FAQ.

Any Solana wallet that implements the Wallet Standard — that covers Phantom, Solflare, Backpack, Glow, and Magic Eden out of the box. The connect button auto-detects what you have installed.

Native SOL only at launch. SPL tokens (USDC and friends) are on the roadmap — they need Associated Token Account handling on both ends of the flow.

CLAIMA itself takes nothing. You pay the standard Solana network fee (~0.000005 SOL per signature). The drain transaction's fee comes out of the locked balance, so the recipient doesn't need to have any SOL to claim.

Yes — if you still have the URL and the password, open the link yourself in your own browser and claim the funds back to your own wallet. There's no "cancel link" action; the temp vault releases to anyone who proves the secret.

A future Anchor program will allow sender-side reclaim without needing to remember the password. For now: track your links in /c/mine and don't lose passwords.

Same threat model as sending a private key in plaintext — anyone who intercepts that message can claim. Don't do this for anything beyond demo amounts. Use two channels.

The flows render on mobile, but wallet connectivity depends on which wallet you use. Phantom and Solflare both ship mobile apps with in-app browsers that connect successfully. Cross-app Mobile-Wallet-Adapter deep linking is on the roadmap.

Because we don't need one. Every operation is browser-side or on-chain. No backend means no database to leak, no service to maintain, no subpoena to receive, and no extra trust surface for you to evaluate.

In your browser's localStorage, under the key claima.history.v1. We never read it. Clearing site data, switching devices, or using incognito will wipe it. You can manually clear it from /c/mine.

The default RPC is the public Solana endpoint for the active network. If the operator (you, if you self-host) configures a Helius URL in environment variables, all read and write calls go through there for higher rate limits. Airdrop requests always go through the public devnet endpoint because most paid RPCs (including Helius) block requestAirdrop.