Privacy policy
1. Summary
OPEQ has no user accounts, no analytics, no advertising and no tracking. Your recovery words, password and keys are created and kept on your device and are never sent to OPEQ or anyone else. The extension does not talk to any OPEQ server. The only personal data OPEQ stores is what you choose to enter on the waitlist.
2. Who is responsible
OPEQ is an independent project run by an individual developer. For any privacy question or request, write to hello@opeq.io.
3. Data that stays on your device
- Recovery words. The 24 words are generated in your browser and shown to you once. They are never stored in plain form and never transmitted.
- Encrypted wallet. The wallet secret is encrypted with your password (PBKDF2-SHA256, 600,000 rounds, then AES-256-GCM) and saved in the browser's IndexedDB, together with public data: the wallet address, the public key tree and a counter of used one-time keys.
- Unlocked session. While a wallet is unlocked, the extension keeps the decrypted key in the browser's in-memory session storage (chrome.storage.session), readable only by the extension's own pages. It is deleted when you lock the wallet, after 10 minutes without activity, or when the browser closes.
- Preferences. The address of the wallet you used last is kept in local storage so the extension can open it next time.
- Password. Your password is never stored. It is used only to derive the encryption key.
Removing the extension, or choosing "Remove from this browser", deletes this data from the browser. Funds stay on the Solana blockchain and can be recovered with the 24 words.
4. Data sent over the network
- Solana RPC. To show balances and send transactions, the extension and the website wallet call a public Solana RPC node, currently https://api.devnet.solana.com, operated by the Solana Foundation. Requests contain public blockchain data: your wallet address, the accounts being looked up and the transactions you sign. The RPC operator can see your IP address and is subject to its own privacy policy.
- The blockchain. Transactions you confirm are published on the Solana blockchain. Blockchain data is public and permanent and cannot be deleted by anyone, including OPEQ.
- Links you open. Explorer, faucet, website and X links open third-party sites only when you click them.
- The extension sends nothing else. It contains no analytics, crash reporting or remote code.
5. The website and the waitlist
- opeq.io is hosted on Cloudflare. Cloudflare processes connection data such as IP addresses to deliver and protect the site. OPEQ does not use cookies, analytics or tracking scripts on the website.
- If you join the waitlist, OPEQ stores the X handle, the link to your X post and the email address you enter, the time you joined, and a one-way hash of your IP address used only to limit abuse. The legal basis is your consent.
- This data is used only to contact you about OPEQ. It is kept until OPEQ launches on mainnet and the waitlist closes, or until you ask for removal, whichever comes first.
6. Browser permissions
The extension requests a single permission, "storage", for the in-memory session described above. It does not read web pages, does not run on websites and has no access to your browsing history, tabs or other extensions.
7. What OPEQ never does
- Sell, rent or share user data with third parties.
- Use data for advertising, profiling, credit scoring or lending decisions.
- Use data for any purpose unrelated to the wallet.
- Ask for your recovery words. Only type them into an OPEQ Recover screen.
8. Security
Keys are generated and used only inside your browser, transactions are confirmed by you before signing, and the extension's content security policy blocks remote code. No system is perfect: OPEQ is a devnet beta. Do not use it with real funds. If you lose both your password and your 24 words, nobody can recover the wallet.
9. Your rights
Depending on where you live, including the EU, EEA and UK, you may have the right to access, correct, delete or export your personal data, to withdraw consent, and to complain to a data protection authority. Since OPEQ holds personal data only for the waitlist, write to hello@opeq.io and we will answer within 30 days. Wallet data on your device is under your control and can be deleted at any time.
10. Children
OPEQ is not intended for anyone under 18 and does not knowingly collect data from children.
11. Changes
If this policy changes, the new version will be published on this page with a new date. Material changes will also be announced on @opeqio.
12. Contact
Email hello@opeq.io or message @opeqio on X.