Privacy Policy — VALO Terminal extension

The short version: the extension does not collect, store, transmit or sell your personal data. There is no analytics, no tracking, and no third-party service receiving anything about you. It holds no private keys.

What is stored, and where

Everything below lives in your browser's local extension storage, on your own device. None of it is transmitted to us.

• A session token copied from valotrading.app, so the extension can read your rewards as the signed-in user. It is the same token the website already holds; the extension mirrors it rather than asking you for a password.
• Your public wallet addresses. These are public information — the same strings visible to anyone on a block explorer.
• Cached balances and the current reward epoch, so the popup can render immediately when you open it.

What is never stored

• Private keys and seed phrases. The extension contains no signing code at all. Transactions are signed either by your own wallet (Phantom), or by a key held on valotrading.app behind a PIN you enter on that site and nowhere else.
• Your PIN. It is never requested by, passed through, or visible to the extension.
• Browsing history, page contents, form data, or anything about the sites you visit.

Network requests

The extension talks to valotrading.app and to no other server. Those requests fetch public blockchain data (wallet balances, token prices, the current epoch) and carry out actions you explicitly start, such as claiming rewards. Blockchain data is public by nature.

Permissions, and why each is needed

• storage — keeps your session token, wallet addresses and cached balances on your device.
• alarms — refreshes the toolbar badge countdown once a minute.
• tabs — finds an open valotrading.app tab so a signing request can reach it.
• activeTab and scripting — connect to your Phantom wallet on the page you are already viewing. Wallet providers are only reachable from page context, never from an extension popup. This runs only when you click a button in the extension.
• host permission for valotrading.app — reads your session and wallet addresses from that site so you are not asked to sign in twice.

Third parties

No data is sold, rented or shared. There are no advertising networks, analytics providers or data brokers involved.

Deleting your data

Removing the extension deletes everything it stored. You can also sign out of a connected wallet at any time from the extension itself, which clears the stored address.

Changes

Material changes to this policy will be reflected here with a new date.

Questions: valotrading.app