Start building
Legal

Privacy policy.

Paraloom Wallet is a privacy-first browser extension for the Paraloom Network. It collects no personal data, contacts no servers, and keeps your keys encrypted on your own device. This policy explains exactly what the extension handles and how.

Last updated: May 26, 2026

1. Data we collect

None.Paraloom Wallet does not collect personal data and does not transmit any information to external servers. Everything the extension needs is stored locally on your device through Chrome's storage API.

2. Data stored locally

The following is stored only on your device, never transmitted:

  • Encrypted wallet data — your seed phrase and private keys are encrypted with XSalsa20-Poly1305 authenticated encryption, under a key derived from your password using scrypt (a memory-hard key-derivation function). The plaintext keys never leave your device.
  • Account metadata — account names and addresses, for display.
  • Preferences — settings such as the auto-lock timeout and selected network.

3. Third-party services

The extension uses no analytics, tracking, or advertising services, and shares no data with third parties. Fonts are bundled inside the extension rather than loaded from a CDN, so opening the wallet contacts no outside host.

4. Network requests

The current version makes no network requests. The Paraloom Network is pre-mainnet; blockchain connectivity will be added at launch. When enabled, requests will be limited to Paraloom Network nodes for transaction submission and balance queries — never for tracking.

5. Permissions

  • storage — persists your encrypted wallet data locally in Chrome storage.
  • Content script (paraloom.io pages only) — injects the window.paraloom API on Paraloom web pages so the site can request a wallet connection, similar to how MetaMask injects window.ethereum. It runs on paraloom.io domains only — not on arbitrary websites.

6. Data security

  • scrypt key derivation (memory-hard, resistant to GPU brute-force)
  • XSalsa20-Poly1305 authenticated encryption for all sensitive data
  • Automatic locking after a configurable period of inactivity
  • Rate-limited password attempts to deter brute-force unlocking

7. Data deletion

You can permanently delete all wallet data at any time via Settings → Danger Zone → Remove Wallet inside the extension. Uninstalling the extension also removes all stored data.

8. Changes to this policy

We may update this policy as the extension evolves. Any change is reflected in the "Last updated" date above.

9. Contact

Questions about this policy? Email info@paraloom.io.