PRIVACY POLICY
Last Updated: May 8, 2026
This privacy policy describes how AHLOOP LLC ("Company," "we," "us," or "our") collects, stores, uses, and shares your information when you use the Anon Wallet browser extension and related services (collectively, "Services").
Core Privacy Principle:
Anon Wallet is designed with privacy-first architecture. Most sensitive data (private keys, transaction history, user preferences) is stored locally on your device and never transmitted to our servers. Our backend service (Anon API) stores only the minimal data necessary to provide account management, portfolio tracking, and identity services.
1. Information We Collect
1.1 Client-Side Storage (Your Device Only)
The following data is stored locally in your browser and never transmitted to our servers:
- Private keys and seed phrases — All cryptographic keys remain on your device
- Private Transaction history — Local record of your transactions
- Shielded transaction proofs — Railgun zero-knowledge proofs generated and stored locally
- User preferences — Extension settings and customizations
- Cached blockchain data — Recent token balances and metadata
Control: You can clear all locally stored data by uninstalling the extension or clearing your browser's local storage.
1.2 Server-Side Data (Anon API Backend)
We collect and store the following information on our servers to provide account management and portfolio services:
A. Account & Identity Data
Collected when you create an Anon profile:
| Data | Purpose | Optional |
|---|---|---|
| Username (e.g., yourname.anon.buzz) | Your chosen decentralized identity | No |
| Primary wallet address | Link your Ethereum address to your profile | No |
| Railgun shielded address (ZK address) | Enable private transactions | No |
| Profile picture ID (1-42) | Visual identity (from preset options) | No |
| Email address | Account recovery and notifications | Yes |
| Email verification status | Confirm email ownership | If provided |
Storage: PostgreSQL database
Identifier: All data is keyed to a Keccak-256 namehash (32-byte cryptographic hash), not your plaintext username
Retention: Until you delete your profile in-app
B. Wallet & Portfolio Data
Collected to display your multi-chain portfolio:
- Additional wallet addresses — Bitcoin, Solana, and other EVM addresses you link
- Token balances — Public blockchain balances for tokens in linked wallets
- Chain metadata — Which blockchains your wallets are active on
- Wallet type — EOA (externally owned account) vs. smart contract wallet
Storage: PostgreSQL database
Retention: Until you delete your profile or unlink wallets
Privacy Note: Token balances are fetched from public blockchains. We only cache them for performance; we do not track transaction history.
C. Authentication Data
Collected when you set up passwordless login:
- Passkey credentials — WebAuthn/FIDO2 public keys and credential IDs
- Authenticator metadata — Device type (e.g., fingerprint, USB security key)
- Last used timestamp — When you last authenticated
Storage: PostgreSQL database
Retention: Until you delete the passkey or your profile
Privacy Note: We never see or store your biometric data (fingerprints, face scans). This stays on your device.
D. Decentralized Identity Records (ENS-style)
Optional data you can add to your profile:
- Text records — Social media handles (e.g., Twitter, Discord), website URL, bio
- Multi-chain addresses — Addresses for Bitcoin, Solana, etc. linked to your identity
- Visibility controls — Which profile elements are publicly discoverable
Storage: PostgreSQL database
Retention: Until you remove records or delete your profile
E. Email Subscriptions (Waitlist)
If you sign up for our waitlist or notifications:
- Email address
- Verification status (double opt-in required)
- Verification token (temporary, expires in 24 hours)
Storage: PostgreSQL database
Retention: Until you unsubscribe
Control: Unsubscribe link included in every email
1.3 Temporary Session Data (Redis Cache)
We use short-lived cache storage for:
| Data | Purpose | Duration |
|---|---|---|
| Passkey login sessions | WebAuthn authentication flow | 5 minutes |
| Username reservation locks | Prevent duplicate registrations | 5 minutes |
| Token price cache | Faster portfolio loading | 5 minutes |
| Portfolio refresh locks | Prevent duplicate API calls | 30 seconds |
Privacy Note: All cached data auto-expires. No permanent storage.
1.4 Authentication Tokens (JWT)
- What we issue: JSON Web Tokens (JWT) for API authentication
- What's inside: Your profile identifier (namehash) and expiration time
- Where stored: In your browser only (we don't store tokens server-side)
- Sensitivity: Contains pseudonymous identifier but no email, name, or direct PII
1.5 Automatically Collected Data
Request Logs (Transient)
Our servers temporarily log:
- Hashed IP token — Used only as a rate-limiting bucket key. The raw IP address is hashed with a per-process HMAC secret at the network boundary and the original address is discarded immediately. The hash cannot be reversed to recover the IP without the secret, and the secret is regenerated on every server restart, so the same client appears as a different token after a restart.
- User-Agent — Browser and device type
- Request metadata — HTTP method, path, status code, response time
What we never store: Raw IP addresses are not written to our database, our cache, or our log files. Cloudflare (our network edge) sees the original IP for transport-level routing and DDoS protection, but the Anon API itself only handles the one-way hash.
Retention: Logs are not persisted in our database; they exist only in transient server logs for debugging and monitoring.
Bot Protection
- Cloudflare Turnstile tokens — Validated to prevent bot abuse
- No tracking: Turnstile challenges run client-side; we only verify the result
Note: We have reCAPTCHA configured but it is not currently active.
