Privacy Policy

Last updated 2026-05-16

Trusty AI is a Chrome extension that flags risky contract addresses on the websites you already visit. This page explains, in plain English, exactly what the extension collects and what it doesn't.

What the extension does

When you visit a supported page, Trusty scans the page text in your browser to find cryptocurrency contract addresses (EVM 0x… and Solana base58 mints). For each address it finds, Trusty fetches a safety verdict from our backend. Hover the pill for a summary; click for the full report.

Supported sites today:

• x.com and twitter.com
• www.binance.com/*/square (Binance Square)

What we collect

On-device only — never leaves your browser

• Page text, used purely to find contract addresses. Nothing stored, nothing transmitted.
• An in-memory cache of recent scan results, scoped to your current page session.
• A persistent random identifier and your subscription status, saved in chrome.storage.local.
• Your local watchlist (saved contract addresses).

Sent to our backend (api.trustyai.tech)

• The contract address you scanned (e.g. 0xabc…123).
• A best-guess chain identifier (bsc, ethereum, solana).
• The persistent random identifier described above (used to associate the optional paid subscription with your install and to sync your watchlist across the extension and trustyai.tech).
• Standard HTTP headers your browser automatically sends to any website.
• On Binance Square pages only: when a Square post containing a contract address scrolls into view, the visible post text and engagement counts are sent to our backend for sentiment classification (bullish / bearish / neutral) and coordinated-shilling detection. Only the resulting sentiment category is persisted long-term — the raw text is discarded after classification.

What we do not collect

• Your X/Twitter account, posts, follows, DMs, or profile data.
• Tweet content from X / Twitter — the extension only extracts contract addresses there.
• Text from any page outside the supported sites listed above.
• Your Binance account, wallet, login state, or any user-identifying data — even when scanning Square posts.
• Which sites you visit beyond the supported sites or how long you spend on them.
• Cookies, fingerprinting, or third-party analytics from inside the extension.

We never sell, share, or rent any data.

Server-side caching

Our backend caches scan results for ~5 minutes per contract address to reduce load on the data sources we query (DexScreener, GoPlus, and others). The cache is keyed only by the contract address — it contains no information about who requested the scan.

Paid tier and payments

If you unlock the paid tier, the extension creates a NOWPayments invoice via our backend and opens NOWPayments' hosted checkout page in a new tab. NOWPayments is a third-party payment processor; their privacy policy applies to anything you do on their checkout page (we never see the payment details). Our backend stores only the persistent random identifier described above, the plan you chose (monthly or yearly), and the resulting subscription expiry — it does not store wallet addresses, transaction hashes, or any other identifying information.

• We never request signatures, transactions, approvals, seed phrases, or private keys from any wallet.
• We never broadcast anything on your behalf.
• The persistent random identifier can be reset at any time by reinstalling the extension; this generates a new identifier and removes the link between your install and the previous subscription.

Permissions, explained

• storage — to remember your subscription status, persistent identifier, watchlist, and recent scans on your device.
• https://trustyai.tech/* — for the website and click-through reports.
• https://api.trustyai.tech/* — to call the Trusty scanning API and the subscription endpoint.
• Content scripts on x.com, twitter.com — to detect contract addresses on the pages you visit.
• Content scripts on www.binance.com/*/square* — to detect contract addresses in Binance Square posts and (for paid users) to send visible post text to our backend for sentiment classification.

The extension does not have access to the rest of the web. It cannot read your other tabs, your bookmarks, your downloads, or any site that isn't listed above.

Children

Trusty is not directed at children under 13 and we do not knowingly collect data from minors.

Changes

This policy may be updated as new platforms (Telegram, Discord, Farcaster) or features ship. Material changes are announced via the project's X account, and the "Last updated" date at the top of this page is bumped.

Contact

Questions about this policy? Reach us on X or Telegram.