Get the wallet

TOLLkit Wallet privacy policy

For the TOLLkit Wallet extension for Chrome. Effective October 15, 2026. This version adds the Autopilot chat, Connect your AI, the token list and token check, and bots.

Last updated October 15, 2026.

In short: your recovery phrase and keys stay in your browser, encrypted with your password. TOLLkit has no accounts, no analytics and no ads, and never sees your password, phrase or keys. To show balances and send transactions, the wallet talks to blockchain networks and price services, and only sends what each one needs.

Who we are

TOLLkit Wallet is made by Tollkit LLC, USA. Questions: hello@tollkit.dev.

What stays on your computer

The extension stores these in Chrome's extension storage on your computer. They aren't sent to TOLLkit.

  • Your recovery phrase and keys, encrypted with a key made from your password (scrypt, then AES-256-GCM; the Base/Ethereum key also in the standard Ethereum keystore format). Your password is never written to disk.
  • While the wallet is unlocked, your password is kept in Chrome's session storage, which stays in memory, so the wallet keeps running while you use it. It's removed when you lock the wallet, when it auto-locks, or when Chrome closes.
  • Your wallet addresses, settings and spending limits, tokens you added, the sites you've connected (their web addresses), your autopilot rules and bots with their trade counts, your Autopilot chat messages, the address for Connect your AI if you turned it on, and a list of your recent sends, swaps, moves, cash outs, stakes, payments and site transactions.

The extension runs on web pages only so sites can ask to connect to your wallet. It doesn't read page content or record the sites you visit. A site appears in your connected list only after you approve it.

What is sent, and to whom

All of these go over HTTPS, and only when the feature is used.

  • Blockchain networks, to show balances and send what you approve: your addresses and signed transactions go to the Base network's public endpoint (mainnet.base.org), an Ethereum endpoint (ethereum-rpc.publicnode.com) and, for Solana, to TOLLkit's server (api.tollkit.dev), which passes them to our Solana provider, Helius. Transactions you send are public on the blockchain, like any wallet's.
  • Prices: coin names go to Coinbase's public price service, and token contract addresses to DefiLlama. Your address isn't included.
  • Swaps: the coins, amount and your address go through TOLLkit's server to 0x (Base and Ethereum) or Jupiter (Solana) for a price. For Solana swaps, the signed swap goes through the same path to be sent.
  • Move between networks: for USDC, the networks and amount go to Circle's public service (iris-api.circle.com) for its fee, and the transaction's ID to check when it arrives. For ETH, the networks, amount and your address go through TOLLkit's server to Across for a route.
  • Cash out: TOLLkit's server asks Coinbase for a sell link with your address, the network, the coin and the amount, and then asks for that sale's status so the wallet knows where to send. Selling happens on Coinbase's site, under Coinbase's own privacy policy.
  • Stake SOL: your Solana address goes through TOLLkit's server to Helius to list your stake accounts. The list of validators comes from TOLLkit's server.
  • Buy: TOLLkit's server asks Coinbase for a checkout link with your address, the network, the coin and the amount, plus your IP address, which Coinbase requires. Payment happens on Coinbase's site, under Coinbase's own privacy policy.
  • Sites you connect: a site you approve sees your address, and gets the signatures and transactions you approve one by one. You can disconnect a site in Settings.
  • Token balances and lists: to find the tokens you hold, your Base and Ethereum addresses go to the networks' public endpoints and your Ethereum address to Blockscout (eth.blockscout.com); your Solana address and the token mints you hold go to Jupiter (api.jup.ag) for token names and verification. The Uniswap token list (tokens.uniswap.org) is downloaded once a day. Token logos load from the sites the token lists name.
  • Token check: when you add a token, its network and contract or mint address go to TOLLkit's server, which reads the token's contract and market from the blockchain. Your own address isn't sent.
  • Autopilot chat (only if you use it): your messages, the conversation so far, and the wallet facts Claude asks for (such as balances, prices, limits and your rules) go to TOLLkit's server, which sends them to Anthropic's Claude API to get a reply. Each step is paid by your wallet in USDC, so the payment (amount and your paying address) is public on the blockchain. Anthropic handles the data under its commercial terms; TOLLkit's server doesn't store the conversation.
  • Connect your AI (only if you turn it on): the AI app you add the address to sends its requests through TOLLkit's server to the wallet in your browser, and the wallet's answers go back the same way. TOLLkit's server keeps only a one-way hash of the address's secret part, in memory. Anyone who has the full address can use the wallet within your limits, so keep it private; Turn off or New address stops it at once.
  • Bot board: the wallet reads TOLLkit's public bot board. Only if you turn on sharing in the Bots tab, it sends once a day, per bot: the bot type, network, token symbol, status, how many trades went through or failed, the result in percent, and how many days it has run, with a random id for your install. No addresses, dollar amounts, transaction ids or keys.
  • Payments to tools: before the wallet pays a tool or service (including the chat), the tool's web address goes to TOLLkit's seller check (api.tollkit.dev/check). Payment addresses are compared with a public list of sanctioned addresses, downloaded from GitHub.

What TOLLkit's server keeps

TOLLkit's server doesn't save wallet requests to logs or a database. The bot board keeps the shared bot results described above for 30 days. It holds your IP address in memory for about a minute to limit how many requests one computer can make. It never receives your password, recovery phrase or private keys.

What we don't do

  • No analytics, tracking or ads.
  • We don't sell or share data for advertising, credit or lending decisions, or with data brokers.
  • People at TOLLkit don't read your data. We can't see your balances unless you send us your address.

TOLLkit Wallet's use of information it receives follows the Chrome Web Store User Data Policy, including the Limited Use requirements.

Your control

  • Lock the wallet any time, and set auto-lock in Settings.
  • The Autopilot chat, Connect your AI and bot sharing are off until you use or turn them on. New chat clears the chat; Turn off removes the AI address; unticking sharing stops reports.
  • Settings → Remove wallet, or removing the extension, deletes everything it stored in your browser. Keep your recovery phrase: without it, TOLLkit can't restore your wallet, because we never have it.

Changes

If this policy changes, the new version will be posted here with a new effective date.

Other policies: API privacy policy API terms of service Wallet terms of service.