BI$Binance Legenew$20.2K+9.7%NF$NFLnew$25.9K+19.3%$TURFnew$26.9K+99.4%WT$WTCXnew$11.0K$Tpscrollnew$23.6M+33.6%$GAMBITnew$47.8K+15.7%$XTOnew$144M+347477.0%比特$比特柴犬new$391K+119.0%咯咯$咯咯new$13.8K+62.7%$‮KEKnew$996K+17.3%$CYBERCATnew$14.8K+45.2%$NFLnew$26.2K+20.2%$SpaceXnew$445K+973.0%TE$TEWXnew$11.0K🐯W$🐯WOJnew$156K+193.0%$SLOPINUnew$22.8K+381.0%TI$TINGnew$11.8K+35.3%$yoki酱new$30.1K+52.2%咯咯$咯咯new$13.0K+48.2%$MESHnew$36.4K+71.3%JR$JRMXnew$11.0K$fomonew$469K+1032.0%$大肥鱼new$11.4K+21.4%咯咯$咯咯new$142K+1509.0%$SLOPINUnew$11.4K+19.9%$AXAnew$10.5K+5.0%$SLOPINUnew$50.8K+384.0%$yoki酱new$21.0K+6.1%BI$bitnew$39.0K+12.7%$Novlampnew$81.9K+60.8%$CYBERCATnew$26.1K+156.0%咯咯$咯咯new$88.1K+901.0%$VEIL$761K-40.3%$PAID$2.6M-9.6%$BATON$5.0M-7.7%$DARK$826K-13.8%$XTO$13.3M+10.0%$MISTAKE$94.1K-87.8%$HOOKED$999K-18.6%$E/ACC$403K-13.3%
Website blueprint · 19 Oct 2026

www.privy.ac

“Privy | Anonymous Crypto”

Template-written 51 evidence items REA analysed 20 scripts
What this means for you

Privy only talked to its own servers while we watched.E1

  • Tech check: the site claims trading / swaps / bots and a working app / platform, and its public page shows matching evidence.E50E51E48E18E19
  • We saw no known analytics or advertising services load on the first visit.E1
  • Its code still includes Vercel Analytics, which may switch on later (for example after you accept cookies or sign in).E9
  • Its code can ask your wallet to sign transactions. Read every wallet pop-up before approving.E48

Tech check

What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.

Evidence found

Trading / swaps / bots

“…is live - Privmh19vUQL5DWZukegskZgnvKTj7eXgDjbz3LR1yG Swap Send (ZK) Points Activity Profile Docs Solana BNB SOON…”E50

Transaction requests to your wallet: signTransactionE48

Evidence found

A working app / platform

“…eloper docs privy.ac/docs Build the next generation of open applications and tools. Points EXAMPLE Weekly points 12,48…”E51

Calls to its own backend: /api/tokens/search, /api/stats, /api/auth/sessionE18E19E20E21

Wallet code: WalletConnect / Reown, Solana web3 / wallet adapter, PhantomE11E12E13

Live connections: keeps a live two-way connection open to a serverE16

Calls its own backend /api/tokens/search, /api/stats, /api/auth/sessionE18E19E20E21
Wallet code WalletConnect / Reown, Solana web3 / wallet adapter, PhantomE11E12E13E48
Contract calls in its code none seen
Talks to AI services none seen
Live connections keeps a live two-way connection open to a serverE16

What it is

  • The site describes itself as: “Buy and sell Solana tokens through separate, Privy-managed trading wallets, with proceeds paid back to your own wallet.”E2
  • It's built with Next.js and React (common tools for building web apps).E7E8
  • In your browser it can copy text to your clipboard, saves small bits of data in your browser and keeps a live two-way connection open to a server.E14E15E16
  • It has sections such as /points, /activity, /profile, /docs, /support and /contact.E46E47
  • While loading, it called 4 endpoints on its own servers, such as /api/tokens/search, /api/stats, /api/auth/session and 1 more.E18E19E20E21

Where your data goes

On a first visit the page only talked to its own servers (privy.ac, www.privy.ac).

Crypto and wallets

  • Wallet tools in the code: WalletConnect / Reown, Solana web3 / wallet adapter and Phantom.E11E12E13
  • signTransaction: asks a wallet to sign transactions (often Solana wallets).E48
  • signMessage: asks a wallet to sign a message.E49

How key features work

What it can ask your wallet to sign

Its code can ask your wallet for signTransaction. Each of these opens a wallet pop-up you must approve; read it before you click.E48

signTransaction

Connecting your wallet

It connects to crypto wallets using WalletConnect / Reown, Solana web3 / wallet adapter, Phantom, signTransaction and 1 more. Connecting shows the site your wallet address; it doesn't move funds by itself.E11E12E13

WalletConnect / ReownSolana web3 / wallet adapterPhantomsignTransactionsignMessage

