Privacy Policy

This Privacy Policy describes how the 0xWallet Chrome extension handles information. 0xWallet is a self-custodial EVM wallet for LitVM LiteForge testnet. The extension does not require a 0xNothing account.

0xWallet handles only information needed to provide wallet features:

• Authentication information: the wallet password, recovery phrase, imported private keys, and the derived unlock key.
• Financial and payment information: public wallet addresses, balances, transaction history, signing requests, and transaction data.
• Wallet configuration: account labels, selected and custom networks, custom tokens, security settings, and approved dApp connections.
• dApp interaction information: the requesting page origin and JSON-RPC method needed to expose the EIP-1193/EIP-6963 provider, enforce site permissions, and show approval requests.

The extension does not read page content, form contents, personal communications, or a list of the user's general browsing history.

Recovery phrases and imported private keys are stored only on the user's device inside an AES-GCM-encrypted vault. They are never stored in plaintext and are never uploaded to 0xNothing, an RPC provider, an indexer, or a dApp.

While the wallet is unlocked, only the derived encryption key and the auto-lock deadline are kept in Chrome session storage. Session data is removed when the wallet locks or the browser session ends. Persistent wallet data remains until the user removes it or resets the wallet.

The extension communicates with:

• LitVM LiteForge or a user-selected custom RPC endpoint to read public blockchain state, estimate gas, broadcast a user-approved signed transaction, and retrieve its receipt.
• 0xNothing and Goldsky endpoints to retrieve public 0xPump and 0xFi token, pool, metadata, and market information.
• A dApp selected by the user when the user approves a connection, signature, or transaction request.

These services receive the request data required to answer it and may receive standard connection information such as an IP address under their own policies. Public addresses, contract calls, and broadcast transactions may be visible on the public blockchain. Passwords, recovery phrases, private keys, and derived unlock keys are never sent.

• Storage saves the encrypted vault, wallet settings, public account metadata, transaction history, and dApp approvals on the device, and keeps the temporary unlock key in session storage.
• Alarms maintains a pending dApp approval workflow while Chrome may suspend the Manifest V3 service worker. The alarm is removed when no approval is pending.
• Host access exposes the wallet provider to dApps and permits the RPC and public market-data requests described above. Access to a custom RPC origin is requested only after the user adds that network.

0xWallet does not use remotely hosted code. All executable JavaScript is bundled with the extension. Network responses are treated only as data and are never evaluated or executed as JavaScript or WebAssembly.

Information is used only to provide and secure the wallet features described above. 0xNothing does not sell wallet data, use it for personalized advertising, allow human review of wallet secrets, or use it to determine creditworthiness or lending eligibility.

Information is disclosed only when necessary to complete a user-requested RPC, indexing, dApp, or blockchain operation, or when required by law.

Users can lock the wallet, revoke dApp connections, remove custom networks or tokens, or reset the wallet from its settings. Uninstalling the extension removes its local Chrome storage. Information already published to a blockchain cannot be altered or deleted by 0xNothing.

The website hosting this policy may use Vercel Web Analytics when enabled to measure aggregate website performance. This website analytics service is separate from 0xWallet and is not embedded in the extension.

This policy may be updated when wallet functionality or data handling changes. The current version and effective date will remain available on this page.

Privacy questions can be sent to 0xnothing.network@gmail.com.