Privacy Policy

Effective date: July 13, 2026

What VaultGuard does

VaultGuard is a crypto security product: a browser extension that analyzes blockchain transactions before you sign them, and a dashboard for reviewing your wallet's token approvals and security posture. To do this, some data must be processed by our servers. This page explains exactly what that data is.

Data we process

  • Transaction parameters. When a dApp asks your wallet to sign a transaction, the extension sends the proposed transaction (from/to addresses, value, calldata, chain) to our API to simulate it and score its risk. This happens before you sign; we never see or transmit your private keys and cannot move your funds.
  • Site hostnames. The extension checks the domain of sites you visit against phishing databases to warn you before you connect a wallet.
  • Wallet address. If you sign in to the dashboard, we store your public wallet address and your token-approval scan results so we can show them to you.
  • A log of each check. When we analyze a transaction or signature we keep a record of it, whether or not you are signed in, so we can show you your history, count your free scans, and detect lookalike addresses. Each record holds the wallet the check ran for, the chain, the address involved, the value, the decoded function name (for example approve), the site's domain, the risk score and the warnings. We do not store the raw transaction data, and these records are deleted after 90 days.

What we never collect

  • Private keys, seed phrases, or wallet passwords — the extension cannot access them.
  • Browsing history unrelated to the security checks described above.
  • Page content, form inputs, cookies, or personal files.

What we do with data

Data is used solely to provide the security analysis you asked for. We do not sell data, share it with advertisers, or use it for tracking. Threat lookups may query third-party security services (for example Alchemy for transaction simulation and GoPlus Security for threat intelligence); those requests contain the transaction or address being analyzed, not your identity.

Retention & deletion

The log of individual checks is deleted automatically 90 days after each check, signed in or not. Token-approval scan results are retained while your account exists so the dashboard can display them. To request deletion of your data, contact us through the support tab of the VaultGuard Chrome Web Store listing and we will remove records associated with your wallet address.

Changes

If this policy changes, the effective date above will be updated. Material changes will be noted in the extension's release notes.