Privacy Policy

Last updated: July 2026

ChainGuard is a browser extension that checks tokens on Solana and BSC for common rug-pull and honeypot signals. This page explains what data the extension touches, where it goes, and what we do (and don't) collect.

No account, no server-side profile

ChainGuard does not require an account, email, or sign-up. There is no ChainGuard server that stores a profile of you or your activity. Analysis runs by calling third-party APIs directly from your browser and rendering the result locally in the extension.

API keys are stored locally only

If you add your own API keys (Helius, X/Grok, OpenAI) in Settings to unlock Pro checks, those keys are saved in your browser's local extension storage (chrome.storage.local). They are never sent to any ChainGuard-operated server — they go directly from your browser to the respective third-party API when a scan runs.

Third-party services we call

To produce a Trust Score, the extension sends the token's contract address (and, for Pro checks, your API key) directly to these services:

DexScreener, RugCheck, GoPlus Security — on-chain liquidity, mint/freeze authority, holder data (free, no key required)
Helius — Solana transaction history, used for bundle and sniper detection (requires your API key)
xAI (Grok) — live X/Twitter search for social sentiment (requires your API key)
OpenAI — generates the plain-language summary text (requires your API key, or falls back to a template with no AI call)

Each of these services has its own privacy policy governing how they handle the data sent to them. We don't control and aren't responsible for their practices.

Paid scan packages

If you purchase a scan package, payment is made in SOL directly on-chain to our wallet address. We do not collect card numbers, billing addresses, or identity documents. The only data associated with a purchase is the transaction itself, which is public on the Solana blockchain by nature of how blockchains work.

Analytics and tracking

We do not currently run analytics or tracking scripts on this website or inside the extension. If that changes in the future, this page will be updated first.

Data you can delete

Uninstalling the extension removes all locally stored data, including saved API keys and cached scan results. There is nothing to delete on our end because nothing is stored on our end.

Contact

Questions about this policy: reach out via the contact details listed on our X/Twitter profile linked from the extension's store listing.

This is a plain-language draft, not legal advice. Before this product handles meaningful payment volume, this policy should be reviewed by a qualified lawyer in your jurisdiction.