or government identifiers anywhere on this site.

Form submissions are written to a Supabase database, table msr_leads. The table is insert-only: the publishable key our forms use can add a row, but that same key cannot read, update, or delete any row — nothing already in the table can be retrieved through it.

Only to respond to the request you made: sending the decode you asked for, following up on a copy ticket, sending the monthly Scorecard, or emailing a flip alert. We do not use your email for anything you did not ask for, and we do not sell, rent, or share your data with any third party.

We use Vercel’s built-in Web Analytics, which is privacy-friendly by design — it does not use cookies and does not track individuals across sites. We run no other analytics, tracking pixels, or third-party ad scripts.

To have your email and any associated submission deleted, contact cparkreal25@gmail.com. We will confirm deletion by email.

Corrections and changes. If this policy changes in a way that affects how existing data is used, we will update this page and note the change. See Terms of Use for how we handle corrections to published claims generally.