Chrome Extension Privacy Policy
This policy covers only our Chrome extension. Our website is covered by the site privacy policy.
1. What the extension reads
- Visible page text, on the sites listed in the extension's permissions only. The extension scans
the text of the page for strings that look like a Solana mint address or an Ethereum-style
0xaddress. Nothing else in the page is read, kept or transmitted. - The page's address (URL), on those same sites. Used only to guess which chain an
0xaddress belongs to — for example an address seen on a BNB Chain explorer is treated as BNB Chain. The URL is never sent anywhere. - Text you have selected, only when you open the right-click menu on a selection. If the selected text is not a contract address, it is discarded immediately.
2. What the extension sends, and to whom
When the live-stats panel is switched on, the extension asks our own endpoint,
https://blackhat.finance/api/token-intel, for public information about a token. The request
contains exactly two things:
| Field | Example | Why |
|---|---|---|
contract | the token address on the page | to look the token up |
chain | sol, bsc, eth, base | to look it up on the right chain |
The request carries no cookies and no credentials (credentials: "omit"). It contains no
account, no identifier, no page URL, no page content and no browsing history. Our web server keeps standard
technical request logs (IP address, timestamp, requested path, user agent) for security and abuse
prevention, in line with our site privacy policy. You can turn these lookups off
completely with the “Show live stats and verdict” switch in the extension's popup; with it off, the
extension makes no network requests at all.
No data is sent to any other party. We do not sell, rent or share extension data, and we do not transfer it to anyone except as required by law.
3. What the extension stores
Your settings only — whether the panel is on, your default chain for 0x addresses, and the
three display switches. These are stored with Chrome's own storage.sync, which means Chrome
may sync them to your Google account across your own signed-in browsers. We cannot read them. Nothing else
is stored: no history of the tokens you looked at, no cache that survives the browser session, no
identifiers.
Removing the extension removes its settings.
4. What the extension never does
- It never asks for, reads, stores or transmits a wallet, private key, seed phrase or password.
- It never connects to a wallet and it cannot move funds. It only opens links in a new tab.
- It never modifies, removes or redirects links that are already on the page. Links placed by the site you are visiting, or by anybody else, are left exactly as they are.
- It never injects advertising, and it contains no analytics or tracking code of any kind.
- It never loads or executes remotely hosted code. All of its code ships inside the package.
5. Referral links (disclosure)
The chart and trading links the extension builds carry the Blackhat Empire referral code
10Xboost. If you trade after opening one, we may receive a commission from that platform, at
no extra cost to you. Those fees pay for the servers, data sources and paid APIs behind our alert network.
The code is fixed and cannot be changed in the extension. This relationship is disclosed inside the
extension itself, in the panel and in the popup.
6. Not financial advice
The figures and the verdict shown in the panel are an evidence summary from our own pipeline at the time shown. They are not a safety score, not investment advice, and they cannot predict a price. A token can pass every check and still fail seconds later. You are responsible for your own trades.
7. Children
The extension is not directed at children and is not intended for anyone under 18.
8. Changes and contact
If this policy changes materially we will update the date at the top of this page and, where the change affects what the extension sends, ship it alongside a new extension version. Questions or requests: privacy@gmgn.ca.