AI features

Parts of the site talk to AI services or AI endpoints (/api/chat and /api/copilot/chat). Text you type there may be sent to them.E25E26

/api/chat/api/copilot/chat

Sign-in and accounts

Sign-in and account features show up in its code or traffic (/api/auth/session, /api/user/terms, /api/user/preferences and /api/auth/nonce).E20E32E40E10

/api/auth/session/api/user/terms/api/user/preferences/api/auth/nonce

Live updates

It keeps live connections open (WebSockets) so content updates without reloading.E16

websocket

Loading its content

Its content loads from its own API while you browse (/api/tokens/search, /api/stats, /api/auth/session and /api/tokens/trending).E18E19E20E21

/api/tokens/search/api/stats/api/auth/session/api/tokens/trending

Search

Search runs through /api/tokens/search.E18

/api/tokens/search

Pages and API calls

Pages it links to

//points/activity/profile/docs/support/contact/terms/privacy/risks/cookies/_next/image

Endpoints

Called while loading (seen) or named in the code (code).

www.privy.ac/api/tokens/searchseenE18
www.privy.ac/api/statsseenE19
www.privy.ac/api/auth/sessionseenE20
www.privy.ac/api/tokens/trendingseenE21
/api/token-image/So11111111111111111111111111111111111111112codeE22
/v1/creditscodeE23
/v1/realtime/client-secretscodeE24
/api/chatcodeE25
/api/copilot/chatcodeE26
/api/copilot/conversationscodeE27
/api/copilot/actionscodeE28
/api/token-imagecodeE29
/api/wallet/holdingscodeE30
/api/swap/quotecodeE31
/api/user/termscodeE32
/api/trade/intentscodeE33
/api/trade/sellscodeE34
/api/trade/historycodeE35
/api/trade/positionscodeE36
/api/trade/activitycodeE37
/api/developer/keyscodeE38
/api/pointscodeE39
/api/user/preferencescodeE40
/api/auth/noncecodeE41
/api/auth/verifycodeE42
/api/auth/logoutcodeE43
/api/v1/openapi.jsoncodeE44
/api/v1codeE45

