Privacy policy

Last updated 10 November 2026

This policy explains what data veil handles, where it goes and how long it stays. The short version: no accounts, no tracking, no analytics, and your private-wallet keys never leave your browser.

1. What we do not collect

• No accounts, names, email addresses or phone numbers.
• No analytics, advertising or tracking cookies, and no fingerprinting.
• No private keys, seed phrases or unlock signatures. Your private-wallet keys are derived and held in your browser tab only.
• No decrypted balances or amounts. Those are decrypted in your browser and shown only to you.

2. What passes through the site's servers

To keep the Helius API key off your device, your browser's requests to Solana and to Helius's indexer and prover go through the site's server, which adds the key and forwards them. These requests contain:

• public wallet addresses and transaction data that are already, or will become, public on Solana;
• proof requests, which are encrypted in your browser to Helius's attested prover. The site cannot read them.

The site does not store these requests. It keeps a short-lived, in-memory request counter per IP address to rate limit abuse; it is cleared within minutes and is not written anywhere.

3. Address screening and region checks

When you connect a wallet, its public address is checked against the site's screening list, and your approximate country (from the hosting provider's network headers, not GPS) is checked against blocked regions. The result is used once to allow or refuse access and is not stored.

4. What stays in your browser

Local storage on your device holds:

• an activity log of your own transactions: signatures, times, action and counterparty address, without amounts;
• a pending transaction signature, so a send interrupted by closing the tab can be confirmed when you return;
• a flag that you have read the first-use notice, and one that you have seen the intro animation this session.

Clearing this site's data in your browser deletes all of it. It is never sent to the site.

5. Third parties

• Hosting provider (Vercel): serves the site and, like any web host, processes your IP address and request metadata, and may keep standard access logs for a limited period under its own policy.
• Helius: receives the forwarded Solana, indexer and proof requests described above, under its own privacy policy.
• Solana public RPC (websocket): your browser connects directly to confirm transactions; it sees your IP address and the transaction signatures you watch.
• Attestation services (Helius's policy host, Intel and Phala collateral services): your browser fetches public verification data from them to check the prover before sending it anything.
• Your wallet provider: handles your keys and signatures under its own terms.

6. Public blockchain data

Anything you put on Solana is public and permanent, and cannot be deleted by the site or anyone else. This includes your address, the addresses you transact with, deposit and withdrawal amounts, and the fact that you made a private transfer.

7. Your rights

Because the site keeps no personal data on its servers, there is usually nothing for it to access, correct or delete. For data held by the hosting provider or Helius, their policies apply. You can always clear the data held in your browser yourself.

8. Changes and contact

This policy may change. The date at the top shows the latest version.

Privacy questions: rocket_cranial232@simplelogin.com