Privacy policy

Kavons is built so that we hold as little about you as possible. This page says exactly what the website and the browser extension do with your data. It was last updated on 28 October 2026.

The short version

Browser extension

• What it stores, on your device only: your wallet (the recovery phrase and any private keys you import), encrypted with your password, the names and public addresses of your accounts, and a few settings such as the auto-lock time. It is kept in the browser's extension storage. We cannot read it and we cannot recover it for you.
• What it can access: its own storage, and seven trading sites only: GMGN, Four.meme, DEX Screener, DEXTools, Birdeye, Flap and Axiom (their token pages). On those sites one small script shows the Kavons button and panel and reads the address of the page, to know whether it is a token page. It reads nothing else: no other page content, forms, wallet details or cookies, and it changes none of the site's own elements. A switch in the extension turns the script off, and then nothing from Kavons runs on those pages. The panel itself is the extension's own page, shown in a frame the site cannot read. Everything the panel does (keys, proofs, trades) happens inside the extension. You can turn the button off at any time with the switches in the extension's popup or settings, or the controls in the panel; while off, nothing runs on those sites. Websites cannot talk to the extension. The token address from the page is looked up on the public chain through the node and relayer you use, like any other lookup.
• Where it connects: only to the Kavons relayer and indexer (relayer.kavons.com) and to a public blockchain node (currently bsc-dataseed.bnbchain.org). If you add your own relayer or RPC address in the app, it connects to that instead. It loads no remote code, no third-party scripts and no third-party fonts.
• What the relayer receives when you send a transaction through it: the zero-knowledge proof, the public transaction data (amounts, the recipient address, fees) and your network address, as with any web request. It never receives your keys or your private balances.
• Points (optional): if you join the points programme you choose a username. Your points account is a separate key made inside your browser from your wallet; it is not your wallet address. When you withdraw or swap through the relayer, the request carries that account id so it can earn points. The server stores the username, the id, the score and, to detect abuse of the programme, daily totals for the account (how many withdrawals and swaps, and their dollar value rounded to $10, per day, kept for 180 days). It stores nothing else about you or your transactions: no wallet address, recipient, network address, transaction hash, or the amount or time of any single transaction. The public leaderboard shows usernames and scores only.
• Token checks and logos: when you open a token in the trading panel, the extension reads the token's address from the page address (the rest of the address never leaves your device) and asks the Kavons relayer to check the token, quote a price and fetch its logo. So the relayer learns which token addresses you look at, together with your network address, as with any web request. The relayer fetches logos from public image sources; your device contacts none of them.
• Reading your balance: the extension downloads the pool's public list of encrypted notes from the indexer and tries to decrypt them locally. The indexer cannot tell which notes are yours.

Website

• The website is a static page hosted on Vercel. Like any host, Vercel may keep standard server logs (such as network address and time of request) under its own privacy policy.
• We set no cookies and run no analytics. The site stores a few preferences (light or dark theme, the relayer you chose, a local history of your own actions and an address book) in your browser's local storage, on your device only.
• Fonts are served from the site itself, so no request is sent to a font provider.
• Your wallet app (MetaMask or similar) has its own privacy policy.

The relayer

• Our relayer server is configured not to write visitors' network addresses to its logs. It keeps addresses in memory only, to limit how many requests one address can make per minute.
• If you choose to send a withdrawal in a "wave", the proven transaction is held briefly (up to about a day, for the daily big wave) until it is sent or you cancel it.
• Anyone can run a relayer, and you can choose which one to use. A relayer you choose has its own practices. Running your own gives the most privacy.

The blockchain is public

Everything sent to the pool contract is public and permanent: deposit, withdrawal and swap amounts, and the receiving address of a withdrawal. Only the link between a deposit and a later withdrawal or trade is hidden, and only as well as the number of other users allows. Nobody, including us, can delete blockchain data.

Your choices

Run your own relayer, or use a VPN or Tor, to keep your network address from the relayer. Use a fresh recipient address with no history for the best result. You can remove the extension at any time to delete its stored data from your device; keep your recovery phrase if you want to restore the wallet later.

Children

Kavons is not directed at children.

Contact

Questions about this policy or your data: support@kavons.com. More ways to get help are on the support page.

Changes

If we change what we do with data we will update this page and its date.