What stays on your device
Everything personal is created and kept in your browser, and is never sent to Beil:
- Your vault: your spending and viewing keys, encrypted with your passphrase (PBKDF2 → AES-256-GCM), plus your activity list and your one-time addresses.
- Small settings, such as the last wallet you connected, stored unencrypted.
Your private balance is found by decrypting notes in your browser: nobody else, including Beil, learns which notes are yours. Clearing this site's data in your browser deletes all of it. Your recovery key is the only way to restore it, and Beil never has it.
What Beil's servers see
The app only connects to Beil's own services (and, for a one-time address shielding its own BNB, one public endpoint that broadcasts that already-signed transaction). The page's Content-Security-Policy makes the browser enforce this list. None of Beil's services keeps access logs or IP addresses.
- Relayer: receives the transactions you ask it to submit, with their proofs, and fee or quote requests (the tokens, amounts and, for a withdrawal, the destination address). Those transactions become public on BNB Chain once sent.
- Indexer: serves public on-chain data, the same to everyone: encrypted notes, the Merkle tree, token information and logos.
- Chain reads: by default your browser reads the chain (balances of your wallet and of your one-time addresses, fees, transaction status) through the relayer's read-only RPC gateway, which forwards a rebuilt request without your IP or headers and logs nothing. A third-party RPC would see your wallet and your fresh exit addresses queried from the same IP — the link Beil exists to break — so a build pointed at another RPC says so in the app.
- Check reads: the wallet re-checks the relayer's quotes and fees against an independent public RPC (by default BNB Chain's own endpoint), so a compromised relayer can't fake the chain data it is checked against. Only global data goes there (pool, router and token addresses, trade amounts, gas price), never your wallet or one-time addresses, but that RPC sees your IP and could match a quote to the trade that follows.
Your IP address reaches Beil's services, as with any website. It is used only in memory to limit how many requests one client can make, and is never stored or logged. Every address the app may connect to, with a live test you can run: API.
Other parties
- BNB Chain: every shield and withdrawal is recorded on BNB Chain, publicly and permanently, like any transaction. What happens inside your private balance is not.
- PancakeSwap and Venus are contracts on BNB Chain. The pool trades and lends with them on-chain; they never receive anything from your browser.
- Your wallet (MetaMask, Trust Wallet, Binance Wallet or another) is its own software, with its own connections and policies.
Beil does not sell, rent or share personal data, and uses none for advertising or profiling.
Your choices
You can delete everything Beil stored on your device at any time, as described above. Beil holds no personal data about you on its servers, so there is nothing to request, correct or delete there. Data already on BNB Chain cannot be changed or deleted by anyone.
Beil is not directed at children under 18.
Changes and contact
If this policy changes, the new version will be posted here with a new date. A contact address will be published before launch.