Onay privacy policy

Effective 29 October 2026

This policy covers the Onay browser extension and the Onay desktop app, free software by the Sourcify team. Onay gives every transaction a second, independent check before your wallet signs it. It is view only and holds no keys.

What the extension does

The extension watches the wallet provider on each web page. When a page asks the wallet to sign a transaction, a message, or typed data, the extension sends a copy of that request to the Onay app on the same computer. The wallet gets the request unchanged and at the same time. The extension never changes a request and never blocks the wallet.

Data the extension handles

• The signing request that a page makes to your wallet: account addresses, amounts, calldata, and the message to sign.
• The origin of the page that makes the request, for example https://app.example.org.
• The answer of the wallet: whether it fulfilled or rejected the request. Not the signature itself.

The extension handles this data for one purpose: to show the request to you in the Onay app, so that you can check it before you sign. It does not read any other page content, and it does not record which pages you visit.

Where the data goes

The extension sends the request only to the Onay app on your computer, through the native messaging interface of the browser, encrypted end to end. The extension makes no network requests and sends nothing to us or to anyone else. It does not sell, share, or transfer user data to third parties.

What the extension stores

The extension stores one thing in the browser: its own key pair for the encrypted channel to the app and the public key of the app it paired with. No request, address, page, or personal information is stored by the extension.

The app and the network

The app checks the request against the chain. For this it asks an Ethereum RPC endpoint for the chain state that the request touches, which shows the addresses and the calls of the request to that endpoint. It asks Sourcify for the verified source code of the contracts that the request names, and it may fetch public descriptors and token lists from the Clear Signing registry and from the publishers of those lists. These requests carry no account of yours other than what the request itself contains, and no identifier of you. The app keeps no history of requests.

Changes and contact

The source code of the extension and the app is public at github.com/sourcifyeth/onay. Changes to this policy appear in that repository and on this page with a new date. Questions about this policy go to the issues of that repository.