Styx Protocol · Legal
Privacy Policy
Last updated: August 11, 2026
1. Our Commitment to Privacy
Styx Protocol ("Styx", "we", "us", or "our") is a privacy-first Solana wallet and protocol. It runs on Solana devnet and it has not been audited. This Privacy Policy explains what data we collect, what we do not collect, and how we protect your information.
By using our mobile application, browser extension, SDK, or any Styx Protocol service (collectively, the "Services"), you agree to the practices described in this policy.
2. Information We Do NOT Collect
We have designed Styx Protocol to minimize data collection. We do not collect, store, or have access to:
- 01
Private keys or seed phrases
your wallet keys are generated and encrypted locally on your device. We never transmit or store them on any server.
- 02
Transaction history
we do not maintain logs of your transactions. On-chain data is publicly available on the Solana blockchain, but we do not aggregate, index, or link it to your identity.
- 03
Personal identity information
we do not require your name, email address, phone number, or any government-issued identification to use the wallet.
- 04
Browsing activity
our browser extension does not monitor, record, or transmit your browsing history.
3. Information We Collect
3.1 Authentication Data (Optional)
If you choose to authenticate via Privy (Google, Apple, email, or SMS), Privy Inc. processes your authentication credentials. We receive a pseudonymous user identifier and, if applicable, an embedded wallet address. We do not receive or store your OAuth tokens, passwords, or full email/phone number.
3.2 On-Chain Data
When you perform transactions, they are recorded on the Solana blockchain. While Styx Protocol employs zero-knowledge proofs, shielded pools and stealth addresses to obscure transaction details, certain metadata (e.g., transaction signatures, timestamps) is inherently public on the blockchain, and a deposit into a shielded pool can currently be paired with its withdrawal by anyone reading the chain.
3.3 Relayer Data
Our relayer service processes shielded transactions and zero-knowledge proofs. The relayer temporarily handles proof data required to submit transactions on-chain. This data is:
Not linked to any personal identifier, the relayer processes cryptographic proofs, not identity data.
3.4 Crash Reports & Diagnostics (Optional)
If you opt in to crash reporting, anonymized diagnostic data may be sent to help us improve the application. This data does not include wallet addresses, balances, transaction details, or any personally identifiable information.
4. Zero-Knowledge Privacy Architecture
Styx Protocol uses the following cryptographic mechanisms, and each entry also states what its mechanism does not do:
- 01
Shielded Pools
funds are deposited into on-chain pools and withdrawn against hash-based STARK proofs over Poseidon and Merkle (Goldilocks field, no elliptic curves in the proof, no trusted setup). A withdrawal republishes the commitment recorded at deposit, so a deposit and its withdrawal can be paired today by anyone reading the chain; the spend circuit that closes that gap is in development.
- 02
Stealth Addresses
recipients can generate one-time addresses. The stealth address is hybrid X25519 and ML-KEM-768 (FIPS 203); the signature that pays it is Ed25519 and stays classical. The sender is not hidden on any leg.
- 03
Merkle Tree Commitments
deposits are stored as hashed commitments in an on-chain Merkle tree. The hash hides the contents of a note; it does not hide which deposit a later withdrawal refers to.
- 04
Client-Side Proof Generation
zero-knowledge proofs are generated on your device or by our Rust-native prover service. When the prover service is used, it receives the secret inputs of your proof (nullifiers, note secrets) and therefore sees them. A full unshield cannot complete on a phone today: the installed mobile build carries a prover blob older than the deployed verifier.
5. Third-Party Services
Styx Protocol integrates with the following third-party services:
Privy
authentication provider. Subject to Privy's Privacy Policy.
Helius / Solana RPC Providers
blockchain data access. RPC requests contain your wallet address when querying balances or submitting transactions.
Jupiter
token price data and swap aggregation. Price queries do not include personal data.
This website is hosted on Vercel and loads Vercel Analytics and Speed Insights, which see your IP address and the pages you visit. Vercel also gives us the country your request came from, which this site stores in a readable styx-country cookie to choose your language. We encourage you to review the privacy policies of these third-party services.
6. Data Storage & Security
All sensitive data (private keys, seed phrases) is encrypted using device-level secure storage (Android Keystore / iOS Keychain) and never transmitted externally.
Cached data (balances, transaction history) is stored locally on your device and can be cleared at any time.
The wallet has no accounts, so there is no account database to breach. The waitlist form on this website is separate: it stores your email address, the country your request came from and your chosen language in our hosted key-value store, and the unsubscribe link in the confirmation email deletes that record. Your IP address is only used to cap signups per hour, as a salted hash, and is not stored.
7. Your Rights
Because we collect minimal data, your rights are straightforward:
- 01
Right to deletion
uninstalling the application removes all locally stored data. If you authenticated via Privy, you may request account deletion through Privy's interface.
- 02
Right to portability
you can export your seed phrase at any time and import it into any compatible Solana wallet.
- 03
Right to transparency
our smart contract source code is publicly verifiable on-chain and on GitHub during the open-source phase of the project.
8. Children's Privacy
Styx Protocol is not directed at individuals under the age of 18. We do not knowingly collect data from minors. If you believe a minor has used our Services, please contact us so we can take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through the application or on our website. Continued use of the Services after changes constitutes acceptance of the revised policy.
10. Contact
For privacy-related inquiries, contact us at: privacy@protocol-01.com