Security

Protect yourself

The cards above are what the software does on its own. These are the things only you can do.

• Check the address bar. Bookmark spacedust.cc and reach the app from that bookmark. If you arrived from a link or an ad, read the domain before you connect anything.
• Refuse a prompt you do not understand. A wallet prompt should match what you asked the app to do. If it does not, reject it — closing a signature you did not want costs nothing.
• Read the preview before you sign. Spacedust shows the real simulation result for the exact bytes, along with the programs each transaction touches and what it costs. That is the moment to check the plan matches what you intended.
• Keep a little SOL. Fees are paid in SOL. At a zero balance a sweep cannot land, even when it would have been profitable.

What Spacedust does with your data

Your wallet address goes to this app's own server routes, so they can query Helius and Jupiter on your behalf, and to an RPC endpoint to simulate and submit. It is not stored, not sent to any tracking or analytics service, and never tied to an identity.

The only things kept in your browser are a few preferences and a log, in localStorage: your dust threshold, the output asset you chose, the smart-filter toggle, your past-sweep history, the site-wide tally those sweeps add to, the assets you have hidden, the addresses of lookup tables whose rent is still waiting to be reclaimed, and whether that rent should be reclaimed automatically. The one exception is the interface mode, Basic or Pro, which lives in sessionStorageand is deliberately forgotten when you leave so the destructive tools are never waiting for you by default. None of it leaves the device.

To disconnect the wallet and clear every store, including the WalletConnect session, use Delete my data.

The QR scanner decodes a code on the device with the camera and uploads nothing; the camera stops the moment the dialog closes.

Known limits, stated plainly

Routing is provided by Jupiter, and prices come from Jupiter and Helius. Spacedust cannot promise a swap will succeed, and the tokens it deals with are frequently worthless or deliberately hostile. A failed swap costs the network fee and nothing else — it cannot cost you the contents of your wallet.

Some things are refused rather than attempted. A mint with a transfer hook is never swept, because a hook runs code on every transfer and this app does not sign instructions whose effects it cannot see. A liquid staking token, and a program-controlled mint that no market prices, are left out of the swap list rather than sold. A transfer-fee mint is swapped but skipped for rent reclaim, because the fee leaves a residue that would make the close fail. And if you swap only part of a balance, the account still holds the rest, so its rent is not reclaimed either.

If something looks wrong

Stop, and do not sign. Check the transaction on Solscan, compare it against what the app said it would do, then disconnect. Everything Spacedust builds can be inspected before you approve it: the programs each transaction touches, the simulation result, the transaction count, the size of each one and the compute it uses.