We don't collect your data. The design makes sure of it.

What stays on your device

Everything personal is created and kept in your browser, or in the extension's own storage, and is never sent to Veil:

• Your vault: your spend and viewing keys, encrypted with your password, plus your activity list and your one-time addresses.
• Your Veil wallet (if Veil created one for you): its keys come from your vault and only exist in memory while Veil is unlocked. Only its public address is stored, unencrypted, so Veil can find your vault.
• Small settings, such as the last wallet you connected.

Your private balance is found by decrypting notes in your browser: nobody else, including Veil, learns which notes are yours. Removing the extension, or clearing this site's data in your browser, deletes all of it. Your recovery key is the only way to restore it, and Veil never has it.

What Veil's servers see

The app and the extension only connect to Veil's own servers. None of them keeps access logs or IP addresses.

• Relayer (relayer.veilit.xyz): receives the transactions you ask it to submit, with their proofs, and fee or quote requests (the tokens, amounts and, for a withdrawal, the destination address). Those transactions become public on Solana once sent. For VeilSwap it also receives the destination chain, the recipient address and the amount, which it passes to NEAR Intents to quote and fill the order.
• Indexer (indexer.veilit.xyz): serves public on-chain data, the same to everyone: encrypted notes, the Merkle tree, token information and logos.
• Solana gateway (rpc.veilit.xyz): forwards your app's Solana requests, such as balance lookups and transaction status, to our Solana node provider. The provider sees Veil's server, not you: your IP address, browser and origin are not passed on.

Your IP address reaches these servers, as with any website. It is used only in memory to limit how many requests one client can make, and is never stored or logged.

Other parties

• Solana: every shield, withdrawal and deposit to your Veil wallet or deposit address is recorded on Solana, publicly and permanently, like any Solana transaction. What happens inside your private balance is not.
• Our Solana node provider and Jupiter (for private trades) receive requests from Veil's servers, never from your browser.
• NEAR Intents receives VeilSwap orders (see above) under its own terms.
• Chrome Web Store distributes the extension under Google's policies; Veil receives only the aggregate statistics Google shows developers.

Veil does not sell, rent or share personal data, and uses none for advertising or profiling.

The browser extension

• It asks for one permission, storage, to keep your encrypted vault and settings in the extension.
• It has no access to the websites you visit: no content scripts, no host permissions, no browsing history, no tabs data.
• All of its code is inside the extension package. It loads no remote code, and its security policy only allows connections to Veil's servers.
• It locks itself after 15 minutes without use.

Your choices

You can delete everything Veil stored on your device at any time, as described above. Veil holds no personal data about you on its servers, so there is nothing to request, correct or delete there. Data already on Solana cannot be changed or deleted by anyone.

Veil is not directed at children under 18.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: info@veilit.xyz.