Privacy policy

For the IronDivi Wallet browser extension (Chrome, Edge, Brave, Firefox and Safari). Last changed 26 October 2026.

In short

The wallet collects nothing about you. It has no account, no analytics, no tracking and no advertising. Your recovery phrase and keys never leave your browser. To show balances and send payments it asks the Divi network about your addresses, and those addresses are public on the blockchain anyway.

What stays in your browser

• Your recovery phrase and private keys, encrypted with your password (PBKDF2 and AES-GCM). They are never sent anywhere.
• Your wallet names, addresses, settings, spending limits, the sites you allowed or blocked, and a record of your sends, in the browser's extension storage on this device.
• IronDivi Connect pairings, in the browser's session storage. They are gone when the browser closes.

Removing the extension deletes all of it. Nothing is synced between devices.

What is sent, and to whom

• services.divi.domains (run by the IronDivi project): your public addresses, to read balances and unspent coins, and your signed transactions, to broadcast them. This is how every light wallet works. The server's ordinary web logs record the IP address of each request.
• The testnet faucet (services.divi.domains, or vps1.divi.domains for mainnet), only when you press the faucet button: the one address you ask it to pay.
• An IronDivi Connect relay, the one named in the pairing code (usually divi.cx), only when you pair with a page using its code: encrypted messages between the wallet and that page. The relay cannot read them; it sees their size and timing and the IP address that sent them.
• Websites you allow: a site you allow can ask to connect. Only after you approve does it learn your wallet address and network, and it learns more only as you approve each signature or payment.

What is not done

• No personal data is sold, shared for advertising, or used for anything but running the wallet.
• The wallet does not read the pages you visit. Its page script runs only on sites you allowed, and only to answer the site's wallet requests. When you press Scan this tab on Send, the wallet takes one picture of the tab you are looking at and looks for a payment QR code in it, inside the wallet; the picture is never stored or sent anywhere. A picture you pick for Pick a picture is read the same way.
• There is no remote code: everything the extension runs is in the package you installed.

Questions

The source code is public, so every claim here can be checked. Ask or report a problem at github.com/bshuler/irondivi-browser-extension/issues. If this policy changes, the new version is posted here with a new date.