ThruScan Wallet privacy policy

The short version

ThruScan Wallet does not collect, store or share any personal data. There is no ThruScan account, no analytics, no tracking and no ThruScan server involved in using the wallet.

What stays on your device

• Your recovery phrase or private key, encrypted with your password (PBKDF2-SHA256 and AES-GCM) and kept in the browser's extension storage. The password itself is never stored.
• Your settings (auto-lock time, network address) and the list of sites you have connected.

None of this is ever sent to ThruScan or anyone else. Removing the extension, or choosing "Remove from this browser", deletes it.

What goes to the Thru network

To show balances and send transactions, the wallet talks directly to a Thru network node (by default rpc.alphanet.thru.org, or one you choose in Settings). It sends your public address and the transactions you approve. Transactions on a blockchain are public by design. The node's operator, not ThruScan, runs that service.

Websites you connect

A website only learns your public address after you approve its connection request, and can only get a signature after you approve that request. You can disconnect any site at any time.

Links

Links in the wallet open pages on thruscan.vercel.app, a public blockchain explorer. Opening them is an ordinary visit to a website.

Contact

Questions: open an issue at github.com/pgreyy/thruscan.