We don't collect your data. The design makes sure of it.

What stays on your device

Everything personal is created and kept in your browser, or in the extension's own storage, and is never sent to Nullifex:

• Your vault: your spend and viewing keys, encrypted with your password, plus your activity list and your one-time addresses.
• Your Nullifex wallet (if Nullifex created one for you): its keys come from your vault and only exist in memory while Nullifex is unlocked. Only its public address is stored, unencrypted, so Nullifex can find your vault.
• Small settings, such as the last wallet you connected.

Your private balance is found by decrypting notes in your browser: nobody else, including Nullifex, learns which notes are yours. Removing the extension, or clearing this site's data in your browser, deletes all of it. Your recovery key is the only way to restore it, and Nullifex never has it.

What Nullifex's servers see

The app and the extension only connect to Nullifex's own servers. None of them keeps access logs or IP addresses.

• Relayer (relayer.nullifex.fun): receives the transactions you ask it to submit, with their proofs, and fee or quote requests (the tokens, amounts and, for a withdrawal, the destination address). Those transactions become public on Solana once sent. For NullifexSwap it also receives the destination chain, the recipient address and the amount, which it passes to NEAR Intents to quote and fill the order.
• Indexer (indexer.nullifex.fun): serves public on-chain data, the same to everyone: encrypted notes, the Merkle tree, token information and logos.
• Solana gateway (rpc.nullifex.fun): forwards your app's Solana requests, such as balance lookups and transaction status, to our Solana node provider. The provider sees Nullifex's server, not you: your IP address, browser and origin are not passed on.

Your IP address reaches these servers, as with any website. It is used only in memory to limit how many requests one client can make, and is never stored or logged.

Every address the app may connect to, with a live test you can run: API.

Other parties

• Solana: every shield, withdrawal and deposit to your Nullifex wallet or deposit address is recorded on Solana, publicly and permanently, like any Solana transaction. What happens inside your private balance is not.
• Our Solana node provider and Jupiter (for private trades) receive requests from Nullifex's servers, never from your browser.
• NEAR Intents receives NullifexSwap orders (see above) under its own terms.
• Chrome Web Store distributes the extension under Google's policies; Nullifex receives only the aggregate statistics Google shows developers.

Nullifex does not sell, rent or share personal data, and uses none for advertising or profiling.

The browser extension

• It asks for one permission, storage, to keep your encrypted vault and settings in the extension.
• It has no access to the websites you visit: no content scripts, no host permissions, no browsing history, no tabs data.
• All of its code is inside the extension package. It loads no remote code, and its security policy only allows connections to Nullifex's servers.
• It locks itself after 15 minutes without use.

Your choices

You can delete everything Nullifex stored on your device at any time, as described above. Nullifex holds no personal data about you on its servers, so there is nothing to request, correct or delete there. Data already on Solana cannot be changed or deleted by anyone.

Nullifex is not directed at children under 18.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: info@nullifex.fun.