Trust center

Security by design

RefundMySol is non-custodial by design. This page explains exactly what the app can and cannot do with your wallet.

We never ask for keys

No seed phrase, private key, or keystore file. There is no field anywhere in this app that accepts one, and no support agent will ever ask. If anyone does, it is a scam.

You sign every action

Transactions are built in your browser and sent to your wallet for approval. You see the exact accounts, burns and fees before signing, and you can cancel at any point.

Read-only by default

Scanning uses public Solana RPC reads. Until you explicitly approve a transaction, nothing about your wallet can change.

Funds go straight to you

Reclaimed rent is credited to your own wallet by the network itself. We never take custody, and we cannot move, hold or freeze your assets.

What burning means

Some accounts still hold a small token balance. Solana will not let an account be closed while it holds tokens, so recovering its rent requires destroying that balance first. Burning is irreversible: the tokens cease to exist and neither we nor anyone else can restore them.

Because of that, burns are never automatic. We show you the tokens, their market value where a price is available, and require an explicit confirmation before a burn instruction is ever included in a transaction.

What we protect

Wrapped SOL accounts, frozen accounts and accounts with an active delegate are marked protected and cannot be selected. Accounts holding meaningful value are grouped separately so they are never swept up by a bulk selection.

Reporting a problem

Found a vulnerability? Email security@refundmysol.com. Please include reproduction steps. We do not run a public bug bounty yet, but we credit responsible disclosures.