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Page title: Privy | Anonymous Crypto
page title · https://www.privy.ac/
E2
Page description: Buy and sell Solana tokens through separate, Privy-managed trading wallets, with proceeds paid back to your own wallet.
page description · https://www.privy.ac/
E3
Site name: Privy
page site_name · https://www.privy.ac/
E4
Main heading: Make your moves, keep them private.
page h1 · https://www.privy.ac/
E5
1 request(s) to privy.ac
types: 1 document
GET https://privy.ac/ · document · network recording
E6
71 request(s) to www.privy.ac
types: 31 fetch, 19 image, 17 script
GET https://www.privy.ac/ · fetch · 71 requests · network recording
E7
Next.js detected by REA (next-runtime)
confidence: high
www.privy.ac/_next/static/immutable/chunks/2o31cjsaootyv.js · “next-runtime” · REA analyze-web-bundle 6.4.0
E8
React detected by REA (react-runtime)
confidence: medium
www.privy.ac/_next/static/immutable/chunks/0p8sieem4nuiy.js · “react-runtime” · REA analyze-web-bundle 6.4.0
E9
Vercel Analytics found in the code
www.privy.ac/ (page HTML) @ 1:3034 · “/_vercel/insights” · pattern scan
E10
NextAuth / Auth.js found in the code
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:39861 · “/api/auth/session” · pattern scan
E11
WalletConnect / Reown found in the code
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 7:83343 · “WalletConnect” · pattern scan
E12
Solana web3 / wallet adapter found in the code
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 13:20 · “wallet-adapter” · pattern scan
E13
Phantom found in the code
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:30930 · “phantom.app” · pattern scan
E14
Uses the browser ability: clipboard_write
can copy text to your clipboard
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 1:253 · “clipboard.writeText(” · pattern scan
E15
Uses the browser ability: local_storage
saves small bits of data in your browser
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:113286 · “localStorage.setItem(” · pattern scan
E16
Uses the browser ability: websocket
keeps a live two-way connection open to a server
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 12:7608 · “new WebSocket(” · pattern scan
E17
Uses the browser ability: canvas
draws graphics on a canvas
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:214046 · “getContext("2d"” · pattern scan
E18
The page called /api/tokens/search on www.privy.ac (GET)
GET https://www.privy.ac/api/tokens/search · fetch · network recording
E19
The page called /api/stats on www.privy.ac (GET)
GET https://www.privy.ac/api/stats · fetch · network recording
E20
The page called /api/auth/session on www.privy.ac (GET)
GET https://www.privy.ac/api/auth/session · fetch · network recording
E21
The page called /api/tokens/trending on www.privy.ac (GET)
GET https://www.privy.ac/api/tokens/trending · fetch · network recording
E22
The code names the endpoint /api/token-image/So11111111111111111111111111111111111111112
www.privy.ac/ (page HTML) @ 1:14981 · “/api/token-image/So11111111111111111111111111111111111111112” · pattern scan
E23
The code names the endpoint /v1/credits
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:1975 · “/v1/credits” · pattern scan
E24
The code names the endpoint /v1/realtime/client-secrets
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:55742 · “/v1/realtime/client-secrets” · pattern scan
E25
The code names the endpoint /api/chat
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:82122 · “/api/chat” · pattern scan
E26
The code names the endpoint /api/copilot/chat
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:112633 · “/api/copilot/chat” · pattern scan
E27
The code names the endpoint /api/copilot/conversations
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:113184 · “/api/copilot/conversations” · pattern scan
E28
The code names the endpoint /api/copilot/actions
www.privy.ac/_next/static/immutable/chunks/11dvrl0hwwc2a.js @ 91:119557 · “/api/copilot/actions” · pattern scan
E29
The code names the endpoint /api/token-image
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:26052 · “/api/token-image” · pattern scan
E30
The code names the endpoint /api/wallet/holdings
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:28468 · “/api/wallet/holdings” · pattern scan
E31
The code names the endpoint /api/swap/quote
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:39048 · “/api/swap/quote” · pattern scan
E32
The code names the endpoint /api/user/terms
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:45790 · “/api/user/terms” · pattern scan
E33
The code names the endpoint /api/trade/intents
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:47798 · “/api/trade/intents” · pattern scan
E34
The code names the endpoint /api/trade/sells
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:56926 · “/api/trade/sells” · pattern scan
E35
The code names the endpoint /api/trade/history
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:71570 · “/api/trade/history” · pattern scan
E36
The code names the endpoint /api/trade/positions
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 1:315 · “/api/trade/positions” · pattern scan
E37
The code names the endpoint /api/trade/activity
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 1:1139 · “/api/trade/activity” · pattern scan
E38
The code names the endpoint /api/developer/keys
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 1:1182 · “/api/developer/keys” · pattern scan
E39
The code names the endpoint /api/points
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 1:1204 · “/api/points” · pattern scan
E40
The code names the endpoint /api/user/preferences
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:37333 · “/api/user/preferences” · pattern scan
E41
The code names the endpoint /api/auth/nonce
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:40036 · “/api/auth/nonce” · pattern scan
E42
The code names the endpoint /api/auth/verify
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:40177 · “/api/auth/verify” · pattern scan
E43
The code names the endpoint /api/auth/logout
www.privy.ac/_next/static/immutable/chunks/1gh2et-1m8gc_.js @ 485:40410 · “/api/auth/logout” · pattern scan
E44
The code names the endpoint /api/v1/openapi.json
www.privy.ac/_next/static/immutable/chunks/1n83zdym_uidp.js @ 1:8432 · “/api/v1/openapi.json” · pattern scan
E45
The code names the endpoint /api/v1
www.privy.ac/_next/static/immutable/chunks/2wklsxyp8-v21.js @ 35:6183 · “/api/v1” · pattern scan
E46
12 links to pages on the same site
page links · https://www.privy.ac/ · /, /points, /activity, /profile, /docs, /support, /contact, /terms, /privacy, /risks, /cookies
E47
REA found the route /_next/image
www.privy.ac/_next/static/immutable/chunks/2o31cjsaootyv.js @ 1:13114 · “/_next/image” · REA analyze-web-bundle 6.4.0
E48
Wallet request in code: signTransaction
asks a wallet to sign transactions (often Solana wallets)
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:47357 · “signTransaction” · pattern scan
E49
Wallet request in code: signMessage
asks a wallet to sign a message
www.privy.ac/_next/static/immutable/chunks/31s-qtfd7aa69.js @ 1:47343 · “signMessage” · pattern scan
E50
The site says: “…is live - Privmh19vUQL5DWZukegskZgnvKTj7eXgDjbz3LR1yG Swap Send (ZK) Points Activity Profile Docs Solana BNB SOON…”
page text · https://www.privy.ac/ · …is live - Privmh19vUQL5DWZukegskZgnvKTj7eXgDjbz3LR1yG Swap Send (ZK) Points Activity Profile Docs Solana BNB SOON…
E51
The site says: “…eloper docs privy.ac/docs Build the next generation of open applications and tools. Points EXAMPLE Weekly points 12,48…”
page text · https://www.privy.ac/ · …eloper docs privy.ac/docs Build the next generation of open applications and tools. Points EXAMPLE Weekly points 12,48…

Limits

  • We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
  • Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
  • Some trackers only load after you accept cookies or log in, so the real list can be longer.
  • We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
  • The tech check compares the site's own words with what its public page loads. Work done on servers, in private code or in separate apps isn't visible here, so 'nothing found' means not visible on the public page, not that it doesn't exist.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
  • REA hit its size budget on parts of 17 large bundle file(s); those parts weren't fully analysed.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id ALiEU74O.