SolShield® & Browser Guard Privacy Policy

1. What Data Never Leaves Your Browser

• No browsing history: Visiting regular web pages does not phone home. Domain checks trigger only on active wallet connect, signIn, or sign* prompts.
• No full URLs or tokens: Before any remote check leaves your device, query parameters, OAuth tokens, paths, ports, and fragments are stripped locally so only the normalized ASCII hostname is inspected.
• No private keys or seed phrases: SolShield wraps public provider signing boundaries without custody and never has access to private key material.
• Local verdict history: The Browser Guard popup stores only the latest 20 high-level verdict summaries locally in chrome.storage.local, editable and clearable anytime.

2. Chrome Manifest V3 Permissions Explained

• <all_urls> (MAIN & ISOLATED content scripts): Required solely to wrap window.solana, Phantom, Solflare, Backpack, Glow, and Wallet Standard providers before malicious dApps invoke a transaction signature prompt.
• storage: Stores your personal allow/block lists, network preference (Mainnet vs Devnet), strict mode flag, optional BYOK Venice key, and the last 20 local verdicts on-device.
• activeTab: Reads the current tab's stripped hostname strictly when you click the extension popup icon to display Domain Guard status.

3. Dual-Lane Remote Verification & Venice AI Zero-Retention

Offline bytecode decoding, typosquat Levenshtein checks, homoglyph folding, SIWS cross-domain checks, and batch analysis run 100% locally in your browser first in under 1 ms.

When remote enrichment is enabled (default https://sol-shield.xyz, or self-hosted backend in Settings):

• Domain Lane (POST /api/domain-reputation): Receives only the bare ASCII hostname (when not already allowlisted).
• Transaction Simulation & Audit Lane (POST /api/audit): Runs pre-sign Solana RPC simulation and sends sanitized instruction AST metadata to Venice AI (include_venice_system_prompt: false) for zero-retention risk explanation.

4. Source Transparency & Contact

Every line of SolShield's parser, provider wrapper, and API is open-source MIT software.