shhhhh wallet
Privacy policy
Last updated: October 9, 2026
In short: your recovery phrase and spending keys never leave your browser. There are no accounts, no analytics, no ads and no tracking. The wallet only sends what it needs to find your payments, show your balances and send your transactions.
What stays on your device
- Your 12-word recovery phrase and spending keys, encrypted with your password, in your browser's extension storage.
- Your wallet's sync data (your payments, balances, activity), encrypted with a key that is itself protected by your password.
- Settings such as auto-lock time, wallet name and side panel choice.
- While unlocked, the wallet is kept in Chrome's session memory so it survives closing the popup. It is cleared when it locks or Chrome closes.
We cannot see, recover or reset your phrase or password. If you lose your 12 words, nobody can restore your wallet.
What is sent, and to whom
| Service | What it receives | Why |
|---|---|---|
| shhhhh node node.shhhhh.site |
Your silent payment scan key and public spend key; the addresses of your coins; transactions you send. | Silent payments can only be found with the scan key: the node uses it, in memory, to find payments made to you. The scan key cannot spend your funds. The node also checks which coins are spent, what inscriptions they carry, current fees and the BTC price, and broadcasts your transactions. |
| UniSat API through our node |
Addresses of your coins. | To read BRC-20 token balances. Our node asks UniSat on your behalf, so UniSat sees our server, not your IP address. |
| mempool.space, blockstream.info | Your public deposit address (bc1p), and your IP address as with any website. | To show coins sent to your deposit address. |
| Sites you connect | Your silent payment address (sp1), only after you approve. | So a site such as the Silent Cubs mint or the shhhhh inscribe page can send to you. A site can only ask for a payment; every payment needs your password in the wallet. |
What our node keeps
- No access logs: no IP addresses, no addresses, no keys are written to disk.
- Only anonymous counters (how many requests per minute, per type) to keep the service healthy.
- IP addresses are used briefly in memory to limit abuse, then forgotten.
What we never do
- No accounts, sign-ups or emails needed.
- No analytics, advertising, fingerprinting or third-party trackers.
- We do not sell, rent or share your data.
Permissions the extension asks for
- storage: keep your encrypted wallet and settings in your browser.
- sidePanel: let you open the wallet in Chrome's side panel if you choose.
- node.shhhhh.site, mempool.space, blockstream.info: the services listed above.
- shhhhh.site/mint and shhhhh.site/inscribe: let our mint and inscribe pages ask to connect, to pay or to inscribe; nothing happens without your approval and password.
Beta
The wallet is in beta. Use small amounts only and keep your 12 words written down on paper.
Changes
If this policy changes, the new version is posted on this page with a new date.