What never leaves your device
- Your private keys and seed phrase. The interface never requests them and has no mechanism to receive them. Signing happens entirely inside your wallet.
- Your identity. There is no account, no sign-up, no email capture and no password.
What is stored locally
A small number of preferences are written to your browser’s localStorage so the interface remembers how you left it. They stay on your device and are never transmitted:
- a reconnect flag, so a previously connected wallet reconnects silently;
- your ledger filter and table page size;
- a cached native-asset price with its timestamp, to avoid re-requesting it.
Clearing site data in your browser removes all of it. Note that the reconnect flag stores only a boolean — never an address.
What third parties can see
Because this is a static site talking directly to public infrastructure, two parties observe requests your browser makes:
- The public RPC node (
https://rpc.mainnet.chain.robinhood.com) sees the read requests the page makes, including any address whose balance is being read, alongside your IP address. - The price API sees a request for a public price, with no address attached.
Neither is operated by Xobak, and each has its own policy. Any on-chain activity you perform is public by the nature of a blockchain — that is a property of the network, not of this interface.
What we do not run
No analytics, no advertising pixels, no session recording, no A/B testing framework, no third-party fonts loaded at runtime, and no cookies set by this site.
Contact
Questions or a vulnerability report: loading…. Please do not include private keys or seed phrases in any message, to us or to anyone.