1. Who We Are
Wallet Highlighter is operated by the company named on our Legal Information page at wallethighlighter.com (“we”, “us”, “our”). That company is the controller of your personal data. Contact: privacy@wallethighlighter.com.
The same address reaches our Data Protection Officer (DPO).
2. What the Extension Does
Wallet Highlighter is a free Chrome browser extension that helps you avoid cryptocurrency scams. It detects wallet addresses on the websites you visit and highlights them with a colour-coded risk indicator (red, amber, or green) based on our assessment of the wallet’s risk profile. If you turn on the optional clipboard check, it also checks addresses you copy or paste, so it can warn you before you send funds to, or communicate with, a high-risk wallet or email address.
3. What Data We Collect.
When you use the Extension, we collect:
• Wallet addresses (including ENS names) detected on web pages you visit, or that you copy or paste
• Email addresses detected on web pages or that you copy or paste, where associated with wallet activity
• URLs of pages where wallet addresses are detected
• Your IP address
• Device and browser information (browser type, version, operating system, language, and time zone)
If you contact us by email, we also collect your name, contact details, and the content of your message.
Clipboard check. The clipboard check is optional and off until you turn it on in the Extension settings and allow the clipboard permission when Chrome asks. It is intended for wallet addresses and email addresses. If you copy or paste other text while the check is switched on, that text may also be sent to us. You can turn it off at any time.
For information about cookies used on our website, see our Cookie Notice.
4. How we collect Data.
• Page content — the Extension scans the visible text of pages you visit for wallet addresses, ENS names, and email addresses.
• Clipboard — only if you have turned on the optional clipboard check (see section 3): when you copy or paste, the text is checked for wallet addresses and email
addresses and may be sent to us for that purpose.
• Technical data — your IP address, browser type, Extension version, language, and time zone are collected when you interact with our services.
• Local storage — your settings and an anonymous identifier are stored in your browser.
5. How We Use Your Data
| Data | Purpose | Lawful Basis |
|---|---|---|
| Wallet addresses (detected or copied) | Provide the risk-scoring and copy/paste warning service | Contract (Art. 6.1(b)): necessary to deliver the service you have requested |
| Wallet addresses, emails, URLs | Maintain and improve the wallet risk database that powers the Extension | Legitimate interest (Art. 6.1(f)) |
| IP address | Security, fraud prevention, service administration | Legitimate interest (Art. 6.1(f)) |
| Device and browser info | Maintain and improve the Extension | Legitimate interest (Art. 6.1(f)) |
| Any data we hold | Comply with legal or regulatory obligations | Legal obligation (Art. 6.1(c)) |
Where we rely on legitimate interest, we have assessed that our interests do not override your rights and freedoms. You can object to this processing at any time (see section 10). Our use of information collected by the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
6. Automated Risk Scoring
The Extension produces automated risk scores for cryptocurrency wallet addresses based on their historical associations with threat actors and other risk factors. These scores are advisory only and are provided to help you make informed decisions. They do not constitute automated decision-making with legal or similarly significant effects on any individual.
7. Who We Share Data With
- Group companies — we share data with companies in our corporate group that operate the wallet risk database the Extension relies on, for the purposes described in this notice.
- Service providers — third parties who help us operate the Extension (hosting, infrastructure, technical support), acting on our behalf under written agreements.
- Authorised bodies — where required by law, or in response to a valid legal request, we may share data with law enforcement agencies, regulatory bodies, or other authorised public bodies.
- Corporate Change — in the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. Where the Chrome Web Store User Data Policy requires it, we will obtain your explicit consent before your data is transferred.
We do not sell your personal data to advertisers or for marketing purposes.
8. International Data Transfers
Your data may be processed in the European Economic Area, the United Kingdom, and the United States. Transfers between the EEA and the UK benefit from mutual adequacy decisions. Transfers to the US are protected by EU Standard Contractual Clauses and, for any transfer from the UK, the UK International Data Transfer Agreement (IDTA).
9. How Long We Keep Data
| Data | Retention | Reason |
|---|---|---|
| IP addresses, URLs | 90 days | Security and service context |
| Wallet addresses and emails | Retained for as long as they have value for fraud prevention, subject to periodic review | Ongoing contribution to financial crime detection |
| Device and browser info | 12 months | Service improvement |
10. Your Rights
Under UK and EU data protection law, you have the right to access, correct, delete, restrict, object to, or port your personal data. Where we rely on legitimate interest, you can object at any time and we will stop processing unless we have compelling grounds to continue.
To exercise any right, contact us using the details in section 17. We will respond within one month. You can also complain to your local data protection authority (e.g. if in the UK, this would be the Information Commissioner (ICO) at ico.org.uk).
11. Third-Party Data Subjects
If your wallet address or email address has been processed because it appeared on a publicly accessible website visited by an Extension user, the rights in section 10 apply to you too. Our lawful basis for processing your data is legitimate interest in supporting fraud detection and financial crime prevention. Contact us using the details in section 17 to exercise your rights.
12. Children
The Extension is not directed at anyone under 18. We do not knowingly collect data from children.
13. Security
We use industry-standard security measures including encryption in transit and at rest. No system is completely secure, but we take the protection of your data seriously.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals in accordance with applicable law.
14. Third-Party Websites
The Extension operates on third-party websites. We are not responsible for the privacy practices of those websites. This notice applies only to data collected by the Extension itself.
15. Changes
We may update this notice from time to time. Material changes will be communicated through the Extension or Chrome Web Store listing.
16. Complaints
If you wish to lodge a complaint about how we process your personal data, please contact us using the details below. We will endeavour to respond to your complaint as soon as possible. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, or your local data protection authority.
17. Contact
Wallet Highlighter
Legal entity, registered office and postal address: see our Legal Information page at wallethighlighter.com.
Highlighter