Privacy Policy

Effective date: April 18, 2026

This policy describes how Rivet (“we”, “us”) handles information when you use the Rivet Wallet browser extension and when you visit rivetpay.xyz (this marketing and documentation site). It is written to align with the Chrome Web Store Developer Program privacy requirements.

Who we are

Rivet Wallet is distributed as a Chromium extension. The website https://rivetpay.xyz hosts product information and documentation. Wallet secrets and account data are processed on your device, not on Rivet-operated wallet servers.

Extension: data we process and where it stays

The extension is non-custodial. We do not operate a service that holds your seed phrase or private keys on our servers.

• Wallet secrets and settings (for example encrypted vault material, wallet password for local encryption, imported seed or private key, network list, connected dapp origins, and locally stored X-Link drafts) are stored using the browser’s extension storage APIs on your device.
• Financial / blockchain data you see in the UI (balances, token lists, NFT metadata, transaction history summaries) is obtained by the extension from blockchain RPC endpoints and related public infrastructure you or we configure in the product (for example public RPC URLs). That data is used to display information to you and to submit transactions you explicitly approve.
• Third-party providers you interact with through the wallet (for example RPC node operators, block explorers opened in the browser, or optional swap/bridge integrations such as Circle where enabled in a build) may process requests in accordance with their own policies. Those parties may see network-level information typical of HTTPS requests (such as IP address) the same way any website request would.

Extension: permissions in plain language

• Broad site access (<all_urls>) is used so the extension can inject the standard Ethereum provider on pages you visit, show optional X-Link UI on supported social pages for rivetpay.xyz links, and call user-configured RPC URLs. The extension does not sell browsing history and is not designed to collect a browsing profile for advertising.
• Storage is required to persist wallet configuration and encrypted material on your device between sessions.
• Alarms are used for optional auto-lock timing.
• Windows may be used to open the wallet or approval UI in a dedicated browser window when appropriate.

rivetpay.xyz (this website)

This site is largely static. Typical hosting providers may log basic technical data (for example IP address, user agent, and request paths) for security and operations. We do not use this site to collect your seed phrase or extension password.

Children

Rivet is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this policy when the product or legal requirements change. The Effective date at the top will be revised; for material changes, we will also try to note them in extension or store release notes when practical.

Contact

For privacy questions related to Rivet, use the contact options provided on the Chrome Web Store listing for Rivet Wallet or the support channel linked from rivetpay.xyz when available.