Privacy policy

The short version

• We never receive your keys, your recovery phrase, your passkey or your password.
• There is no account with us: no name, no email, no sign-up.
• This website and its stats page set no cookies. They count visits through Vercel Analytics, which can’t tell one visitor from another for longer than a day. The wallet runs no analytics. More below.
• While Outis is new, the wallet sends us error reports through PostHog. They are built to leave out your addresses, your balances and your transactions. More below.
• We don’t sell your data.

Who this covers

“Outis” is the wallet (the Chrome extension, the wallet it opens at key.outis.xyz, and the phone apps when they are released) and this website, outis.xyz, with its stats page at outis.xyz/stats. “We” are the people who build and run it. Questions go to privacy@outis.xyz.

What stays on your device

Your keys. Your signing key comes from your passkey, or from your recovery phrase. It is worked out on your device when you unlock the wallet, and it is never sent anywhere. We can’t see it, and we can’t recover it for you.

What the wallet remembers. In your browser’s storage, the wallet keeps your account addresses and the names you give them, the sites you connected, your token list and settings, and the last balances and activity it read. A wallet opened with a password also keeps its key there, encrypted under that password. Forgetting the wallet in its settings, or clearing the site’s data in your browser, erases all of it.

What the extension remembers. The address each site you connected was given, and the network the wallet is on. It runs on the pages you visit only so that a site can find your wallet. It doesn’t read what is on a page, and it keeps no history of where you go.

What the wallet sends, and to whom

Our Starknet node

To show balances and send transactions, the wallet talks to a Starknet node that we run. Like any server, it sees your IP address and what it is asked: which addresses are read, and the transactions you send. We don’t tie these requests to a person or build a profile from them, and we keep server logs only as long as it takes to run and protect the service.

Our indexer

To list your activity, the wallet asks an indexer that we run, beside the node, for the public transactions of the account you have open. It is told that account’s address and sees your IP address, as the node does, and it is given no key. What it answers with is already public on Starknet. The same goes for its server logs as for the node’s.

Our host

This website, its stats page and the wallet’s own pages are served by Vercel, which sees your IP address and your browser as any web host does.

Swap quotes

When you ask for a swap, the wallet may ask Ekubo’s service for a route. Ekubo receives the two tokens and the amount, along with your IP address. It is not told your account.

Sites you connect

A site you connect your wallet to sees your public address. Everything else it has to ask for, and you approve each request. Reading your private balance takes your permission, and the permission expires: after an hour by default, a day at most.

Starknet itself

What you do on Starknet is public and permanent. Anyone can read your public balance and your public transactions, and nobody, us included, can change or delete them.

Private balances

A private payment keeps the amount, the token and who sent it off the public record. The person you pay sees the amount and that it came from you. Using the privacy pool is itself visible on-chain; what you did inside it is not.

The privacy pool is part of Starknet, and we don’t run it. It has compliance rules of its own, such as screening deposits, and those rules are the pool’s.

Private balances are not switched on in the current test release. When they are, a private action needs a zero-knowledge proof, which a proving service builds. The wallet sends that service what the proof is about, including your viewing key: the key that reads your private balance and cannot spend it. A relaying service then sends the proven action to Starknet, so that your account is not its sender. Before private balances are switched on, this page will name those services and say who runs them.

Error reports, while Outis is new

In these early releases the wallet reports errors to us, so that we can find and fix them. The reports go through PostHog, a company that stores them for us.

What a report holds:

• the error, and where in the wallet’s code it happened;
• the wallet’s version, your browser and your operating system;
• the screen you were on, and the time.

PostHog also receives your IP address, as any server does. We have it set not to keep it.

What a report never holds:

• your keys, your recovery phrase, your passkey or your password;
• your account addresses, your balances, or what a transaction contains. Reports are built to leave these out.

We use PostHog for errors only. There are no session recordings and no profile of you, and the reports are not used for advertising.

This is a measure for the early releases, not a fixture. As the wallet settles we will cut the reports back, and then remove them. This page will say so when that happens.

Visits to this website

This website and its stats page at outis.xyz/stats count their visits with Vercel Web Analytics, so that we know whether they are read. For each page you open, it records the page’s address, the site that sent you there, your country, and your browser, operating system and kind of device.

It sets no cookies and stores nothing on your device. To count a visitor once, Vercel works out a fingerprint from your IP address and browser, changes it every day, and doesn’t keep the IP address. Nothing ties a visit to your wallet or to a visit the next day.

The wallet runs no analytics.

What we don’t do

• We don’t sell or rent your data to anyone.
• We don’t follow you across sites.
• We don’t ask who you are in order to use the wallet.

When data is shared

With the companies named on this page, so that they can do the job described: Vercel to serve our pages and count their visits, PostHog to store error reports. They may process data in other countries than yours.

And when the law requires it of us. We have little to give: we hold no keys, no names and no account of yours.

Your choices and your rights

Depending on where you live, you may have the right to ask what we hold about you, and to have it corrected or deleted. Write toprivacy@outis.xyz. Error reports carry no name and no account, so tell us roughly when the error happened and on what device, and we will look for it.

What is on Starknet is not ours to delete.

Children

Outis is not meant for anyone under 18.

Changes to this page

When this page changes, the date at the top changes with it. When the wallet starts sending something new, or stops, this page says so before the release that does it.