Privacy Policy

Wyx is a Chrome extension that shows token and wallet information when you hover a crypto address or cashtag on X (x.com, twitter.com). This page says what the extension reads, what leaves your browser, and how to turn the optional part off.

On x.com and twitter.com the extension reads the text of posts and profile bios in your browser to find crypto addresses and cashtags. That text is processed on your device and is never sent anywhere. The extension does not run on any other site.

To show a card, the address or ticker you hover has to be looked up. Those requests go straight from your browser to the data provider, not to us:

• Token data — DexScreener, Jupiter, GeckoTerminal, CoinGecko
• Token safety checks — RugCheck, honeypot.is
• Wallet balances — Helius (only if you added a Helius API key) and public blockchain RPC endpoints (PublicNode, Blast, Hyperliquid, Sonic, Robinhood Chain)
• Icons — token images from their own hosts, site icons from Google's favicon service

Each provider receives the address or ticker being looked up and, like any website you contact, your IP address. Their own privacy policies apply. Wallet addresses you hover are sent to the balance providers above and to nobody else.

The extension sends anonymous usage data to PostHog (EU cloud, servers in the European Union) so we can see which features are used and what breaks. It is on by default and can be turned off at any time: open the extension popup and switch off Usage data.

What is sent:

• Features used: cards shown, charts opened, links and buttons clicked, settings changed
• The token a card or click was about: chain, symbol and contract address
• The handle of the X account whose post you hovered
• Counts of addresses and cashtags detected, and how many resolved
• Errors: which data provider failed and the status code
• Extension version, operating system, browser language, screen-width range
• Country, derived by PostHog from your IP address. The IP address itself is not stored

What is never sent:

• Wallet addresses, whether you hover them or own them
• Your own X account, who you follow, or the text of any post
• Your API keys
• Anything from sites other than X

Events carry a random identifier created when the extension is installed. It is not linked to your name, email, X account or wallet. Turning usage data off deletes the identifier; turning it back on creates a new one.

Usage data is used only to maintain and improve the extension. It is not sold, not shared with advertisers, and not used to build profiles of individual users. PostHog keeps it for up to one year.

Stored in the browser's extension storage and removed when you uninstall:

• API keys you enter (Helius, CoinGecko). Each key is sent only to its own provider
• Your choice and order of explorer and trade links
• Whether the review prompt was shown or dismissed
• The usage-data setting and the random identifier

Most links in the Trade section of a token card are referral links (currently Axiom, Photon, Trojan, Bonk and SolTradingBot). If you trade through them, Wyx may earn a commission from that platform. The link is only opened when you click it; the extension never trades or connects to a wallet.

wyxtool.xyz (this landing page, not the extension) uses Cloudflare Web Analytics to count anonymous page views. It sets no cookies and stores no personal data.

When you uninstall the extension, your browser opens wyxtool.xyz/uninstall, which asks why. That the page was opened, the answer you click (if any) and the extension version are sent to PostHog as anonymous events. They carry no identifier that links them to your earlier usage. If you had switched Usage data off, the page is not opened.

If this policy changes, the date at the top changes with it. A change that adds a new kind of data is also described in the extension's store listing.

wyxtools@pm.me