We don't collect your data. The design makes sure of it.

What stays on your device

Everything personal is created and kept in your browser, or in the extension's own storage, and is never sent to Valon:

• Your vault: your spend and viewing keys, encrypted with your password, plus your activity list and your one-time addresses.
• Your Valon wallet (if Valon created one for you): its keys come from your vault and only exist in memory while Valon is unlocked. Only its public address is stored, unencrypted, so Valon can find your vault.
• Small settings, such as the last wallet you connected.

Your private balance is found by decrypting notes in your browser: nobody else, including Valon, learns which notes are yours. Removing the extension, or clearing this site's data in your browser, deletes all of it. Your recovery key is the only way to restore it, and Valon never has it.

What Valon's servers see

The app and the extension only connect to Valon's own servers. None of them keeps access logs or IP addresses.

• Relayer (relayer.veilit.xyz): receives the transactions you ask it to submit, with their proofs, and fee or quote requests (the tokens, amounts and, for a withdrawal, the destination address). Those transactions become public on Solana once sent. For ValonSwap it also receives the destination chain, the recipient address and the amount, which it passes to NEAR Intents to quote and fill the order.
• Indexer (indexer.veilit.xyz): serves public on-chain data, the same to everyone: encrypted notes, the Merkle tree, token information and logos.
• Solana gateway (rpc.veilit.xyz): forwards your app's Solana requests, such as balance lookups and transaction status, to our Solana node provider. The provider sees Valon's server, not you: your IP address, browser and origin are not passed on.

Your IP address reaches these servers, as with any website. It is used only in memory to limit how many requests one client can make, and is never stored or logged.

Other parties

• Solana: every shield, withdrawal and deposit to your Valon wallet or deposit address is recorded on Solana, publicly and permanently, like any Solana transaction. What happens inside your private balance is not.
• Our Solana node provider and Jupiter (for private trades) receive requests from Valon's servers, never from your browser.
• NEAR Intents receives ValonSwap orders (see above) under its own terms.
• Chrome Web Store distributes the extension under Google's policies; Valon receives only the aggregate statistics Google shows developers.

Valon does not sell, rent or share personal data, and uses none for advertising or profiling.

The browser extension

• It asks for one permission, storage, to keep your encrypted vault and settings in the extension.
• It has no access to the websites you visit: no content scripts, no host permissions, no browsing history, no tabs data.
• All of its code is inside the extension package. It loads no remote code, and its security policy only allows connections to Valon's servers.
• It locks itself after 15 minutes without use.

Your choices

You can delete everything Valon stored on your device at any time, as described above. Valon holds no personal data about you on its servers, so there is nothing to request, correct or delete there. Data already on Solana cannot be changed or deleted by anyone.

Valon is not directed at children under 18.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: info@valon.xyz.