Privacy policy
Privacy
This is the privacy policy of the XE browser extension, version 0.1.0 and later, and of this site. Last changed 13 October 2026.
In short: your keys stay on your device. The extension sends XE's nodes what any wallet must: your account's address and the payments you sign. It has no analytics, no ads and no tracking, and it reads nothing from the pages you visit.
What the extension keeps on your device
- Your wallet, encrypted with your passphrase. Never the recovery phrase or a key in readable form.
- Your accounts' addresses and names, and recent activity.
- The sites you connected, and what each may ask for.
- Your settings, and which way you last opened a wallet (for example "Google"), so that way is offered first.
- If you paired a phone: the pairing, encrypted.
All of it is stored by your browser for this extension, on this device. It is not synced. Removing the extension deletes it.
What it sends, and to whom
| What | To whom, and why |
|---|---|
| Your account's address; requests for its balance, history and waiting payments; each block (payment) you sign | XE's nodes, through the XE AI Platform's relay (xe-ai.marketized.io) and XE Sim (xe-sim.enter-38b.workers.dev). This is how a payment network works. Blocks are public on the network: anyone can read them, and they cannot be deleted. |
| An address, when you press "Get test XE from the faucet" | XE Sim's faucet, to send that address test XE. |
| A sign-in, only if you choose to sign in with Google, Apple, email or another provider | MetaMask Embedded Wallets (Web3Auth, auth.web3auth.io, api.web3auth.io) and the provider you chose, under their own privacy policies. They learn that you signed in. The extension receives a key from them, derives your XE key from it on your device, and keeps neither your login nor their key. |
| Sealed messages for your phone, only if you paired one | The XE Connect relay (xe-ai.marketized.io), to carry a payment to your phone for approval. They are encrypted between the extension and the phone; the relay cannot read them. |
| A signature or a signed payment, when you approve a site's request | The site that asked, which you connected yourself. |
As with any connection, those servers see your IP address.
What it never sends
- Your recovery phrase, passphrase or private keys.
- The pages you visit, their content, or what you type in them. The extension runs on every site only to announce itself to XE apps and pass their requests; it reads nothing from pages. A site learns nothing about you until you connect it.
- Usage statistics, crash reports, or any identifier of you or your device. There are none.
How what is sent is used
Only to do what you asked: show a balance, submit a payment, sign you in. It is not sold, not shared for advertising, not used to profile you, and not used to decide creditworthiness or lending.
Test networks
This version works on XE Sim and the XE testnet only. XE on them has no value.
The camera and USB
The camera is used only when you scan XE Vault's code, and USB only when you connect a Ledger. Your browser asks you each time it matters. Pictures are read on your device and are not stored or sent.
This site
This site sets no cookies and loads nothing from other sites. It has no analytics. It remembers one thing in your browser, if you choose it: light or dark. Like any web server, the service that hosts it (Cloudflare) processes your IP address to deliver the page.
Changes
A change to what the extension stores or sends comes with a new version and a new date at the top of this page.
Questions about this policy: info@internml.com.