Legal · privacy
We collect nothing
There is no account, no sign-up, no cookie, no analytics, no tracking pixel and no form on this website. There is no database behind it and nobody to send your data to.
The key-exposure check
When you check an address or ENS name, your browser sends it straight to public Ethereum endpoints to ask three read-only questions: has this address ever sent a transaction, is it a contract, and what ETH does it hold. The answer is shown in your browser and nothing is stored. The endpoints, tried in turn, are:
- PublicNode (ethereum-rpc.publicnode.com)
- dRPC (eth.drpc.org)
- MEV Blocker (rpc.mevblocker.io)
- Blast API (eth-mainnet.public.blastapi.io)
Each is run by its own provider, which sees the request and your IP address under its own privacy policy. The canary bounty figure is read the same way, with no address of yours involved.
Hosting
The website is static files served by Cloudflare. Like any host, Cloudflare handles standard request data (such as IP address and browser type) to deliver and protect the pages; those logs are Cloudflare's, under its own policy. The restricted-region check at the edge reads only the country of the connection, and nothing records it.
On chain
Anything you do with a vault is a public Ethereum transaction, visible to everyone for good. That is how blockchains work; nobody can delete it.
Nothing loaded from elsewhere
Fonts, images and scripts are served from this website itself. No third-party scripts run here.
Last updated 8 October 2026.