What this site keeps.

Nothing about you, with one exception: if you join the waitlist, your email address and the day you joined. No time of day, no IP address, no browser details.

What you choose on this site is kept in your browser’s localStorage, on your device, and is never sent anywhere: the palette you picked (dusk or night), and the address of your own RPC endpoint if you saved one. Clearing this site’s data in your browser removes it.

None. The site sets no cookies and reads none.

None. Every file a page loads comes from this site: no analytics, no trackers, no scripts, fonts or images from anyone else’s server. Each page carries a security policy that allows nothing else. That much is a rule the browser enforces, not a promise.

Where a page may connect is a second rule. Because you can point the scanner at an RPC endpoint of your own, the policy written into the page has to allow a connection to any https address. As a page loads, this site’s own script adds a narrower rule: this site, the one RPC endpoint in use and the waitlist, nothing else. The browser enforces that rule too, it cannot be loosened again until the page is reloaded, and the scanner does not start without it. It is put there by the site’s own script, so it guards against a mistake in this site, not against a copy of the site that someone has changed.

Like any web server, the one that sends you these pages sees your IP address and which page you asked for. The site adds nothing to that: no identifiers, no scripts that report back.

The scan runs in your browser. When you start one, your browser asks a Solana RPC endpoint for the public history of the address you pasted. By default that endpoint is rpc.lochlayer.com, the Loch RPC proxy, which this project runs.

The proxy sees the address together with your IP address for as long as it takes to answer, and writes neither down: it keeps no logs. That is a statement about software we run, and you cannot check it from where you are. The proxy passes the question on to an RPC provider. The provider sees which address was looked up, coming from the proxy, and does not see your IP address. It can keep what it sees.

The web server that sends you these pages is not sent the address, and the page does not put it in its URL or in storage. The request carries no cookies and no referrer.

To tell nobody but a node you trust, save your own RPC endpoint on the scanner. Once the source code is published, you will be able to run the scanner on your own machine.

If you join, your email address goes to the waitlist service, which stores it with the day. It is used for two messages: one when the extension’s devnet alpha is ready to try, and one when the audited release is. No newsletter, no sharing, no tracking pixels and no tracked links.

The service keeps no access log. To slow down abuse it counts requests per network for a few minutes, in memory only, under a salted hash it cannot turn back into an address. Nothing of that is written to disk.

To be removed, reply to either message. The address is then deleted. Nothing else is held, so nothing else needs deleting.