2. How Do We Use Your Information?
We process your data to:
- Provide core services — Create and manage your decentralized identity, track portfolio balances
- Enable authentication — Passwordless login via WebAuthn passkeys
- Facilitate identity resolution — Resolve *.anon.buzz usernames to wallet addresses (like ENS)
- Send notifications — If you provide an email, send account updates (you control this via profile settings)
- Improve the service — Analyze anonymized usage patterns to fix bugs and add features
- Comply with legal obligations — Respond to valid legal requests (see Section 5)
We do NOT:
- Sell your data to advertisers or data brokers
- Track your browsing activity outside the extension
- Use your data for behavioral profiling or targeted ads
- Monitor your private transaction activity (shielded transactions stay private)
3. Data Sharing & Third-Party Services
3.1 Services We Share Data With
| Service | Data Shared | Purpose |
|---|---|---|
| Railgun Network | Zero-knowledge proofs (generated locally) | Private transactions |
| Bungee (Socket) | Wallet address, token details, swap amounts | Cross-chain swaps/bridges |
| 0x Protocol | Wallet address, token swap parameters | Token swaps |
| DefiLlama | Token contract addresses (no user identifiers) | Token price feeds |
| Blockchain RPC Providers | Token contract addresses, balance queries | Fetch on-chain data |
| Resend | Email address, verification links | Send verification emails |
| Cloudflare Turnstile | Challenge tokens | Bot protection |
Important: When you execute swaps or bridges, your wallet address and transaction details are shared with the relevant protocol. These are pseudonymous but can be traced on public blockchains.
3.2 Legal Requirements
We may disclose your information if required by law, such as court orders or subpoenas, law enforcement requests, or national security demands.
Our commitment: We will challenge overly broad requests and notify you when legally permitted. We collect minimal data to limit what can be disclosed.
3.3 Business Transfers
If we merge with or are acquired by another company, your data may transfer to the new entity. We will notify you and ensure continued privacy protections.
4. Data Security
We implement industry-standard security measures:
- Encryption in transit — All API calls use TLS 1.3
- Local key storage — Private keys never leave your device. Private keys on the device are encrypted using a PRF-derived key from the passkey.
- Access controls — Limited employee access to production systems
- Passkey authentication — Phishing-resistant WebAuthn/FIDO2
- Regular audits — Periodic security reviews
However: No system is 100% secure. You are responsible for securing your device and seed phrase.
5. Your Privacy Rights
Depending on your location (e.g., GDPR in EU, CCPA in California), you may have the following rights:
| Right | How to Exercise |
|---|---|
| Access — Request a copy of your data | Contact [email protected] |
| Correction — Update incorrect data | Edit in-app |
| Deletion — Delete your profile and all associated data | Use in-app "Delete Profile" feature |
| Portability — Export your data in a portable format | Contact [email protected] |
| Opt-out of emails — Stop receiving notifications | Unsubscribe link in emails or update profile settings |
| Withdraw consent — Revoke consent for optional data processing | Remove optional data from profile |
In-App Deletion: Deleting your profile in the app automatically removes your username, email, and profile settings; all linked wallet addresses and balances; passkey credentials; and identity records (text records, multi-chain addresses).
Blockchain Note: Transactions recorded on public blockchains (Ethereum, etc.) cannot be deleted, as they are outside our control.
Response Time: We respond to privacy requests within 30 days.
6. Data Retention
| Data Type | How Long We Keep It |
|---|---|
| Profile data | Until you delete your profile |
| Public Wallet balances | Until you delete your profile or unlink wallets |
| Passkey credentials | Until you delete them or your profile |
| Email subscriptions | Until you unsubscribe |
| Verification codes | 24 hours (auto-expire) |
| Redis cache | 30 seconds to 5 minutes (auto-expire) |
| JWT tokens | Client-side only; expire per configured TTL |
| Server logs | Not persisted; exist only in transient logs for debugging |
7. Cookies & Local Storage
- Browser local storage — Used to cache wallet data, preferences, and transaction history on your device
- No tracking cookies — We do not use cookies for analytics or advertising
- Session storage — Temporary storage cleared when you close the browser
Control: Clear via browser settings (Settings → Privacy → Clear browsing data).
8. International Data Transfers
Our servers are located in the United States. If you access Anon Wallet from outside this region, your data may be transferred internationally. We use standard contractual clauses and other safeguards to protect your data during transfer.
9. Children's Privacy
Anon Wallet is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have collected data from a child, contact us immediately at [email protected] for deletion.
10. Changes to This Privacy Policy
We may update this policy to reflect new features or legal requirements. Changes will be posted with an updated "Last Updated" date at the top, an in-extension notification for material changes, and email notification if you've provided an email address.
Your continued use after changes constitutes acceptance. Review this policy periodically.
11. Third-Party Links
Our Services may link to external websites (e.g., DeFi protocols, block explorers). We are not responsible for their privacy practices. Review their policies before sharing data.
12. Contact Us
For privacy questions, to exercise your rights, or to report concerns:
AHLOOP LLC
Email: [email protected]
Response time: Within 30 days
For security issues: [email protected]
Summary of Key Privacy Protections
- ✓Private keys never leave your device
- ✓Most data stored client-side (transaction history, preferences)
- ✓Minimal server-side data (only for identity and portfolio features)
- ✓Pseudonymous identifiers (namehash, wallet addresses)
- ✓Optional email (not required for core functionality)
- ✓In-app profile deletion (removes all server-side data)
- ✓No data sales (we don't sell to advertisers)
- ✓No behavioral tracking (no analytics pixels or session recording)
- ✓Shielded transactions stay private (Railgun zk-proofs processed locally)