Privacy

Last updated · 2026-09-17 · Asia/Shanghai

Short version. The browser desk does not collect accounts, emails, or private keys. Reads go to public chain RPCs and market APIs. Server-side desk API keys (if any) stay in the operator’s environment — never in the static web bundle.

What we do not collect

No sign-up, no email list, no analytics SDK shipped with this package.
No private keys, seed phrases, or keystore passphrases in the browser. The desk never asks for them.
Wallet connection (when you choose it) uses your EIP-1193 provider; Loxley does not custody funds.

What stays on your machine

localStorage may hold UI prefs such as locale (loxley.locale). Never keys or seeds.
CLI keystores live under ~/.loxley/ on the machine that runs the terminal — not in the web bundle.

Network requests

The desk and CLI may call public RPCs, DexScreener, GeckoTerminal, and explorers configured for each chain. Optional alerts (Telegram / Discord) are CLI-only and only fire if you set tokens in your own .env.

Third parties

Fonts may load from Google Fonts when online. Chain and market hosts see your IP like any other public API client. This document does not speak for those operators.

Contact

Questions or privacy reports: open an issue on the project repository, or reach the maintainer listed in the README.

Loxley · MIT · reads by default · live trade off until you arm it · not financial advice