Privacy Policy

Signward is a security tool, so it is built to see as little as possible. Almost everything happens on your device. This page explains exactly what stays local, the few checks that reach a server, and what is never collected.

1. On your device

These run entirely in your browser and send nothing:

• Page checks. Signward scores each page locally against bundled lists and on-page signals to decide whether to warn or block.
• The wallet gate. It reads and explains wallet requests (approvals, permits, orders, signatures) before you decide. It never holds a key and cannot sign for you.
• Your approval ledger. Approvals you grant while Signward is installed are stored only in your browser's local storage, to power the revoke links and compromised-approval alerts. They are never uploaded.
• Settings and caches. Your preferences, the downloaded lists, and per-tab scores are kept locally.

2. What is sent to a server, and only then

A small number of checks need Signward's backend (api.signward.app). Each sends the least it can, and only in the situation described:

Check	What is sent	When
Address screening	A wallet/contract address and chain id	Online screening is on (default); can be turned off in settings
Domain age	A registrable domain (e.g. example.com) — never the full URL	Only for a page that already looks suspicious
Brand check	A short brand name taken from the page (e.g. “uniswap”) — never the URL	Only for a page that already looks suspicious
AI deep scan	A page snapshot: the URL, title, a text sample, script and link hosts, and wallet-button labels	Only when you click “Deep analysis”
Report a site	The page URL you are reporting	Only when you click “Report this site”

List and feed updates (phishing lists, the community list, the compromised-contracts feed) are ordinary downloads and send no information about you. Transaction simulation is performed through your own wallet's network connection, not through Signward.

3. Third-party services

Some checks are answered with the help of established providers. Signward's server talks to them so that API keys stay off your device; they receive only the item above, never your identity:

• GoPlus — malicious-address data for address screening.
• Anthropic (Claude) — the AI model behind the on-demand deep scan.
• Public domain records (RDAP, Certificate Transparency, and a WHOIS provider) — for the domain-age check.
• An X (Twitter) data provider — to resolve a project's official account for the brand check.

4. What Signward never collects

• Private keys, recovery phrases, or anything you type into a wallet.
• Full page URLs or your browsing history.
• Form inputs, passwords, or cookies.
• Analytics, advertising identifiers, or behavioural tracking.

5. Retention and rate-limiting

Address, domain and brand answers are cached briefly on the server to reduce load, keyed by the item itself, not by you. Deep-scan snapshots are not stored. When you report a site, the reported URL enters a moderation queue; to prevent abuse, the server counts reports per client using a salted, truncated hash of the IP address — the raw IP address is never stored.

6. No sale of data

Signward does not sell, rent or share personal data. There is no advertising and no third-party analytics.

7. Open source

The extension, the backend and the lists are published so anyone can verify these claims. Secrets (API keys) are kept server-side and are not in the public code.

8. Changes

If this policy changes, the date above is updated and the current version is always available here.

9. Contact

Questions about privacy: hello@signward.app.